Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/sGUWiTaAAUh_Wuvb4PncB9q1ldk.roa
File:                     sGUWiTaAAUh_Wuvb4PncB9q1ldk.roa (raw, json)
Hash identifier:          HxAQXHi4NycRHsuPlKHqcKiRDBErMOIXXJ3P8lYeROw=
Subject key identifier:   B0:65:16:89:36:80:01:48:7F:5A:EB:DB:E0:F9:DC:07:DA:B5:95:D9
Certificate issuer:       /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial:       0622DC30
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/sGUWiTaAAUh_Wuvb4PncB9q1ldk.roa
Signing time:             Fri 06 May 2022 07:04:15 +0000
ROA not before:           Fri 06 May 2022 07:04:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        77.73.129.0/24 maxlen: 24
                          77.73.132.0/24 maxlen: 24
                          77.73.134.0/24 maxlen: 24
                          77.73.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102947888 (0x622dc30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
        Validity
            Not Before: May  6 07:04:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0651689368001487f5aebdbe0f9dc07dab595d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:83:30:3e:69:ac:85:ea:11:6a:9a:be:eb:
                    1d:f5:05:d5:7a:8a:d5:4e:73:cf:e1:c0:24:67:74:
                    28:2f:15:f8:71:d5:f8:76:af:bc:54:6f:69:96:d9:
                    a7:88:71:8a:98:b8:1e:87:73:d2:84:09:e4:80:2c:
                    4e:eb:8b:42:93:17:b3:11:d1:14:ab:22:f7:90:d8:
                    ee:1e:6e:2e:d0:00:c0:5f:8d:6a:9b:04:cb:96:a4:
                    aa:f3:4c:7c:ed:ed:04:ed:35:3f:95:9e:31:60:88:
                    26:3c:de:62:55:98:ad:91:10:ca:0e:d5:8f:8c:03:
                    95:48:56:4d:c0:cf:a4:11:2b:c1:2e:85:57:33:af:
                    86:2a:67:4b:5e:69:4a:14:d5:6d:f5:52:90:97:e5:
                    97:43:7e:5c:94:f4:1b:b5:d7:85:49:25:30:e8:b9:
                    46:20:2e:f8:16:32:d9:78:3e:4b:79:df:bd:81:31:
                    a7:ac:01:a8:e9:74:7f:3c:b0:fb:b6:4e:79:00:ad:
                    a3:22:d0:8d:61:0c:00:2d:2b:c8:84:4e:b9:46:d0:
                    18:b4:1e:e5:8c:13:68:76:5b:a1:6a:53:9d:e7:ac:
                    40:e2:6c:00:df:37:a4:e0:a7:ab:31:af:08:a6:71:
                    25:ee:28:a3:51:42:1e:b8:b2:dd:31:0c:39:89:e8:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:65:16:89:36:80:01:48:7F:5A:EB:DB:E0:F9:DC:07:DA:B5:95:D9
            X509v3 Authority Key Identifier:
                keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/sGUWiTaAAUh_Wuvb4PncB9q1ldk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.73.129.0/24
                  77.73.132.0-77.73.134.255

    Signature Algorithm: sha256WithRSAEncryption
         98:e8:b9:fb:06:13:0e:10:eb:f0:c0:4c:ac:7d:02:e1:8e:4d:
         ee:ec:b9:3b:b8:31:83:9c:87:6a:cc:79:93:45:a4:32:fe:8f:
         bb:1e:9a:3b:f8:71:25:bb:df:51:ba:4a:d6:61:9f:5e:da:d4:
         5d:33:32:c9:af:15:9e:ac:95:ca:5d:40:ab:6f:22:29:8e:c7:
         d9:55:c8:f6:f1:50:59:63:30:fd:9f:73:9c:2a:60:08:0c:69:
         eb:d1:fe:1b:b4:6f:71:86:08:85:36:ea:3f:51:9a:26:e9:11:
         69:48:aa:79:2f:b0:e7:1b:7e:d2:5e:c8:ab:ab:4d:01:5a:41:
         98:77:cc:79:2c:52:72:37:34:8f:0a:fd:5a:59:fc:d4:a3:05:
         21:48:42:39:43:cc:a2:db:24:ad:5d:b3:53:ad:f1:2f:1e:b6:
         2f:10:dc:8b:13:a0:9e:58:58:0e:09:81:16:b4:75:c1:58:86:
         32:f6:cc:54:c0:83:27:8b:10:05:ff:11:05:9a:33:83:a2:b4:
         59:e4:ab:8f:23:32:9f:87:6d:94:01:37:8e:ec:5b:0c:d4:7d:
         de:e8:c3:ad:ef:22:e1:87:16:eb:6e:a5:d7:84:2f:db:e8:e0:
         03:b4:a9:64:9f:23:06:a4:c4:6b:1b:a5:e5:6d:f1:c1:4d:66:
         77:50:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org