Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EiObXHmBZaB6fH7zWhTT7V4IWDI.roa
File:                     EiObXHmBZaB6fH7zWhTT7V4IWDI.roa (raw, json)
Hash identifier:          FkUm06ZH+n0Zy4neDiHA/w45JbKnqRMFjuDXT+zfB2g=
Subject key identifier:   12:23:9B:5C:79:81:65:A0:7A:7C:7E:F3:5A:14:D3:ED:5E:08:58:32
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0182836EF011A8E28E10D2E7E92328C456FA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EiObXHmBZaB6fH7zWhTT7V4IWDI.roa
Signing time:             Tue 09 Aug 2022 16:27:41 +0000
ROA not before:           Tue 09 Aug 2022 16:27:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3320
IP address blocks:        77.47.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:83:6e:f0:11:a8:e2:8e:10:d2:e7:e9:23:28:c4:56:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Aug  9 16:27:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12239b5c798165a07a7c7ef35a14d3ed5e085832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:e3:5d:71:58:41:9d:97:8f:bd:ec:e6:2c:
                    80:7e:a1:49:3f:2e:13:4c:33:6a:63:72:7e:a8:ac:
                    8b:57:e2:f7:75:1b:aa:94:43:6b:4d:e9:71:2e:48:
                    55:0e:f6:b7:b9:d9:68:65:1b:97:bd:48:95:41:38:
                    d7:4d:c6:8e:c1:29:bd:fc:88:e8:8f:c7:83:f9:b0:
                    ce:e5:5d:01:3f:eb:a8:6a:3d:0c:de:3f:a8:a6:c8:
                    c9:05:c1:bd:4c:c1:40:1d:bb:85:d0:50:8e:3c:83:
                    15:ba:57:2a:33:fc:51:68:2c:b6:51:50:ab:33:c2:
                    db:f0:17:8f:d1:e8:fe:8c:a5:68:33:b5:8a:f1:56:
                    f0:8c:dc:3e:3a:bb:c7:c4:f2:33:41:ed:bb:0a:23:
                    9e:1f:7f:05:3d:b8:55:f6:2c:81:72:d2:05:40:89:
                    4f:38:fd:27:26:87:03:ae:a2:b0:fc:6f:a3:1b:fa:
                    0f:99:3e:ea:7a:f9:ed:7c:44:b4:b1:e2:6c:e1:32:
                    04:5d:13:52:a6:6f:a0:a5:a9:da:ac:3f:4a:42:ec:
                    29:01:5e:f2:3d:59:81:ce:86:9b:7c:52:a5:60:6c:
                    39:20:3c:13:f9:63:43:71:5b:03:ab:0d:00:18:53:
                    76:d2:31:a3:4a:e3:59:16:2e:93:10:17:d1:9b:e1:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:23:9B:5C:79:81:65:A0:7A:7C:7E:F3:5A:14:D3:ED:5E:08:58:32
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EiObXHmBZaB6fH7zWhTT7V4IWDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:1a:71:36:4e:99:43:c7:4f:40:71:3b:35:29:1d:55:a8:
         77:87:43:40:c8:df:20:6a:32:a9:af:6b:bd:86:f4:ce:9e:e1:
         3b:78:bd:af:6b:2f:28:5f:3c:60:b1:62:12:ba:e1:74:c2:22:
         f2:63:1e:25:6f:7d:ff:69:fb:da:7d:50:01:37:e0:e3:29:fd:
         fb:5a:76:9c:f3:76:b3:c9:35:24:ec:77:02:32:25:bd:52:23:
         c4:4e:65:d5:7b:41:2b:22:b6:51:62:75:9b:a5:c0:64:59:4a:
         06:d5:22:da:cc:a3:9a:38:4a:9d:8a:ee:87:fb:d2:dc:3c:c0:
         49:85:0a:85:c9:a3:ef:f3:37:3d:42:7f:ab:a1:76:eb:05:1c:
         2e:6a:52:2c:7c:a7:df:d3:5e:33:d2:68:8e:af:90:dc:55:fe:
         c5:24:2d:34:1f:b8:b5:19:ef:96:f3:7e:66:f0:29:82:11:49:
         41:c1:e1:cd:9f:d8:0a:3f:3e:26:75:9b:df:69:9c:51:07:82:
         68:ca:28:01:79:e8:bd:90:b0:59:86:92:0b:40:63:3e:f6:06:
         70:f3:89:54:f5:8c:a0:cb:62:38:ab:ce:1e:b1:c1:61:15:2d:
         88:29:d9:fd:5a:75:a2:d9:fb:d5:85:1d:73:82:87:39:29:0f:
         f9:27:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org