Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Ptrf1Vx_eSWPnk3WRZxUzVkqKG0.roa
File:                     Ptrf1Vx_eSWPnk3WRZxUzVkqKG0.roa (raw, json)
Hash identifier:          r5IgTEdHqqiaf8J/UG3wZKzHj9PHaZJoEctYb7mYuIA=
Subject key identifier:   3E:DA:DF:D5:5C:7F:79:25:8F:9E:4D:D6:45:9C:54:CD:59:2A:28:6D
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       06B19562
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Ptrf1Vx_eSWPnk3WRZxUzVkqKG0.roa
Signing time:             Sat 18 Jun 2022 05:44:47 +0000
ROA not before:           Sat 18 Jun 2022 05:44:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        77.81.80.0/23 maxlen: 24
                          188.214.232.0/23 maxlen: 24
                          188.214.234.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112301410 (0x6b19562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Jun 18 05:44:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3edadfd55c7f79258f9e4dd6459c54cd592a286d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:f4:47:7e:a0:82:cf:86:9e:90:a2:78:b5:
                    73:d1:27:81:2e:01:6d:71:8e:98:0e:db:65:58:40:
                    79:1a:0b:59:c7:f3:9e:70:bd:12:51:b1:f7:e1:44:
                    bb:58:30:d5:b1:21:f4:8e:5b:b3:f4:d3:58:98:2f:
                    b1:78:d7:88:90:10:bc:eb:b1:a3:24:55:ac:9b:8b:
                    ab:59:ab:b4:68:12:bc:e1:11:4f:f0:70:80:98:f1:
                    0b:50:0c:a2:06:e4:6c:0f:7b:c8:cd:90:4f:89:63:
                    d1:0f:54:db:7f:59:76:cb:bd:29:70:10:b5:a1:44:
                    a4:01:c9:bc:4e:09:d9:cd:91:41:00:15:a7:16:65:
                    d7:90:ca:89:8f:6e:48:cc:6c:a0:73:57:49:c0:84:
                    6b:a1:96:ad:a2:df:de:f0:7f:73:de:2d:01:e3:0f:
                    5f:d6:84:0a:d6:a5:28:17:98:84:f4:82:05:9f:bd:
                    76:d7:95:ae:3d:ba:15:f4:6d:e6:83:74:1b:72:9d:
                    9d:50:8e:1c:9b:66:97:87:05:68:64:2d:fb:e1:5f:
                    ed:78:16:eb:df:d7:b2:1d:93:88:93:39:ef:d3:63:
                    b5:c6:ef:78:f1:b8:e7:fb:40:9c:bb:d6:d4:71:a5:
                    5d:51:e1:8f:7a:4e:10:0b:15:9a:06:7b:55:12:ba:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DA:DF:D5:5C:7F:79:25:8F:9E:4D:D6:45:9C:54:CD:59:2A:28:6D
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Ptrf1Vx_eSWPnk3WRZxUzVkqKG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.80.0/23
                  188.214.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:0a:57:91:63:f4:95:11:18:a0:54:9e:4d:48:a8:32:72:
         f1:71:f8:31:68:b6:af:67:07:9a:bc:02:d3:4f:ca:c5:9f:e8:
         85:9b:65:9d:d5:c7:cb:15:54:d6:74:42:cb:aa:13:d2:13:46:
         0a:3d:64:37:58:66:34:09:63:40:00:a2:16:74:f9:75:ba:ae:
         de:6f:de:e4:fd:2b:cc:01:ec:45:85:d1:ae:d8:6b:a0:11:b9:
         bf:0c:29:fa:54:5a:fe:d3:5e:14:e4:f2:dc:b1:d5:ea:18:f9:
         5e:34:e8:e8:b8:21:bc:4d:01:6f:5a:1f:38:24:4b:f3:50:f8:
         2a:29:a5:d2:1b:46:e4:99:53:ca:e3:dc:a0:4c:fa:4a:8e:20:
         4c:db:32:10:cf:08:76:73:8b:ef:d2:6e:21:d1:de:36:e0:b2:
         57:23:5c:47:16:f2:06:1d:58:b6:5a:9e:98:e8:02:05:08:bc:
         86:8f:2d:51:2b:17:7c:ed:fb:9c:32:97:c6:8c:26:a9:aa:31:
         58:ab:9a:4f:d4:11:8d:26:19:10:ca:c2:51:e1:a9:41:c8:7c:
         84:c6:d0:5e:af:be:49:6b:0c:66:43:f0:14:8d:49:dc:b1:67:
         0e:43:6c:c2:76:1e:ee:54:be:e1:21:d5:75:7f:fd:ca:9c:8a:
         dd:b5:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org