Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/KS0cE0EXIBIR2o0Jx9JHs73_Ay4.roa
File:                     KS0cE0EXIBIR2o0Jx9JHs73_Ay4.roa (raw, json)
Hash identifier:          cggZjvXpu29VS0JuJA8s0JnaqbMspmOfczmoI2Dw7zQ=
Subject key identifier:   29:2D:1C:13:41:17:20:12:11:DA:8D:09:C7:D2:47:B3:BD:FF:03:2E
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       05F6D8FC
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/KS0cE0EXIBIR2o0Jx9JHs73_Ay4.roa
Signing time:             Thu 24 Mar 2022 15:32:23 +0000
ROA not before:           Thu 24 Mar 2022 15:32:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133973
IP address blocks:        77.81.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100063484 (0x5f6d8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Mar 24 15:32:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=292d1c134117201211da8d09c7d247b3bdff032e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:fe:16:dd:02:f9:b0:73:cd:85:72:f8:f2:
                    6a:ad:3c:a5:f1:ae:82:89:bd:b7:35:b9:6e:86:03:
                    f0:8a:91:ab:ca:e4:99:00:8a:89:27:c3:6f:97:39:
                    b4:8d:c5:b1:db:60:c3:e5:25:5f:14:60:fb:90:11:
                    cb:88:24:51:49:d2:71:1f:4b:87:99:4b:61:9b:a7:
                    97:b0:b8:6c:7d:3c:8b:f7:2a:b0:93:f0:e0:e1:97:
                    2c:29:a4:ac:46:08:c9:97:38:87:5a:eb:06:d3:e0:
                    d0:3a:e0:e3:d4:2e:fb:2e:ae:d4:7d:f2:64:9c:1c:
                    59:93:bf:aa:2f:0e:fa:c9:ec:58:44:db:48:e5:c6:
                    2a:af:12:85:3f:5c:c1:38:f0:7d:93:67:f8:df:28:
                    ae:4d:a5:f3:14:98:b2:47:2f:a6:28:65:49:a4:d0:
                    08:1a:6e:f5:71:6d:18:28:9d:c8:73:52:34:b9:7a:
                    45:f0:01:fd:17:67:90:8c:9f:37:0c:3e:dc:a7:0e:
                    a2:cd:20:b6:75:5e:c5:ea:95:f2:03:4f:7a:ed:cf:
                    e9:82:82:2e:24:cd:19:cb:d9:f2:70:dc:19:01:e9:
                    b0:f1:47:b1:40:3f:24:c3:86:25:83:d6:a7:9a:9e:
                    10:66:de:fe:87:4c:3c:39:1e:3c:07:47:a6:7a:87:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2D:1C:13:41:17:20:12:11:DA:8D:09:C7:D2:47:B3:BD:FF:03:2E
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/KS0cE0EXIBIR2o0Jx9JHs73_Ay4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:55:43:49:6c:ad:58:14:f1:7e:51:c3:40:c5:00:33:60:
         12:92:e0:ef:d0:a5:11:ec:e1:a7:94:23:d4:9e:6e:6d:f2:47:
         dc:81:71:fd:4d:6a:28:37:59:5f:16:67:35:eb:1a:ca:95:2b:
         b6:00:bf:98:7a:98:1d:80:87:12:89:f5:6c:75:f9:85:8b:fd:
         84:01:6d:55:02:d1:ff:50:90:ad:85:2f:bd:fa:99:da:1b:02:
         fe:86:76:c3:7f:35:16:17:f4:fc:96:73:86:ad:79:a1:44:54:
         d1:61:7c:d4:82:ca:75:d8:76:58:2b:f2:d4:44:a4:86:35:cc:
         b2:1f:28:5d:3a:78:11:76:1d:8d:02:b6:e9:7f:df:e1:d9:f7:
         ad:16:c5:dc:25:8f:a6:a0:54:14:57:39:96:d4:94:fa:9d:02:
         04:99:23:a2:90:4d:b7:87:37:ce:fe:d8:54:46:ff:61:b1:dd:
         b5:be:0a:7b:ef:f9:2f:ae:bb:40:70:86:a5:e9:74:72:35:43:
         22:eb:4a:73:dd:f9:ee:45:ee:2d:18:28:29:69:3c:be:0f:16:
         47:4a:92:92:20:35:fa:01:7b:af:31:b7:b0:9a:20:cb:82:80:
         9a:09:1b:df:45:b9:24:62:68:9f:95:1e:05:e9:b1:db:d6:23:
         a0:3d:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org