Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NDEYUTrfru_P7THCzsKkHSCzTtA.roa
File:                     NDEYUTrfru_P7THCzsKkHSCzTtA.roa (raw, json)
Hash identifier:          89MMJFxb4H0aq4rAYSd1gUqbnkU+hBNASaTOY4cYc6E=
Subject key identifier:   34:31:18:51:3A:DF:AE:EF:CF:ED:31:C2:CE:C2:A4:1D:20:B3:4E:D0
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       07A934E8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NDEYUTrfru_P7THCzsKkHSCzTtA.roa
Signing time:             Sat 01 Jan 2022 05:56:59 +0000
ROA not before:           Sat 01 Jan 2022 05:56:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        77.105.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128529640 (0x7a934e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  1 05:56:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=343118513adfaeefcfed31c2cec2a41d20b34ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:c4:f9:2f:f5:1c:82:98:9f:4c:14:67:95:
                    40:b4:a2:0c:6c:e9:4d:ec:a4:75:c0:57:10:53:58:
                    7b:2e:38:20:91:87:06:6b:be:e9:88:eb:0f:cb:85:
                    18:52:05:35:4b:f1:b2:02:0c:13:5d:74:74:6f:40:
                    5f:39:e9:bc:1e:f5:75:a3:cd:80:9d:da:1c:ae:4b:
                    ee:25:86:f4:98:7a:2b:50:b2:39:1e:e3:43:21:01:
                    c6:ad:0d:f8:7b:48:2f:15:8a:e2:96:ce:8c:d7:25:
                    90:e5:0e:97:f7:19:af:ca:ff:f9:c0:4f:29:a7:99:
                    47:c9:c5:11:bc:55:b8:00:7a:87:9c:5a:91:11:a6:
                    8e:1d:e0:b8:91:0d:46:79:5b:2c:d7:92:e9:5f:db:
                    73:d9:ee:e0:82:79:d1:80:4d:9e:8a:e0:0f:d3:53:
                    17:34:6e:20:15:00:79:b1:6f:ae:d2:89:46:d9:df:
                    d1:45:36:c8:72:3e:a0:da:6f:94:3d:a0:ed:04:db:
                    a7:42:1a:58:82:0e:f9:9a:50:aa:36:04:3b:ec:b4:
                    fa:1b:e7:69:0c:95:82:61:c9:75:2a:94:d7:ee:ca:
                    28:87:18:9d:50:a2:c9:21:d2:e4:98:b1:38:b2:63:
                    88:00:d2:b3:ae:2a:e6:78:4c:e4:b1:c3:ce:19:d8:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:31:18:51:3A:DF:AE:EF:CF:ED:31:C2:CE:C2:A4:1D:20:B3:4E:D0
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NDEYUTrfru_P7THCzsKkHSCzTtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:9e:78:78:f9:df:c5:84:76:0d:54:cf:c2:84:33:f1:ef:
         6f:49:99:93:7a:4f:b7:5a:e2:c2:11:ec:59:31:7d:bc:f4:ac:
         04:71:a8:49:1a:75:d8:ea:52:3c:f2:d3:bf:90:30:fb:99:e0:
         08:a1:4b:6f:6c:d7:8b:3e:48:4b:e5:dc:de:7a:c6:73:22:51:
         d8:49:4b:94:57:cb:1f:4d:79:8c:28:39:76:48:ca:9b:07:87:
         b8:4c:0f:b6:94:3a:dd:b3:e7:58:91:48:66:36:64:b1:74:87:
         08:9e:d2:49:b5:2d:96:20:80:d0:8a:ad:b4:7f:af:18:2b:17:
         9e:4e:67:f8:ca:5f:c5:6a:09:96:cf:64:26:58:f0:ca:fd:4b:
         f7:b8:0f:d7:44:d5:c0:a0:84:42:a8:a0:d7:d4:4d:c1:27:cc:
         a5:3e:02:c0:c5:d5:65:93:8d:1e:eb:dd:56:8d:0b:f2:e4:25:
         d3:ae:84:1e:43:12:a2:c1:94:77:2b:5e:35:18:0c:a1:df:bc:
         71:6e:8b:7f:1a:f4:46:eb:52:fb:c9:7e:d3:53:1b:56:9a:42:
         f4:b4:25:cb:72:ab:45:0d:5d:96:21:35:77:1e:68:1f:b8:bb:
         7f:6e:0a:43:16:c9:1f:2e:a2:9a:57:d7:87:93:e9:5f:7f:5b:
         53:63:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org