Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dfAO-8bQxrfex-r7Vwa5yo6Ie48.roa
File:                     dfAO-8bQxrfex-r7Vwa5yo6Ie48.roa (raw, json)
Hash identifier:          +KaLahLzR4VlRBQbyC0yWBjSlMnxLC4FPftyS2PTECg=
Subject key identifier:   75:F0:0E:FB:C6:D0:C6:B7:DE:C7:EA:FB:57:06:B9:CA:8E:88:7B:8F
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01828CE56C021FA16FC96EEC198D7978B3CD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dfAO-8bQxrfex-r7Vwa5yo6Ie48.roa
Signing time:             Thu 11 Aug 2022 12:33:41 +0000
ROA not before:           Thu 11 Aug 2022 12:33:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207083
IP address blocks:        77.47.212.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8c:e5:6c:02:1f:a1:6f:c9:6e:ec:19:8d:79:78:b3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Aug 11 12:33:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75f00efbc6d0c6b7dec7eafb5706b9ca8e887b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:6f:81:31:95:fa:65:f7:95:67:50:07:53:
                    84:e2:34:a7:1b:cd:83:b5:45:a9:24:66:08:e1:70:
                    4f:ea:56:22:cf:b1:df:b7:da:8e:9f:b0:0a:98:3f:
                    06:6b:4c:11:bb:dd:90:1e:88:fd:d9:4b:ff:a9:0e:
                    ff:46:19:fc:45:34:85:8a:78:75:ce:7f:cd:b5:dc:
                    8e:b6:73:15:e6:d7:33:58:52:fa:8e:b0:02:80:d7:
                    51:7e:ba:e4:99:c4:91:ac:f2:87:44:0f:eb:e3:ed:
                    53:d9:a5:c9:f1:3e:07:9d:b8:4a:43:22:6e:df:ed:
                    f7:b4:d4:06:25:5c:44:40:86:7e:84:a8:91:4d:ce:
                    27:bb:fd:4d:fc:a7:0d:a4:96:c3:81:ad:89:f8:02:
                    3a:07:4e:60:c1:7b:65:70:ff:82:c9:0f:6d:c9:b1:
                    b7:fc:6d:bd:1a:27:68:45:ad:36:5c:99:55:86:9b:
                    f4:97:a0:24:a0:0f:ad:66:5a:73:3d:18:e0:3f:ea:
                    b7:99:af:65:98:90:3a:24:35:b8:60:56:f0:11:c7:
                    8c:cc:b5:60:4f:af:d0:97:eb:22:ec:35:1b:20:35:
                    2e:08:6b:6e:3e:bb:a9:da:0c:63:18:7c:2d:1a:12:
                    8e:d5:80:70:b2:d8:14:b2:97:bc:50:27:1d:ee:14:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:0E:FB:C6:D0:C6:B7:DE:C7:EA:FB:57:06:B9:CA:8E:88:7B:8F
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/dfAO-8bQxrfex-r7Vwa5yo6Ie48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:02:5c:6b:ff:d2:04:8d:34:11:69:9a:e6:d0:b2:58:17:
         03:7b:14:0b:00:c5:52:d5:f2:31:94:96:b1:27:4e:cc:2c:02:
         4e:d7:47:b6:33:45:c1:4a:20:44:1b:3d:9c:14:80:46:78:8f:
         5e:85:05:f0:36:50:ba:b6:91:cd:e4:08:97:13:90:53:4e:14:
         95:41:e9:43:75:c0:c9:80:b0:6a:51:c2:64:1a:9d:6d:7f:80:
         03:f1:34:8d:8c:84:b4:73:0e:72:93:a6:29:5f:e2:e5:99:7c:
         e9:a1:a5:19:9e:09:2b:e3:2f:2e:af:f2:fb:ad:2b:fc:eb:b2:
         9a:53:07:64:1d:79:21:32:89:95:0d:2d:4a:5e:b4:ac:32:61:
         85:9e:64:86:7b:5f:94:2c:d6:49:37:76:fa:52:92:4f:d0:cd:
         ab:0c:99:73:d9:a9:db:ae:8c:31:f2:db:04:92:ed:64:04:c9:
         bd:8b:27:df:d8:34:eb:db:fc:d8:63:54:a9:a2:d4:24:60:86:
         2d:ec:dc:7f:0f:a4:fc:f9:05:be:9f:2e:fa:2b:08:87:ef:b3:
         95:24:66:48:bd:bf:ad:74:75:9b:8b:05:d9:f1:69:75:24:c4:
         b7:c0:8b:02:74:81:a2:01:a9:82:c2:58:a6:3c:56:03:e5:74:
         86:4c:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org