Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/73cJfCQkVYadiHOvPaMT4dJ0EhM.roa
File:                     73cJfCQkVYadiHOvPaMT4dJ0EhM.roa (raw, json)
Hash identifier:          7jh3m9GuoxfjUfl2gTdLCCWfGZSUeElOhe6vx2Q6/QM=
Subject key identifier:   EF:77:09:7C:24:24:55:86:9D:88:73:AF:3D:A3:13:E1:D2:74:12:13
Certificate issuer:       /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial:       14F074EA
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/73cJfCQkVYadiHOvPaMT4dJ0EhM.roa
Signing time:             Sat 01 Jan 2022 11:03:45 +0000
ROA not before:           Sat 01 Jan 2022 11:03:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43022
IP address blocks:        77.93.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351302890 (0x14f074ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
        Validity
            Not Before: Jan  1 11:03:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef77097c242455869d8873af3da313e1d2741213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:2b:cb:87:85:50:43:91:28:e3:b3:ab:83:
                    83:b6:b0:ba:42:ae:db:a3:bb:6c:43:f2:4d:97:28:
                    48:54:97:55:ad:98:16:3b:7f:bf:d0:87:a1:6c:3d:
                    e1:44:8d:39:07:70:93:6c:5e:10:a5:4d:98:87:c8:
                    d4:10:f6:de:7f:70:eb:ea:0e:11:64:fe:db:67:1d:
                    ae:87:33:a1:5c:3d:32:43:58:f1:f1:40:76:89:84:
                    96:21:9c:4f:5b:57:51:e6:84:e6:a6:c1:71:53:22:
                    f8:79:48:94:7c:34:e3:0a:c4:83:7d:f9:ab:94:17:
                    d8:08:8e:0f:89:e3:ee:2b:69:72:48:b6:a0:ae:ed:
                    e2:fd:26:0a:81:ab:5e:de:8a:00:95:e6:a6:95:27:
                    cc:93:e5:11:32:db:02:e6:ac:63:a7:73:82:61:ae:
                    86:fd:0b:c5:31:74:31:d4:c4:72:bf:14:f9:64:1d:
                    3a:80:9a:35:79:b2:bf:45:1c:7d:82:88:52:b3:e8:
                    4b:10:77:16:1a:20:b0:23:3b:35:bf:d2:96:1b:95:
                    84:86:60:b4:d9:72:d5:30:dc:14:1e:c7:29:29:7e:
                    6e:1d:6f:49:46:77:57:ca:48:7f:1d:6b:5b:f0:af:
                    53:77:b6:25:6c:b7:94:42:9f:94:86:48:34:83:bd:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:77:09:7C:24:24:55:86:9D:88:73:AF:3D:A3:13:E1:D2:74:12:13
            X509v3 Authority Key Identifier:
                keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/73cJfCQkVYadiHOvPaMT4dJ0EhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.93.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:92:c9:29:82:62:9f:09:6c:f9:ef:f7:f3:d8:54:fe:50:ca:
         fb:9e:9b:ad:64:97:6b:9d:e6:0e:ee:08:e2:07:51:7a:6a:2f:
         36:6d:73:25:a2:05:19:d7:4b:ad:7e:9e:fb:8b:16:0c:b3:61:
         da:21:06:e4:c1:84:c7:be:2d:31:99:35:29:8f:13:02:26:bf:
         3a:49:30:23:05:58:d4:df:c9:e2:7d:b7:84:2a:56:7d:26:9f:
         55:28:5b:36:c2:29:ca:e1:3a:d8:1b:94:b2:70:58:8e:f8:d1:
         65:10:85:6f:b3:c7:af:de:0a:dd:d4:a5:78:5e:19:2d:4b:1b:
         23:a8:17:4e:51:dd:eb:28:6c:4b:b8:fe:7d:36:38:ef:33:db:
         c7:f1:81:80:49:dd:2e:0b:f0:8a:34:92:46:bb:61:f2:19:79:
         90:7a:97:85:67:e0:21:a8:fb:47:df:a3:4e:a3:75:29:6f:66:
         2e:c3:b9:b6:37:7a:2b:7a:fe:7a:89:e9:e5:8a:15:0d:aa:7b:
         98:df:3e:ba:24:91:c6:21:c5:d6:d4:80:94:3f:e5:f4:d6:62:
         a6:64:c2:ad:14:4f:04:ab:4e:d6:00:08:ab:f2:48:f2:59:9c:
         9f:cc:ff:7b:ac:0d:ce:dd:87:0f:a0:92:fa:7f:7b:d2:91:06:
         c5:36:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:10 2024 by rpki-client on console-fra.rpki-client.org