Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/ODnLSb22hMi3p0qBhmYzS_O46Gg.roa
File:                     ODnLSb22hMi3p0qBhmYzS_O46Gg.roa (raw, json)
Hash identifier:          sk/ti1DGqmVQIhR/1pVYWumztSNa1vBJ7B/OIQjWRq0=
Subject key identifier:   38:39:CB:49:BD:B6:84:C8:B7:A7:4A:81:86:66:33:4B:F3:B8:E8:68
Certificate issuer:       /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial:       0A198A8B
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/ODnLSb22hMi3p0qBhmYzS_O46Gg.roa
Signing time:             Wed 29 Jun 2022 10:09:02 +0000
ROA not before:           Wed 29 Jun 2022 10:09:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213363
IP address blocks:        77.83.122.0/24 maxlen: 24
                          77.83.120.0/24 maxlen: 24
                          77.83.123.0/24 maxlen: 24
                          77.83.120.0/22 maxlen: 22
                          77.83.121.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169446027 (0xa198a8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
        Validity
            Not Before: Jun 29 10:09:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3839cb49bdb684c8b7a74a818666334bf3b8e868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:b0:7d:49:25:99:10:54:1c:63:21:ac:e9:
                    a2:b5:d8:09:8d:86:86:a6:2b:db:f7:0c:40:58:89:
                    dd:bf:2b:b6:5b:d6:f2:b6:0c:43:f6:b8:c3:51:60:
                    4b:e1:10:57:2a:34:7d:c7:29:ed:a5:78:00:b7:5f:
                    ef:1e:a2:31:75:8c:a9:24:5e:60:1c:48:61:04:04:
                    a2:c4:80:5d:ed:d7:96:7e:21:1f:4f:59:af:3e:19:
                    fc:07:f4:0f:04:3f:90:3c:c0:41:f2:5a:16:e9:11:
                    e0:d4:d2:4e:c5:e1:32:de:07:d6:0e:5a:77:bf:4b:
                    df:a3:47:70:7e:bb:f7:47:a1:71:8a:d4:64:71:89:
                    03:7c:ab:ca:48:d0:98:d5:64:42:46:0c:c9:ac:9f:
                    94:f7:7a:bf:2d:76:ab:9c:b6:68:0c:71:96:8a:83:
                    79:a9:8e:39:0e:d8:c8:cf:61:35:9e:bf:da:90:92:
                    ed:15:cf:83:fa:66:da:09:e6:23:a5:fa:8c:91:59:
                    d9:ec:78:91:1c:c8:e3:46:2e:44:fc:6a:97:6b:b5:
                    89:c7:62:96:9b:1f:f2:a9:63:1f:ed:d4:34:dc:67:
                    31:0c:53:0d:4c:a4:0a:38:8d:a1:e2:3c:ee:46:2f:
                    84:08:bd:2c:40:ef:a6:3b:09:9b:c8:92:91:8f:97:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:CB:49:BD:B6:84:C8:B7:A7:4A:81:86:66:33:4B:F3:B8:E8:68
            X509v3 Authority Key Identifier:
                keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/ODnLSb22hMi3p0qBhmYzS_O46Gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:a5:17:46:24:ce:e1:ee:eb:a7:96:e3:55:96:19:c0:9f:8c:
         da:50:3b:ca:4a:c8:32:f8:6d:ff:17:6f:35:f1:e3:ea:a3:fc:
         91:d9:84:74:0b:9a:62:1e:7c:4b:35:26:03:fc:80:a5:d5:b6:
         04:34:ff:03:a6:de:0a:dd:07:58:10:43:f9:e9:c7:52:8b:1f:
         a5:dc:1e:57:9c:3d:5c:f4:02:bf:61:da:e3:43:19:41:a7:23:
         27:86:a8:6e:06:51:31:3b:79:30:62:7b:b8:4d:dc:7e:3b:83:
         6f:98:ed:40:4d:e0:04:3e:4f:16:d2:8c:cc:0d:9a:ef:8b:19:
         f9:b4:1e:86:2f:0e:1b:e0:48:93:d2:e1:8b:05:4a:88:a1:07:
         62:e2:86:12:ea:ef:fe:48:ab:48:56:e1:10:b8:ef:ad:97:f7:
         93:27:70:32:74:58:73:45:a6:5c:2b:fb:d5:3e:24:5f:21:e9:
         41:92:5a:49:e1:17:6d:88:51:e0:49:f6:84:70:ec:90:e1:c8:
         08:75:ab:4c:1b:72:c4:c7:cd:74:e7:4b:dc:75:91:39:1c:c8:
         ec:94:ce:d8:0c:8c:4c:b9:a9:d4:4c:da:32:1c:00:47:62:4c:
         9b:7d:db:99:67:3d:35:13:68:69:da:5b:10:92:10:54:67:e0:
         55:43:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:22 2025 by rpki-client