Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GCWaCm7VEEhp9-Sd4DikRQXg8BQ.roa
File:                     GCWaCm7VEEhp9-Sd4DikRQXg8BQ.roa (raw, json)
Hash identifier:          3+3huSenST6jsLw0Fyfs/s08cjPygjtilfJbNwmsTqg=
Subject key identifier:   18:25:9A:0A:6E:D5:10:48:69:F7:E4:9D:E0:38:A4:45:05:E0:F0:14
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1D8D3093
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GCWaCm7VEEhp9-Sd4DikRQXg8BQ.roa
Signing time:             Fri 08 Apr 2022 20:07:17 +0000
ROA not before:           Fri 08 Apr 2022 20:07:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211936
IP address blocks:        77.47.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495792275 (0x1d8d3093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Apr  8 20:07:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18259a0a6ed5104869f7e49de038a44505e0f014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:db:83:c6:26:e9:74:76:7e:1f:70:70:57:
                    1b:5d:a0:81:3a:9b:73:3d:ef:c1:5c:6b:8b:3b:0a:
                    6d:cb:c3:ab:1d:86:64:40:5a:f4:75:4b:aa:0a:6b:
                    fa:55:d7:a8:e6:73:05:51:65:4d:fb:ff:49:00:f7:
                    ad:f7:b3:73:80:af:b3:ab:37:66:9f:d7:db:05:05:
                    f5:8c:c9:07:4c:3a:c9:9f:89:8a:3d:31:f7:70:5a:
                    8e:11:a2:ba:e7:2e:34:b5:b9:97:33:bc:56:b7:1b:
                    f5:06:4f:92:5d:e6:37:76:57:29:55:5e:e1:59:78:
                    ea:5a:6a:9b:2a:90:62:97:7a:8a:28:e0:ef:4e:c8:
                    b6:df:ff:dd:2d:07:18:96:e2:63:7a:07:0f:be:13:
                    68:c4:49:b0:e3:d2:c1:5a:e1:7a:b2:de:8a:68:30:
                    2e:e2:17:60:d4:5b:05:8b:3e:bf:40:b1:db:44:77:
                    8e:a3:7d:85:ad:b5:e5:4b:2d:e9:8e:dc:b7:56:4d:
                    eb:a7:b2:d2:4a:7d:41:f4:90:2b:39:a2:1b:8b:dc:
                    19:3e:3e:8e:f7:24:86:17:45:32:e1:30:91:ea:3f:
                    04:e0:46:41:96:b8:d8:7a:7d:b9:e1:f1:22:ac:d7:
                    5d:0c:0c:08:64:a7:9a:bb:64:d5:14:53:99:3a:0d:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:25:9A:0A:6E:D5:10:48:69:F7:E4:9D:E0:38:A4:45:05:E0:F0:14
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GCWaCm7VEEhp9-Sd4DikRQXg8BQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:93:81:26:ce:01:cb:c4:8f:fe:67:01:86:30:05:8b:9f:da:
         cf:83:4c:e2:c8:40:40:7f:c9:09:ed:b1:c6:1b:66:72:bd:e0:
         b1:f0:5c:51:56:b9:ce:e8:c0:77:09:6f:a1:50:18:58:33:02:
         b8:87:2a:ad:ed:c0:a6:ce:69:06:3b:e2:a4:86:96:b5:ae:de:
         b8:72:af:64:80:81:81:37:11:47:c0:29:23:8a:4f:48:7f:06:
         6f:d7:a7:e2:ec:9d:2e:c5:08:41:10:22:15:c6:3c:dc:b1:f2:
         22:ee:82:60:fb:d6:f6:29:29:db:ff:d7:e3:0d:a1:5c:9e:d3:
         a6:c2:f2:88:37:77:ec:7a:c8:06:44:0a:1f:3f:be:46:bb:48:
         83:ab:1d:e7:24:a5:52:a5:3a:fb:90:46:51:52:24:ad:c0:1e:
         04:d0:ef:91:ae:11:29:f2:92:cd:e0:08:90:7b:5f:17:4b:d6:
         6d:1f:e7:f3:91:68:a1:6e:7f:ee:34:7f:f8:95:dc:ab:fa:d3:
         95:85:2e:e0:6f:5b:90:cd:76:ea:08:03:e7:30:b0:37:a1:77:
         85:dc:49:13:b3:a2:82:6f:5c:25:97:5b:0a:6f:c3:e5:07:ff:
         e5:33:02:89:bb:62:14:d3:a5:b3:46:0d:12:2f:9b:43:fc:39:
         9a:51:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org