Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MUO0T8c0CWhBwB1QPSGYYmewamc.roa
File:                     MUO0T8c0CWhBwB1QPSGYYmewamc.roa (raw, json)
Hash identifier:          y7l8+60bypS9/8Kf5vkEwdMVeyJJL8pa9ALbl8KNruw=
Subject key identifier:   31:43:B4:4F:C7:34:09:68:41:C0:1D:50:3D:21:98:62:67:B0:6A:67
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       01838F1F2D7387933F544BF5217CE7A11888
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MUO0T8c0CWhBwB1QPSGYYmewamc.roa
Signing time:             Fri 30 Sep 2022 15:58:48 +0000
ROA not before:           Fri 30 Sep 2022 15:58:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210574
IP address blocks:        185.223.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:8f:1f:2d:73:87:93:3f:54:4b:f5:21:7c:e7:a1:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Sep 30 15:58:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3143b44fc734096841c01d503d21986267b06a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:8e:a6:df:81:cf:0e:60:41:7f:99:e2:80:
                    73:c3:a0:a3:a9:70:71:eb:2e:ab:5a:2d:21:1b:de:
                    60:5d:c1:99:d0:f6:b4:1c:0f:30:90:89:c9:7c:da:
                    92:af:d6:b6:07:03:6f:58:f0:af:4c:a0:d7:f1:74:
                    fb:65:2c:4b:cb:cb:d7:7b:30:7c:ab:2c:9d:33:a7:
                    86:1a:c7:29:59:f1:c3:cf:a3:f7:ad:24:5f:be:99:
                    93:7d:39:ad:bb:b4:b4:55:87:4e:98:2b:9b:6c:aa:
                    55:82:92:26:4b:0b:4a:5e:84:e0:b7:a9:1b:fd:1b:
                    ab:aa:d7:81:37:b0:16:68:f5:3a:9c:bc:5e:6d:23:
                    54:fa:07:eb:a1:13:a6:60:fd:53:22:1e:9b:28:90:
                    77:df:12:75:1f:d2:65:76:a0:96:39:e7:10:bd:36:
                    de:6b:b5:b3:83:11:fa:6b:8b:bf:38:92:d9:24:54:
                    30:27:63:1c:d3:c3:5f:a3:03:1f:77:c2:f5:b1:da:
                    87:1c:30:2a:b1:f7:83:94:c8:59:6e:74:cd:b1:be:
                    00:21:d4:63:d8:58:2c:18:b3:4d:69:7e:c7:81:cd:
                    3e:a1:56:b5:b5:52:a0:3a:13:55:e3:3d:06:db:94:
                    ce:6f:ad:f3:03:6a:6d:9d:ea:71:7b:dd:8f:b1:b5:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:43:B4:4F:C7:34:09:68:41:C0:1D:50:3D:21:98:62:67:B0:6A:67
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MUO0T8c0CWhBwB1QPSGYYmewamc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:d7:7e:3a:31:27:e5:0f:a4:4f:65:f7:02:5f:ca:33:51:c3:
         c1:a0:fe:57:de:4d:1f:28:7d:9a:c9:a1:06:c4:e8:a2:ff:57:
         36:f1:4c:ea:73:6c:fc:41:2a:f0:6e:f3:d2:85:7b:2b:fc:ba:
         02:23:f0:b9:01:24:48:08:d8:66:dc:33:24:48:3f:c4:09:66:
         a5:96:69:ca:b8:f9:27:02:d8:be:d5:4a:87:be:79:70:14:aa:
         3c:67:d3:c4:cb:90:a4:d1:01:66:06:9e:07:9c:5e:4e:3c:03:
         fc:b3:85:73:d0:b7:f0:99:65:5e:51:73:d2:cf:5a:df:8d:54:
         b1:96:d5:39:41:a3:e5:66:7c:00:35:f0:63:95:1f:62:df:eb:
         24:08:ac:85:4a:41:f3:dd:36:9b:de:35:bf:de:db:00:be:c8:
         36:39:a2:6f:57:fa:ed:dc:aa:48:a6:2b:6c:21:80:8c:67:05:
         b2:ec:ae:dd:94:b4:3b:1c:c9:17:be:82:75:81:89:47:a9:7e:
         e5:fe:ab:aa:8b:f8:ba:0e:e0:98:fe:76:7c:2e:e0:18:9f:c0:
         aa:80:22:2c:0a:1d:59:8f:9f:78:5f:0b:be:17:77:4a:71:51:
         70:7b:07:c0:52:96:da:27:b3:eb:95:5f:b8:59:08:2c:45:4b:
         3d:55:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org