Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Bel3seaFMdHoDST5BJuN4O5t7wQ.roa
File:                     Bel3seaFMdHoDST5BJuN4O5t7wQ.roa (raw, json)
Hash identifier:          RJxdK7fiJonaokhUy/Z2xz43Gyn/RifMgsS8URkfcRY=
Subject key identifier:   05:E9:77:B1:E6:85:31:D1:E8:0D:24:F9:04:9B:8D:E0:EE:6D:EF:04
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       0665E84B
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Bel3seaFMdHoDST5BJuN4O5t7wQ.roa
Signing time:             Mon 16 May 2022 06:25:41 +0000
ROA not before:           Mon 16 May 2022 06:25:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        77.81.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107341899 (0x665e84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: May 16 06:25:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05e977b1e68531d1e80d24f9049b8de0ee6def04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:b7:d8:cf:4d:88:d4:da:e5:b8:79:32:82:
                    55:6b:60:90:cf:40:e4:84:00:b4:23:f7:0d:05:fe:
                    69:87:a3:92:6f:7d:7d:b4:b7:b0:84:4e:dc:49:c4:
                    a6:68:18:ab:d6:5a:da:e6:5b:1b:dc:fa:35:f3:56:
                    b4:07:e6:ea:ed:b7:f7:57:22:e2:da:fe:ed:bd:ea:
                    5b:00:c7:bf:2d:e5:e2:a5:50:62:38:20:49:c7:c7:
                    c3:62:15:5d:d5:12:5b:e7:7a:9a:38:d1:6a:28:ae:
                    c2:00:8b:33:2c:74:4c:e2:60:bc:d0:71:6e:b0:c8:
                    b0:9c:7a:f2:d8:aa:37:70:92:a0:ed:06:49:88:06:
                    5a:13:24:ed:51:37:52:6e:a3:65:43:df:70:52:0d:
                    e2:78:50:35:28:4f:6f:7a:a9:5a:cb:95:f9:96:16:
                    2f:67:4d:d8:60:99:43:f8:ac:91:35:84:50:8d:13:
                    bd:73:cd:d2:a4:86:f8:4d:50:50:f5:ab:38:21:7d:
                    09:c1:0a:94:59:ac:ce:1c:32:56:d7:03:77:87:55:
                    37:1f:a9:65:9e:ae:bd:17:ae:09:b1:65:5c:de:28:
                    a9:c1:5e:d2:60:a7:ef:d7:19:ef:89:eb:bd:82:50:
                    fe:17:c9:dc:aa:b1:d1:02:e2:b6:af:ef:e3:78:e4:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E9:77:B1:E6:85:31:D1:E8:0D:24:F9:04:9B:8D:E0:EE:6D:EF:04
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Bel3seaFMdHoDST5BJuN4O5t7wQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:05:73:4a:ea:eb:ef:02:1e:cd:3a:ed:d2:36:40:a5:3d:44:
         ab:9a:c5:1c:e7:ab:57:a2:46:15:93:71:35:3b:b3:3e:23:97:
         88:e8:78:cc:99:35:b7:a5:59:28:68:c1:f8:53:e1:d9:59:c7:
         d4:c0:8e:fe:9e:3c:97:f1:b1:42:67:6d:1f:89:03:5d:c0:2d:
         ff:10:72:bc:2a:d8:1f:7c:7c:5b:8f:5c:43:d8:7a:d5:97:df:
         f0:81:66:e5:6d:68:10:20:cc:75:45:ca:ba:5e:2f:3e:41:d2:
         46:90:03:00:2f:ee:27:0c:c8:75:75:2b:71:d3:c2:2b:96:5f:
         3b:f8:e4:6f:6f:c5:e1:f0:4a:90:26:25:2c:fd:0c:bb:bd:28:
         12:5f:c2:3b:6e:68:e4:65:1f:19:63:a4:bd:42:54:8a:9a:e9:
         35:26:b1:3d:58:92:96:15:19:c9:a4:bb:8f:89:a9:95:5d:6b:
         62:b2:5b:49:44:83:e3:22:3c:a4:26:2f:44:25:63:86:64:59:
         9a:6e:d5:e7:c1:c2:a0:0b:58:9b:16:9f:17:53:ec:1d:f7:88:
         20:42:b9:ea:38:48:52:1e:10:40:07:46:a3:45:e0:5b:67:dd:
         c6:b6:ff:91:bb:ea:ed:54:4e:3d:3f:1b:ce:a6:e3:4f:4e:61:
         b5:fe:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org