Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/mJuy06e25316BpUzETroOcWDPzo.roa
File:                     mJuy06e25316BpUzETroOcWDPzo.roa (raw, json)
Hash identifier:          p/pl+z6Ahhwokc1ADkd6xyRhwhPLxxfcU3IGnr6kJDo=
Subject key identifier:   98:9B:B2:D3:A7:B6:E7:7D:7A:06:95:33:11:3A:E8:39:C5:83:3F:3A
Certificate issuer:       /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial:       063A16ED
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/mJuy06e25316BpUzETroOcWDPzo.roa
Signing time:             Sat 14 May 2022 17:54:41 +0000
ROA not before:           Sat 14 May 2022 17:54:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50386
IP address blocks:        77.73.130.0/24 maxlen: 24
                          77.73.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104470253 (0x63a16ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
        Validity
            Not Before: May 14 17:54:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=989bb2d3a7b6e77d7a069533113ae839c5833f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:6c:67:d2:1f:5d:15:0b:3d:3f:db:6a:a8:
                    95:57:7c:1b:9b:86:9e:ec:f9:56:d4:90:48:c5:0a:
                    aa:cf:f8:20:02:90:47:7d:c1:71:ed:ef:96:ea:25:
                    3a:29:6f:f2:d3:22:2a:11:ce:2c:6a:0b:80:fe:95:
                    92:fc:b2:74:e2:d3:c3:aa:2d:54:b1:13:5a:58:ea:
                    f4:d3:a9:a4:c3:07:50:32:bf:f5:32:41:62:3b:12:
                    9d:ee:a4:06:99:d8:79:63:37:13:83:62:58:5c:55:
                    b1:95:59:6c:0c:f0:0f:0a:d3:54:ec:44:36:9c:47:
                    7a:a6:88:0c:52:0e:58:42:50:93:8c:1f:0d:6e:98:
                    67:eb:87:41:20:48:e0:23:e6:1d:62:84:33:17:e6:
                    5c:ec:c2:6e:67:31:0f:0d:bb:8d:d6:22:63:86:9e:
                    98:3a:5f:7b:17:f5:a5:6c:12:c5:15:70:96:fa:13:
                    eb:33:38:3c:60:fd:95:81:fb:f2:cb:51:38:84:2f:
                    16:25:27:75:de:30:f8:bf:da:be:6b:7e:2e:aa:f8:
                    38:e2:41:04:fc:7c:02:65:9e:8b:24:77:47:89:60:
                    2b:e1:df:fe:67:c5:18:8c:42:29:87:f9:44:1a:3e:
                    00:a8:4e:4d:ea:10:9d:fe:53:ab:9b:1e:9a:90:0a:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:B2:D3:A7:B6:E7:7D:7A:06:95:33:11:3A:E8:39:C5:83:3F:3A
            X509v3 Authority Key Identifier:
                keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/mJuy06e25316BpUzETroOcWDPzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.73.130.0/24
                  77.73.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:21:e8:60:ad:ab:b4:4b:ba:76:c4:95:c3:eb:35:f4:f3:53:
         f1:52:4f:ec:d3:41:c9:f4:c8:29:39:0b:ce:bb:6c:34:f8:19:
         62:31:94:82:5f:ab:ac:33:de:b8:32:6e:33:df:2b:de:e7:d7:
         d8:c6:28:31:23:6e:93:31:d9:eb:42:e7:c4:e8:77:c4:da:4e:
         80:ba:81:30:bf:dd:ff:33:b7:06:d1:c0:12:a2:3f:84:c9:2a:
         54:35:fc:15:d0:50:dc:36:59:af:2b:8c:87:17:9b:88:3a:f4:
         da:51:e1:44:11:b2:f5:e1:f7:4b:c2:e5:fa:4c:e0:1c:54:71:
         f0:9d:f9:d0:47:12:7b:ac:05:60:57:b2:b8:e6:e2:f3:ed:df:
         f3:20:5f:e2:da:45:12:df:fc:8c:95:1e:59:b8:c5:b6:dd:a2:
         55:44:86:90:4e:93:02:8a:bb:3c:83:2f:4c:6b:90:76:b0:14:
         1e:f4:99:0f:96:d8:05:6a:f9:63:22:a0:b1:31:c6:8b:a1:7b:
         64:6a:e4:27:b3:37:3f:de:b6:a4:ef:15:10:a6:3e:88:f1:f8:
         ff:97:fb:7e:af:c7:3d:93:5c:3a:b8:3d:6d:1c:7e:75:78:22:
         d7:3d:68:4b:94:2a:f0:13:07:42:4f:01:c1:2a:a8:0f:56:30:
         24:f3:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:18 2024 by rpki-client on console-ams.rpki-client.org