Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w3lyjvVqwh0CiezK7f7zyRnhbpI.roa
File:                     w3lyjvVqwh0CiezK7f7zyRnhbpI.roa (raw, json)
Hash identifier:          0CPYA8OskeJC9sMOCzPYpyJuU68f1RYmDjlF3O2xOrQ=
Subject key identifier:   C3:79:72:8E:F5:6A:C2:1D:02:89:EC:CA:ED:FE:F3:C9:19:E1:6E:92
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       018239674052B373C3123B415B4DDF1CB2E1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w3lyjvVqwh0CiezK7f7zyRnhbpI.roa
Signing time:             Tue 26 Jul 2022 07:27:24 +0000
ROA not before:           Tue 26 Jul 2022 07:27:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        77.105.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:39:67:40:52:b3:73:c3:12:3b:41:5b:4d:df:1c:b2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul 26 07:27:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c379728ef56ac21d0289eccaedfef3c919e16e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:75:d2:2d:08:02:18:61:9b:d1:92:e7:60:
                    06:8f:17:3a:5b:b4:ea:f6:df:f5:e0:e2:41:49:7a:
                    24:54:7c:b9:50:e9:4c:cb:fa:dd:cd:cf:5e:55:94:
                    b0:50:33:28:a2:42:2c:e8:5c:83:e4:c6:d1:90:10:
                    99:b4:d1:c1:7d:c5:90:66:7e:e3:60:40:93:9d:0a:
                    16:b3:6f:42:54:2d:a9:9d:44:5e:7a:b7:24:02:b3:
                    27:fe:67:e9:ac:4c:d6:c3:d7:43:d8:05:8a:07:54:
                    3d:6d:f4:dd:dc:d3:50:99:e3:26:ac:9b:31:9f:aa:
                    8b:4d:30:00:00:4f:8e:a4:bf:e0:d1:19:03:0a:03:
                    cb:b2:e5:1a:78:9f:d7:df:b8:bc:7d:a9:a3:10:58:
                    82:ad:34:69:15:6f:b4:a5:9f:97:3d:37:75:41:91:
                    b4:7a:d2:6a:e1:a9:f7:9e:d8:d3:22:fe:69:b6:70:
                    79:54:47:30:8b:1b:20:67:d0:94:03:c6:e1:47:24:
                    2d:ea:a4:95:00:aa:91:48:a6:1a:39:c2:be:8d:51:
                    e5:55:b9:42:83:e5:33:1b:85:96:08:70:02:aa:3b:
                    7e:f6:8d:c9:12:d0:2c:3a:22:13:86:63:0b:9c:ed:
                    44:08:a0:fb:88:7e:05:8e:83:44:26:7b:5d:a1:e8:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:79:72:8E:F5:6A:C2:1D:02:89:EC:CA:ED:FE:F3:C9:19:E1:6E:92
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w3lyjvVqwh0CiezK7f7zyRnhbpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:38:7e:31:ac:9b:40:7f:bd:11:9c:e8:d0:5f:4c:90:ca:
         76:4c:b8:12:bc:16:03:65:4b:79:7b:a6:76:f9:47:b8:8d:2f:
         ef:29:f6:43:45:0b:19:5e:28:ec:d8:97:24:5f:85:d8:6a:e9:
         fe:5c:bb:71:4b:72:ed:ef:04:de:63:95:7d:41:d5:e1:97:42:
         ef:95:24:f5:e1:75:35:b4:30:68:7f:a2:f5:ec:04:64:67:f3:
         47:4b:da:82:22:12:b6:0a:63:8c:c6:2f:52:32:78:8a:fe:93:
         ee:17:b6:04:cc:60:ae:e7:48:20:10:94:bb:b9:05:44:f9:f6:
         4f:b4:ad:59:fe:fc:6e:78:3e:2e:27:b3:dc:a5:61:3c:2f:ae:
         62:e9:2c:ae:4f:c5:8b:d3:10:11:f1:23:8f:52:d5:d5:5f:c0:
         95:a4:4f:0b:84:5a:71:5b:6c:74:95:d6:b6:fd:fc:8a:9e:e0:
         90:02:9b:e7:cd:26:ba:23:f6:fa:2c:db:f7:d9:08:12:0b:11:
         22:64:16:06:63:db:89:c3:b4:1b:ad:d7:a3:6f:59:b2:4e:44:
         96:22:c3:51:bd:a8:8e:98:cc:d0:ea:11:2b:c8:d2:a8:ec:1a:
         6f:dd:f1:e8:fe:38:04:b2:b1:37:99:02:4d:39:ba:db:ad:7b:
         16:ea:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org