Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GV1HeubVoULtQqp6LkdbPUEoL-U.roa
File:                     GV1HeubVoULtQqp6LkdbPUEoL-U.roa (raw, json)
Hash identifier:          D/6Mo/3lASnkczy28TpsdoNdMRxSW0zRlH/AzhrefhQ=
Subject key identifier:   19:5D:47:7A:E6:D5:A1:42:ED:42:AA:7A:2E:47:5B:3D:41:28:2F:E5
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       01847FDDF6A265284E823BF77169ACD384FB
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GV1HeubVoULtQqp6LkdbPUEoL-U.roa
Signing time:             Wed 16 Nov 2022 09:56:03 +0000
ROA not before:           Wed 16 Nov 2022 09:56:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        77.83.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7f:dd:f6:a2:65:28:4e:82:3b:f7:71:69:ac:d3:84:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Nov 16 09:56:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=195d477ae6d5a142ed42aa7a2e475b3d41282fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:b8:80:c1:25:5b:b8:55:dd:fb:80:d6:e2:
                    74:8f:88:a5:6c:c8:f2:a3:69:24:d1:7e:4c:41:9f:
                    08:27:6f:0d:05:e2:65:26:31:77:d0:e4:e4:e5:05:
                    58:ef:ac:ea:ee:d1:94:ab:0f:03:37:fc:0a:9f:d3:
                    1b:3e:52:d4:8c:53:fc:23:f8:23:7f:23:d5:dd:cb:
                    a1:7e:d2:78:49:af:c4:2d:3c:64:de:8e:b1:94:2f:
                    02:41:bd:74:7c:d0:ed:76:4f:b5:30:cd:b8:d7:14:
                    23:3c:1c:5c:38:db:87:ef:8f:96:cb:d4:17:2e:af:
                    15:bd:15:d0:f0:f8:c3:18:13:7c:fb:d5:b9:1a:63:
                    d0:15:63:86:c8:cb:96:2b:bf:b7:bd:c7:fa:39:b1:
                    42:7d:65:10:a0:e6:8f:7d:fa:67:3f:45:e5:92:e4:
                    cd:83:81:1a:7b:2d:3f:af:63:46:0f:7a:d3:11:81:
                    d3:65:4a:66:a9:84:e6:bc:bd:10:09:f0:05:ee:8d:
                    c6:d4:9d:35:ce:29:9d:83:27:e4:4a:15:19:a6:36:
                    46:32:78:4f:1a:da:bd:c8:b3:07:c1:9e:04:30:12:
                    42:a7:7c:8e:2f:8b:23:84:49:20:bf:6c:22:67:f4:
                    a9:24:eb:f0:b4:25:d1:16:c9:01:20:a9:e0:a7:df:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:47:7A:E6:D5:A1:42:ED:42:AA:7A:2E:47:5B:3D:41:28:2F:E5
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GV1HeubVoULtQqp6LkdbPUEoL-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:e7:09:a6:dd:5f:86:e9:a7:c3:f0:77:b1:f3:53:c9:bb:
         28:04:3b:3e:3a:b9:18:af:03:c0:6e:c3:e8:4d:11:e7:fd:15:
         2b:66:de:8d:e7:2d:be:17:58:05:c4:fe:68:4c:51:09:45:a1:
         7b:fe:61:f1:3c:f0:fc:af:e7:5f:c9:22:34:cb:af:11:fd:f8:
         4f:3a:38:1f:7d:10:03:50:87:83:80:63:c6:d4:9b:ea:f0:2b:
         a0:10:8a:a2:64:f4:4e:5a:92:60:fc:c3:f3:4f:11:e4:5c:a4:
         40:60:35:ca:0b:35:50:11:4a:3b:45:2e:f4:2a:c7:2f:5c:40:
         66:98:9b:5f:9c:97:3f:ff:7b:46:af:01:14:4c:a7:8d:2d:75:
         b7:99:2d:f3:6f:a7:17:76:2c:ba:ed:88:70:f9:7a:83:69:27:
         d0:86:09:62:db:3c:83:12:57:4c:f7:2d:91:c2:70:f5:56:64:
         ee:7c:f6:18:ab:e7:09:16:e4:12:0b:fc:fd:fe:0a:11:14:85:
         8f:75:89:70:e3:25:72:d7:14:4f:86:54:6a:68:6d:7f:63:b2:
         96:48:53:32:e0:08:87:8a:7c:59:52:8d:00:63:42:fc:66:14:
         32:3b:eb:e8:24:8f:8e:06:f0:22:bf:91:d7:63:fc:22:bd:18:
         25:6c:29:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR/3faiZShOgjv3cWms04T7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjIxMTE2MDk1NjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTVkNDc3YWU2ZDVhMTQyZWQ0MmFhN2EyZTQ3NWIzZDQxMjgyZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM+4gMElW7hV3fuA1uJ0j4ilbMjy
o2kk0X5MQZ8IJ28NBeJlJjF30OTk5QVY76zq7tGUqw8DN/wKn9MbPlLUjFP8I/gj
fyPV3cuhftJ4Sa/ELTxk3o6xlC8CQb10fNDtdk+1MM241xQjPBxcONuH74+Wy9QX
Lq8VvRXQ8PjDGBN8+9W5GmPQFWOGyMuWK7+3vcf6ObFCfWUQoOaPffpnP0XlkuTN
g4Eaey0/r2NGD3rTEYHTZUpmqYTmvL0QCfAF7o3G1J01zimdgyfkShUZpjZGMnhP
Gtq9yLMHwZ4EMBJCp3yOL4sjhEkgv2wiZ/SpJOvwtCXRFskBIKngp9/bbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBldR3rm1aFC7UKqei5HWz1BKC/lMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvR1YxSGV1YlZvVUx0UXFwNkxrZGJQVUVvTC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVP0MA0G
CSqGSIb3DQEBCwUAA4IBAQAVxecJpt1fhumnw/B3sfNTybsoBDs+OrkYrwPAbsPo
TRHn/RUrZt6N5y2+F1gFxP5oTFEJRaF7/mHxPPD8r+dfySI0y68R/fhPOjgffRAD
UIeDgGPG1Jvq8CugEIqiZPROWpJg/MPzTxHkXKRAYDXKCzVQEUo7RS70KscvXEBm
mJtfnJc//3tGrwEUTKeNLXW3mS3zb6cXdiy67Yhw+XqDaSfQhgli2zyDEldM9y2R
wnD1VmTufPYYq+cJFuQSC/z9/goRFIWPdYlw4yVy1xRPhlRqaG1/Y7KWSFMy4AiH
inxZUo0AY0L8ZhQyO+voJI+OBvAiv5HXY/wivRglbCkl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org