Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Mv8hZWDnpVWv0tKC39DZiEIhozg.roa
File:                     Mv8hZWDnpVWv0tKC39DZiEIhozg.roa (raw, json)
Hash identifier:          SD7N5OLqjC3qXtsfAJ0uyN2k6APWsDSQ6OzkSbUeJfY=
Subject key identifier:   32:FF:21:65:60:E7:A5:55:AF:D2:D2:82:DF:D0:D9:88:42:21:A3:38
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       04173187
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Mv8hZWDnpVWv0tKC39DZiEIhozg.roa
Signing time:             Mon 10 Jan 2022 20:44:14 +0000
ROA not before:           Mon 10 Jan 2022 20:44:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34854
IP address blocks:        77.73.35.0/24 maxlen: 24
                          5.183.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68628871 (0x4173187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jan 10 20:44:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32ff216560e7a555afd2d282dfd0d9884221a338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:8f:0a:56:84:e4:39:eb:ec:df:72:4e:b4:
                    37:8c:55:7f:ea:6a:c4:f9:9a:25:f3:85:26:24:6c:
                    f5:6d:f4:b2:ed:43:6d:5e:14:16:f4:1a:5b:b1:cb:
                    ef:e6:f1:d0:50:14:b3:79:70:e7:c9:e3:89:bf:c7:
                    93:c5:23:a7:5e:5b:9a:bc:bd:85:81:1a:06:62:3f:
                    fd:d9:96:e5:e7:15:08:73:b0:00:6d:0d:53:06:d0:
                    81:90:90:e1:cd:41:2c:76:45:4f:e8:22:d2:7d:28:
                    5c:d9:20:ab:5a:d1:fd:2a:0a:c1:54:1c:49:84:37:
                    65:1e:95:14:6c:d1:fa:90:5f:64:f9:54:63:aa:f6:
                    c1:a2:f8:d2:38:b4:79:69:bc:37:34:ab:a4:5c:66:
                    04:0f:c9:c1:77:6c:53:5b:c9:b6:94:95:3f:48:09:
                    d7:10:d4:d0:c8:de:23:7d:28:8f:1c:02:c4:66:aa:
                    a6:fc:4b:50:7a:21:df:63:bb:1a:d4:83:12:8e:2f:
                    f5:13:9f:b3:b5:28:4d:f2:c0:6a:32:a3:8a:3f:26:
                    7c:07:27:6a:7c:af:e4:c2:b3:61:05:6b:db:6f:0c:
                    00:e5:d4:e0:9e:af:85:f7:a1:a1:c7:4f:e4:f1:f7:
                    83:a1:ca:95:28:ce:11:9f:47:96:65:b8:01:36:35:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FF:21:65:60:E7:A5:55:AF:D2:D2:82:DF:D0:D9:88:42:21:A3:38
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Mv8hZWDnpVWv0tKC39DZiEIhozg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.79.0/24
                  77.73.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:ac:4a:d3:53:5b:43:79:1d:d2:bf:81:35:4e:c3:d7:e7:
         f2:5f:d0:f6:0d:35:a2:52:05:2b:5a:97:d4:72:b5:3b:83:df:
         58:4d:e3:f0:a8:d6:f5:29:53:06:21:0e:a6:68:bb:a3:b2:75:
         a8:3c:51:f8:16:45:be:fe:d9:58:23:7c:6e:08:77:14:cd:73:
         e3:12:78:24:cc:53:b0:1a:52:45:9c:d6:35:71:a0:a9:c3:e0:
         39:7b:3d:4b:18:cf:c7:64:15:75:a1:b1:bd:98:b9:ec:30:d2:
         2e:77:9c:88:92:43:86:da:9b:ff:0c:69:e1:1b:65:b9:11:a4:
         47:73:44:12:4b:42:9e:73:44:cc:21:99:50:e7:4a:01:2f:0e:
         38:68:0a:e5:a2:ab:b5:8f:b2:1f:cd:e6:c0:1d:be:74:78:7f:
         cc:3d:80:bd:76:5d:84:e3:44:96:c1:86:0d:86:c6:e9:16:4e:
         d5:84:80:87:b7:5d:fe:d2:03:28:09:5a:d5:bf:08:d1:b4:91:
         c6:82:47:7e:e7:66:7a:0b:9c:cf:c6:a1:6d:5e:14:38:bd:27:
         ab:31:c7:d0:4b:0a:49:a4:20:b1:fb:19:18:4f:66:e9:ff:a7:
         6e:de:de:67:18:04:e4:93:cd:08:83:02:71:0c:f5:d5:aa:62:
         80:ed:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:35 2024 by rpki-client on console-ams.rpki-client.org