Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Jjj0mADsHnHjXXEkz-UENJ36Vwk.roa
File:                     Jjj0mADsHnHjXXEkz-UENJ36Vwk.roa (raw, json)
Hash identifier:          2jnGn+z9i43r0OaGGZ9kW5hb0XqYrbN/s09uFyRTQWk=
Subject key identifier:   26:38:F4:98:00:EC:1E:71:E3:5D:71:24:CF:E5:04:34:9D:FA:57:09
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A6F1E5E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Jjj0mADsHnHjXXEkz-UENJ36Vwk.roa
Signing time:             Sat 01 Jan 2022 04:51:52 +0000
ROA not before:           Sat 01 Jan 2022 04:51:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39112
IP address blocks:        82.177.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980360798 (0x3a6f1e5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:51:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2638f49800ec1e71e35d7124cfe504349dfa5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:15:27:97:df:76:68:aa:99:93:6d:88:11:
                    45:69:c5:ef:b1:51:f6:af:d2:b4:b8:07:45:b2:b2:
                    76:a3:df:cd:62:da:48:4b:e6:81:c6:b2:95:27:cc:
                    fc:56:e0:96:74:8a:ba:dc:93:ed:89:bf:8a:77:98:
                    2a:3a:1c:bc:83:0c:8b:17:9f:b9:82:ba:b4:7a:df:
                    d2:5a:fc:d7:f7:af:f2:68:c9:14:22:97:bd:98:cc:
                    0b:18:46:62:c7:6c:64:2a:34:f6:86:d9:c0:ba:2d:
                    46:8c:66:78:2a:f9:63:99:b0:35:77:b6:71:d5:2d:
                    5f:08:c1:f5:c9:85:20:e7:31:01:80:9b:65:26:b3:
                    de:79:c3:bc:65:b3:3a:b7:5d:64:27:4b:0d:28:2e:
                    ac:4b:81:a8:18:e0:51:5d:fd:52:49:86:44:6a:57:
                    56:7f:7f:93:c7:e0:e4:74:23:91:48:3e:aa:76:15:
                    5f:3d:5e:e0:e0:3c:59:6d:92:b6:1f:70:9a:12:91:
                    5d:27:77:b5:9c:65:4f:54:ec:08:c6:ae:03:35:6a:
                    c8:24:93:b9:eb:90:27:dc:d2:4c:68:1f:f4:6a:15:
                    fd:e0:2e:4e:fe:15:a0:4d:da:0f:65:a0:18:21:e7:
                    4b:0a:6b:73:b1:4a:bb:12:e9:b1:58:b3:2f:92:b3:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:F4:98:00:EC:1E:71:E3:5D:71:24:CF:E5:04:34:9D:FA:57:09
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Jjj0mADsHnHjXXEkz-UENJ36Vwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:bb:da:2d:35:d0:8f:95:58:a4:7c:78:9d:95:2e:ec:b0:ea:
         38:30:13:1c:25:6f:3a:3a:e2:ad:a7:37:0f:2f:a1:da:9a:96:
         e0:33:99:55:c2:f9:bc:54:f0:81:70:c8:31:a8:b6:0f:e9:99:
         f0:5b:66:98:b1:16:40:89:62:bd:a2:84:08:50:ea:a5:1b:25:
         2e:2e:44:c4:dc:89:2e:b1:b1:28:8d:b8:50:c5:0c:61:b7:f2:
         ce:fe:07:88:05:5c:96:c3:4b:07:11:de:3d:21:bb:37:ab:35:
         e0:18:e6:8a:ac:7b:3b:4e:5b:ea:0d:d9:d9:25:e6:48:fb:96:
         02:a5:a7:34:60:93:b4:59:69:b7:87:93:61:89:00:0d:7d:5b:
         41:b6:42:21:23:94:27:99:51:ff:59:db:13:09:08:82:61:48:
         f2:75:fb:78:b1:f5:23:a8:2d:59:e8:89:b3:ba:30:00:62:cd:
         2f:e9:5e:e8:d9:01:7b:41:ed:38:dc:c0:a4:12:68:f1:9e:b2:
         c6:4d:d6:50:12:69:64:2e:e3:2f:46:c5:7a:97:03:4e:bb:9e:
         e4:0b:bb:58:bd:bd:36:4c:c9:fd:77:83:80:64:0a:74:c3:7c:
         ff:6e:2b:72:4b:15:7d:10:b7:70:89:42:31:d7:78:b8:dd:b2:
         ae:b2:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org