Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uA-6YyaDCfpAAzd6Juqigz5xPsU.roa
File:                     uA-6YyaDCfpAAzd6Juqigz5xPsU.roa (raw, json)
Hash identifier:          w42zXkk9OD/biVEUYgPuUiB8mKGc2c0eqSsd3iDfxJY=
Subject key identifier:   B8:0F:BA:63:26:83:09:FA:40:03:37:7A:26:EA:A2:83:3E:71:3E:C5
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       37ADB13E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uA-6YyaDCfpAAzd6Juqigz5xPsU.roa
Signing time:             Sat 01 Jan 2022 08:55:51 +0000
ROA not before:           Sat 01 Jan 2022 08:55:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204393
IP address blocks:        81.12.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934129982 (0x37adb13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  1 08:55:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b80fba63268309fa4003377a26eaa2833e713ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:12:1a:6d:f0:1a:a7:6a:ec:57:de:4a:e0:
                    84:a5:5e:0c:eb:28:39:f3:e1:4c:dc:c3:23:9d:aa:
                    a6:75:e2:1e:52:b8:3d:28:77:ff:a1:f4:aa:82:db:
                    41:12:c3:dd:39:88:dd:53:42:f9:3b:82:39:92:34:
                    49:12:f4:c7:9d:ad:9e:ab:63:01:15:58:6b:12:e9:
                    e2:f8:06:83:dc:0e:7c:95:07:04:99:39:29:d1:00:
                    40:98:c8:a9:23:67:e4:e1:86:cd:74:1b:7f:8f:0d:
                    42:f8:d7:1a:19:4c:6a:8e:16:4d:0c:fa:9a:ec:cf:
                    16:b6:a2:ad:eb:58:18:67:02:6c:05:13:5e:9a:f2:
                    65:e5:2c:37:89:a6:95:d9:1f:3e:01:c5:11:0d:ca:
                    a9:ab:b5:27:bc:ff:00:6f:d3:0e:96:10:ca:f5:4d:
                    17:d1:86:97:5b:6f:ef:dc:98:79:6e:d7:62:4f:27:
                    2a:e5:20:11:d3:33:82:c2:e4:a7:cc:7e:75:f6:c2:
                    a0:26:02:6b:40:c4:d1:87:07:49:58:c9:cb:87:f9:
                    b7:43:88:73:26:e4:d6:46:29:2c:d4:9b:af:9b:99:
                    48:dc:b4:c9:9a:70:83:dc:7c:ef:21:65:2d:c8:e7:
                    44:21:97:0f:64:bc:ba:67:9c:4a:e7:a8:ef:42:cc:
                    a1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:BA:63:26:83:09:FA:40:03:37:7A:26:EA:A2:83:3E:71:3E:C5
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uA-6YyaDCfpAAzd6Juqigz5xPsU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.12.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:5e:b5:d9:d0:3b:fd:6f:69:50:45:fd:15:27:44:9a:b2:
         e9:d7:0d:d2:b9:58:98:5f:74:6e:70:8d:de:62:a8:65:06:6d:
         93:c0:72:33:71:51:66:62:94:7b:d1:99:87:dc:97:19:a3:12:
         8a:c4:72:4c:59:69:f9:27:dc:86:f7:d4:f0:91:ca:39:28:5d:
         d6:da:08:31:cf:cf:77:4e:e0:57:69:0f:42:d1:a3:74:70:2e:
         67:d6:03:4d:c8:d4:06:97:27:3b:75:a8:c4:ed:e2:2a:44:ba:
         db:19:53:12:b9:10:ad:c3:73:72:55:fc:71:62:1a:cd:b6:1a:
         76:8f:82:23:0d:39:76:45:ab:be:21:31:55:5e:c2:03:e2:61:
         0d:79:f4:e3:fe:4e:fe:a2:12:8d:15:1d:89:95:15:7e:b1:59:
         e2:11:dd:54:3e:c4:48:c6:a1:f8:e4:92:e8:6a:e4:9d:58:80:
         ad:2b:43:7b:91:a3:4c:82:09:aa:1a:98:fe:30:ba:85:f1:22:
         1f:98:ea:30:d6:f0:16:9c:01:d7:73:51:5e:24:de:b0:f8:7f:
         59:59:60:32:f8:0b:4d:a7:18:72:23:6c:a9:a9:bd:da:73:69:
         58:1e:2b:a8:5a:e3:1c:41:bc:dc:f0:51:9c:bb:de:a8:79:75:
         20:b8:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org