Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J59i9zi3z7u_WlW4IU5qyE-Tu1c.roa
File:                     J59i9zi3z7u_WlW4IU5qyE-Tu1c.roa (raw, json)
Hash identifier:          fMaiCK4HXVf4zDXvgJ9Z/3Fq0eFkLOyohNaVdZNFC18=
Subject key identifier:   27:9F:62:F7:38:B7:CF:BB:BF:5A:55:B8:21:4E:6A:C8:4F:93:BB:57
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       2B2EEBFE
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J59i9zi3z7u_WlW4IU5qyE-Tu1c.roa
Signing time:             Wed 05 Jan 2022 06:01:11 +0000
ROA not before:           Wed 05 Jan 2022 06:01:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211516
IP address blocks:        77.65.220.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724495358 (0x2b2eebfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  5 06:01:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=279f62f738b7cfbbbf5a55b8214e6ac84f93bb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:ef:8a:ca:1a:bd:4c:68:72:d4:0f:fe:94:
                    73:10:71:44:96:be:06:4b:86:0c:3f:b5:9b:9d:65:
                    23:27:7b:93:66:c4:68:81:86:c6:84:dd:4c:26:56:
                    0f:5e:27:cf:68:31:29:00:1a:da:ce:e7:aa:84:12:
                    37:99:04:a2:b0:bb:3f:d0:e6:7d:09:a4:fd:7d:8a:
                    55:91:d5:05:e5:28:33:36:66:13:15:4c:6f:a0:89:
                    36:e0:d8:25:38:e2:ed:48:27:53:1b:a6:9c:fc:64:
                    2e:3a:b7:31:04:b6:ee:b3:05:9f:87:58:db:f8:36:
                    3d:03:e7:82:c1:f7:87:04:41:e5:5c:8b:e3:dd:15:
                    16:27:51:8f:c6:bc:a3:85:b5:c2:7c:2d:32:60:bc:
                    b8:05:97:56:8c:ae:31:ab:ff:a0:1f:7a:a9:1b:ec:
                    8e:aa:27:a4:bd:c4:7f:69:0d:aa:e5:1f:5a:49:71:
                    15:3e:94:44:0c:ae:3b:6b:10:1c:03:c4:4b:99:22:
                    5b:9c:f8:14:9f:ed:92:5c:e0:ae:b7:ee:af:5b:8a:
                    e9:50:8e:bc:f6:7e:2e:98:df:db:23:78:4b:08:7c:
                    1e:c6:6e:d2:23:5d:b7:61:68:4c:5b:a0:e2:9f:a7:
                    8d:c6:d6:c4:44:9f:ed:86:48:d0:bb:79:ef:c3:15:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:62:F7:38:B7:CF:BB:BF:5A:55:B8:21:4E:6A:C8:4F:93:BB:57
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/J59i9zi3z7u_WlW4IU5qyE-Tu1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:0a:1b:9b:bf:43:31:5d:5b:e4:ea:fa:5f:46:89:b3:c6:
         4e:22:e0:35:d6:f9:42:35:21:6c:d1:5c:76:15:7f:90:0e:be:
         a7:73:03:99:01:0f:cb:9c:2b:1e:b4:f8:30:2f:43:68:cb:7d:
         76:de:0f:a2:b4:a0:38:a8:c4:ae:49:73:54:4e:2b:2c:5c:7a:
         3e:da:c5:59:a6:2e:22:43:a8:f7:fa:f3:3d:ca:3c:7f:09:ab:
         c2:29:b7:6e:71:ef:28:0e:eb:4e:b0:31:f5:71:7c:f0:e4:62:
         89:c7:76:01:26:4d:95:1e:42:a3:88:e8:28:ea:50:62:78:b4:
         f1:bf:48:f8:e1:42:94:b3:06:9a:73:33:7a:24:7d:43:f8:e8:
         45:01:f3:13:f3:6e:0c:f8:5d:74:f4:52:e5:91:3d:ea:14:3f:
         2b:ab:26:18:79:08:5c:56:72:d7:6c:87:61:fc:5c:05:93:1a:
         ed:75:53:f4:c9:ca:e7:d6:f8:e2:3c:a2:1a:55:00:c4:ef:9e:
         cc:1b:42:63:d7:4a:33:00:83:0d:f3:e6:2b:72:61:4c:cc:e9:
         ce:b4:7d:32:58:82:df:29:22:96:96:ab:2d:18:b3:cd:a4:e4:
         c3:bc:21:81:74:50:f9:01:12:cf:c6:ad:82:09:58:d0:9e:9b:
         dd:9e:a5:56
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKy7r/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
NTA2MDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjc5ZjYyZjczOGI3
Y2ZiYmJmNWE1NWI4MjE0ZTZhYzg0ZjkzYmI1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKH74rKGr1MaHLUD/6UcxBxRJa+BkuGDD+1m51lIyd7k2bE
aIGGxoTdTCZWD14nz2gxKQAa2s7nqoQSN5kEorC7P9DmfQmk/X2KVZHVBeUoMzZm
ExVMb6CJNuDYJTji7UgnUxumnPxkLjq3MQS27rMFn4dY2/g2PQPngsH3hwRB5VyL
490VFidRj8a8o4W1wnwtMmC8uAWXVoyuMav/oB96qRvsjqonpL3Ef2kNquUfWklx
FT6URAyuO2sQHAPES5kiW5z4FJ/tklzgrrfur1uK6VCOvPZ+Lpjf2yN4Swh8HsZu
0iNdt2FoTFug4p+njcbWxESf7YZI0Lt578MVMi8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQnn2L3OLfPu79aVbghTmrIT5O7VzAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L0o1OWk5emkzejd1X1dsVzRJVTVxeUUtVHUxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAU1B3DANBgkqhkiG9w0BAQsFAAOC
AQEASqwKG5u/QzFdW+Tq+l9GibPGTiLgNdb5QjUhbNFcdhV/kA6+p3MDmQEPy5wr
HrT4MC9DaMt9dt4PorSgOKjErklzVE4rLFx6PtrFWaYuIkOo9/rzPco8fwmrwim3
bnHvKA7rTrAx9XF88ORiicd2ASZNlR5Co4joKOpQYni08b9I+OFClLMGmnMzeiR9
Q/joRQHzE/NuDPhddPRS5ZE96hQ/K6smGHkIXFZy12yHYfxcBZMa7XVT9MnK59b4
4jyiGlUAxO+ezBtCY9dKMwCDDfPmK3JhTMzpzrR9MliC3ykilparLRizzaTkw7wh
gXRQ+QESz8atgglY0J6b3Z6lVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org