Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wddEXdtQOJkTg_7tco2Q1QAy6FE.roa
File:                     wddEXdtQOJkTg_7tco2Q1QAy6FE.roa (raw, json)
Hash identifier:          t1OLifg9xwyR+V5EomXZ+f/tpFn9di8EOv23if7wVqU=
Subject key identifier:   C1:D7:44:5D:DB:50:38:99:13:83:FE:ED:72:8D:90:D5:00:32:E8:51
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       4321D3EB
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wddEXdtQOJkTg_7tco2Q1QAy6FE.roa
Signing time:             Wed 25 May 2022 06:12:13 +0000
ROA not before:           Wed 25 May 2022 06:12:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60403
IP address blocks:        77.81.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126290411 (0x4321d3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May 25 06:12:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1d7445ddb5038991383feed728d90d50032e851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:05:64:18:be:d9:da:41:d2:1d:e5:27:00:
                    48:6e:6d:1e:54:4e:1d:7b:06:96:be:f9:e9:99:8a:
                    d9:63:84:44:d0:5d:37:8b:42:b6:6d:e2:86:14:f6:
                    8b:96:9b:cb:83:14:a8:47:6c:c1:03:a9:57:44:27:
                    61:24:63:b9:ae:ab:20:62:0f:39:95:1c:d9:11:fb:
                    31:d8:0d:33:17:3f:c9:86:13:61:c7:f5:67:12:f6:
                    ee:89:94:e2:7b:89:af:ac:53:19:11:35:87:0a:94:
                    61:40:e4:71:5e:39:11:97:a6:d0:77:13:42:04:a9:
                    59:0e:6a:1f:df:ce:e6:5d:e5:a8:6c:21:17:19:d4:
                    03:4c:dc:c4:01:e3:74:91:0b:97:51:36:75:a4:ff:
                    a5:36:4c:82:fc:0d:f3:db:65:d7:e0:52:8f:18:e2:
                    14:c0:f0:58:1a:98:66:98:e1:4f:56:0b:fd:57:c7:
                    0a:2c:41:2e:d9:06:00:54:a7:45:2c:2d:0c:c6:92:
                    0c:18:c9:2f:81:16:19:c0:65:f3:ac:30:db:7a:e6:
                    b7:a8:f3:62:5f:b9:35:3e:73:1f:30:c4:c3:67:47:
                    e7:64:f4:93:38:d1:ab:29:43:41:eb:14:99:a8:d5:
                    54:05:6a:8b:f3:9a:6e:6d:fa:92:95:53:f6:15:b3:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D7:44:5D:DB:50:38:99:13:83:FE:ED:72:8D:90:D5:00:32:E8:51
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wddEXdtQOJkTg_7tco2Q1QAy6FE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:8d:c0:f3:a1:2b:3b:8c:7c:65:e2:ef:d5:f1:27:1f:08:
         50:b8:d0:76:7e:c9:40:a5:b5:9c:9f:da:88:24:8f:7d:76:1a:
         be:eb:d0:bc:a9:5a:04:55:66:a4:54:8f:86:0e:91:92:8c:e4:
         87:29:a0:80:15:c6:cf:ef:51:ec:bf:dc:d2:68:06:82:90:0c:
         55:74:2a:b6:6a:cc:5a:e4:23:75:44:cd:33:ea:80:1c:11:6f:
         03:72:09:d5:65:ca:bc:d7:11:c4:28:33:f5:79:58:b5:63:eb:
         56:4c:64:4f:ff:0d:9a:2a:6d:54:e8:64:15:c4:b6:5a:d5:37:
         a2:69:d9:44:4a:cf:a7:4f:19:8b:1f:30:79:e7:39:d6:9f:08:
         8e:23:09:cb:cf:2c:d2:1f:44:99:74:fe:b9:a1:8e:4c:66:d6:
         25:ab:8a:b5:c5:22:48:f9:b4:4d:cf:e1:d0:8e:30:07:59:27:
         25:c7:14:ad:e1:d9:9c:f6:98:13:fe:d5:3c:35:4f:dd:23:c4:
         29:e8:67:d7:6f:b5:7f:5b:5a:1c:66:8d:ec:9b:ec:2f:8c:75:
         af:6b:3f:90:d2:37:87:b4:9d:69:a8:2b:19:a6:f8:a4:aa:d0:
         06:c1:54:92:df:36:26:96:13:9b:63:50:38:6c:ef:72:b6:f9:
         0a:8c:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org