Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/w7O868lFkR3lPioowCifscdQylw.roa
File:                     w7O868lFkR3lPioowCifscdQylw.roa (raw, json)
Hash identifier:          Y2GLEz1DAnlhWEfAgcqlPyDcoEzLQfTaYx7r9NhRXpc=
Subject key identifier:   C3:B3:BC:EB:C9:45:91:1D:E5:3E:2A:28:C0:28:9F:B1:C7:50:CA:5C
Certificate issuer:       /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial:       07328945
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/w7O868lFkR3lPioowCifscdQylw.roa
Signing time:             Sat 01 Jan 2022 13:05:23 +0000
ROA not before:           Sat 01 Jan 2022 13:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60924
IP address blocks:        77.92.177.0/24 maxlen: 24
                          77.92.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120752453 (0x7328945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
        Validity
            Not Before: Jan  1 13:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3b3bcebc945911de53e2a28c0289fb1c750ca5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:5d:70:c6:a8:79:59:67:a3:4f:39:7b:7b:
                    09:07:31:3f:38:fa:f5:ce:9b:32:84:95:26:f7:5c:
                    28:15:77:62:b1:c1:00:6b:e1:1e:be:ad:a8:90:03:
                    44:55:4e:62:fa:a3:9b:df:85:01:a8:b5:bc:6a:96:
                    30:3d:7e:f8:5b:92:cf:34:ec:f0:f7:11:7a:91:b0:
                    fa:aa:83:b6:98:77:25:80:75:fa:1a:de:25:fe:a7:
                    d7:09:ea:d9:7e:67:29:2f:b7:af:00:ca:c9:6e:b7:
                    c6:62:01:b9:74:e4:dc:83:9d:47:67:f1:50:ce:58:
                    83:6b:09:ea:cf:01:a8:c5:09:82:91:9a:e7:da:af:
                    cd:bb:46:9a:65:39:4e:72:85:23:a4:55:ce:de:49:
                    14:a0:fb:88:a8:4b:e0:02:98:ab:e1:b1:0a:a7:91:
                    10:6b:aa:e8:40:5e:85:dd:3c:1e:57:9f:47:f9:b7:
                    c0:49:8b:aa:ef:20:9f:61:16:ee:c8:ec:01:32:92:
                    cd:c1:6e:7c:1a:f0:1e:93:dc:4b:0c:8f:e9:19:2a:
                    44:8e:1f:7d:a3:c0:ba:5b:c9:19:6d:4f:11:4c:12:
                    ac:9e:be:c1:54:6f:a2:34:bd:11:a0:d2:22:cf:8c:
                    b5:7a:76:2d:4e:83:09:9e:0e:bf:f3:14:9c:ea:eb:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B3:BC:EB:C9:45:91:1D:E5:3E:2A:28:C0:28:9F:B1:C7:50:CA:5C
            X509v3 Authority Key Identifier:
                keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/w7O868lFkR3lPioowCifscdQylw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.92.177.0-77.92.178.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:10:c5:7b:39:cc:5a:13:2e:35:c8:1a:d5:22:23:c1:36:
         fe:d8:78:55:f2:35:a0:55:9a:28:b9:fd:ca:5d:5c:bc:46:33:
         1a:2d:37:36:0f:6a:94:24:52:e3:79:3c:dd:87:a7:11:91:40:
         c3:95:6f:7f:1c:82:d2:4a:c4:1f:da:2d:e0:15:9b:c4:7c:87:
         41:83:62:4a:5f:0d:96:c2:f5:78:75:7a:0f:a4:dc:53:d2:26:
         8e:fd:ff:40:c8:7e:6a:59:60:dc:36:a4:f9:3a:07:59:c4:18:
         48:0b:70:dc:f5:3d:80:e9:04:c8:80:91:22:04:0e:e7:6f:dc:
         0c:52:36:bb:25:33:bd:99:6b:9d:34:7a:8a:02:fe:ed:24:6f:
         95:2e:ec:5d:f3:02:01:b8:f5:cf:50:c4:79:81:73:8c:5a:37:
         96:91:8c:21:41:b1:65:41:db:89:f8:11:a8:de:fc:e9:54:4d:
         0c:15:d6:aa:c9:70:53:92:1b:9e:77:2b:1a:39:79:23:d5:7b:
         5c:48:b0:60:9d:1a:0d:db:90:b4:66:a2:59:68:fd:7b:6d:f2:
         d6:b2:04:c2:f7:a0:32:c6:04:dc:1c:15:93:5d:91:0c:ee:f4:
         b1:d0:3f:db:80:b1:8f:40:cd:04:a2:35:28:0a:61:b2:c3:e6:
         12:02:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:21 2023 by rpki-client on console-fra.rpki-client.org