Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lgRuSHaee-o1qIpXMHT2PHhYmK4.roa
File:                     lgRuSHaee-o1qIpXMHT2PHhYmK4.roa (raw, json)
Hash identifier:          Ch0q872khtvySBQo/TL3mz0m3zAd1H3UAiR/dqjN6Zw=
Subject key identifier:   96:04:6E:48:76:9E:7B:EA:35:A8:8A:57:30:74:F6:3C:78:58:98:AE
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       07ABD4E5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lgRuSHaee-o1qIpXMHT2PHhYmK4.roa
Signing time:             Sat 01 Jan 2022 05:57:01 +0000
ROA not before:           Sat 01 Jan 2022 05:57:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47479
IP address blocks:        77.105.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128701669 (0x7abd4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  1 05:57:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96046e48769e7bea35a88a573074f63c785898ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:65:7c:84:a2:18:69:1c:87:d9:bd:fc:55:
                    23:1f:01:ca:36:db:36:ec:27:f0:f1:1d:10:85:ff:
                    c8:24:b1:6a:02:71:42:48:de:f6:1a:54:10:90:ff:
                    80:5e:29:57:f3:70:3e:66:1e:28:0c:08:ef:3a:2d:
                    f0:00:0c:d7:04:0c:47:fe:d4:5e:d0:33:9c:b9:74:
                    21:f2:7b:82:aa:40:de:35:2d:9e:84:6a:a8:b8:6f:
                    73:9e:48:c0:d6:a8:8f:4c:b2:bf:9e:28:da:f1:a4:
                    85:f0:41:02:d1:74:4b:12:6f:88:c2:29:93:7a:3c:
                    27:b6:c7:8b:4a:83:22:de:7d:dc:e9:f9:41:82:9c:
                    02:76:90:69:19:0b:c5:16:50:4c:5f:ab:5e:86:a5:
                    d5:6e:3a:56:67:d6:c3:8d:3f:5d:6a:3a:8e:e5:a3:
                    f5:84:63:9b:ee:a8:8d:bb:eb:c1:57:0c:da:c7:1c:
                    6b:a0:2e:b7:e6:26:9f:fb:c7:9a:b9:1b:ed:90:f3:
                    03:cb:98:8f:7b:1a:4f:74:c5:a6:18:df:14:ca:f9:
                    35:7e:77:e7:21:0e:40:04:90:7f:05:27:d6:85:28:
                    c6:74:16:45:14:30:29:94:4c:df:88:4e:b1:98:15:
                    ec:21:87:7c:61:4a:0e:56:6e:73:df:ad:a9:38:4a:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:04:6E:48:76:9E:7B:EA:35:A8:8A:57:30:74:F6:3C:78:58:98:AE
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lgRuSHaee-o1qIpXMHT2PHhYmK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:9a:b1:f8:c6:f5:d5:28:d8:41:50:e0:b5:90:09:db:29:
         d3:d5:4b:39:aa:1c:e7:8a:fa:fe:3a:a7:23:98:16:0f:fe:52:
         4e:53:4a:bf:6b:76:50:81:20:8c:cd:53:22:ee:6d:31:dd:d8:
         b1:8f:9f:a3:13:7e:75:7b:1f:94:27:72:d4:8c:b0:14:b8:75:
         1b:17:8f:b8:fe:69:11:38:93:2f:7d:58:19:f7:24:89:05:61:
         b4:ad:d9:26:d3:9f:eb:a7:78:03:c9:d2:d5:58:fb:fc:22:89:
         c7:5b:f6:8d:02:15:34:5e:13:71:27:ba:78:9a:9e:8c:4c:aa:
         f8:c1:a5:8c:70:ce:20:8d:44:26:77:58:a7:94:69:b8:c4:b0:
         bb:7b:b9:2c:c0:23:28:dc:2b:a3:5a:16:b3:04:41:8c:a4:7f:
         9a:99:8c:96:cc:12:36:c9:b3:6c:0f:35:ea:78:a9:31:d4:2f:
         64:83:ae:a7:84:06:a6:ce:b3:10:eb:e0:de:c0:e7:3f:5c:09:
         de:a7:01:af:a6:0e:61:66:b8:d3:8c:4c:78:81:0b:f7:d8:2a:
         3e:d1:9a:af:08:d6:5c:a6:e8:5e:7e:6b:70:dc:77:d8:49:b4:
         53:c8:d1:de:ea:88:3f:2f:b1:4f:cd:97:85:1c:bb:03:1b:22:
         3a:bb:a2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org