Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/fl2LqSAj95KAtEGrz0Wzef7hbHE.roa
File:                     fl2LqSAj95KAtEGrz0Wzef7hbHE.roa (raw, json)
Hash identifier:          tikgUjoX5iTjnXwhcyZ2PpIYK1ESoxRyRiCjmP3dMiI=
Subject key identifier:   7E:5D:8B:A9:20:23:F7:92:80:B4:41:AB:CF:45:B3:79:FE:E1:6C:71
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       05669891
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/fl2LqSAj95KAtEGrz0Wzef7hbHE.roa
Signing time:             Sun 23 Jan 2022 01:54:40 +0000
ROA not before:           Sun 23 Jan 2022 01:54:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210134
IP address blocks:        77.81.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90609809 (0x5669891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Jan 23 01:54:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e5d8ba92023f79280b441abcf45b379fee16c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:fe:38:e0:d2:d5:d4:62:7d:6f:df:ac:58:
                    12:2a:64:e3:03:28:0e:02:f2:02:ad:88:c1:77:50:
                    cc:a3:94:47:36:08:68:4c:24:ef:56:43:12:21:7b:
                    f3:bf:41:a4:68:b6:11:c1:1a:ae:87:55:3b:ce:9b:
                    22:b7:b6:95:30:d5:97:30:d8:f9:aa:43:36:bb:fb:
                    a9:47:44:dd:21:43:c0:52:77:56:85:09:06:b0:b9:
                    95:c8:ec:9a:c4:5c:3b:c2:1d:a8:43:53:42:13:cb:
                    4b:56:cd:1f:53:a9:a0:d8:0d:5c:35:9a:6d:66:db:
                    34:08:c8:93:92:2f:3b:d8:c5:50:2a:90:fb:61:2d:
                    77:fd:b9:37:57:0c:21:70:66:6b:75:3c:e5:89:d9:
                    de:7c:60:5d:f6:7f:9d:2b:ff:4e:f6:e0:c0:31:af:
                    0a:b6:54:49:0b:a7:11:c6:b3:e2:c0:ab:0f:e7:db:
                    20:73:dd:67:03:5a:26:63:c0:1e:16:4f:1d:4a:79:
                    f2:b6:03:65:ab:56:f2:02:4e:74:d2:e9:ea:38:b8:
                    5c:81:83:2e:d7:3c:98:a8:97:97:c5:03:0e:46:6d:
                    13:15:95:04:dc:e3:e0:14:91:d6:af:8c:a4:70:80:
                    f6:25:64:9e:66:e0:96:a4:c2:07:18:81:00:f1:9f:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5D:8B:A9:20:23:F7:92:80:B4:41:AB:CF:45:B3:79:FE:E1:6C:71
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/fl2LqSAj95KAtEGrz0Wzef7hbHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:f3:4c:2f:8f:6b:c6:66:e0:e2:a1:26:49:ce:b9:33:fb:
         7d:cb:ac:d9:1e:97:e1:04:86:51:f1:c1:7a:79:02:1a:ff:be:
         eb:26:6d:96:53:30:7b:6e:00:1c:67:7f:42:70:02:de:4d:5e:
         64:f3:85:c9:c9:a0:fc:16:ee:fb:9e:06:61:b0:88:c1:a6:cc:
         7f:84:2e:75:59:4e:51:3b:a5:7f:4e:f6:38:60:55:f9:c8:0b:
         b5:6b:a9:2f:3a:5c:11:23:dc:33:3c:75:d5:51:31:30:3e:17:
         3c:2f:9f:45:f1:d9:cf:5e:d9:1e:7d:67:6e:4f:15:47:0b:1a:
         d2:98:21:33:74:15:83:98:f5:93:2e:00:c5:1d:f6:14:69:e4:
         76:4e:f5:7a:74:10:f2:ca:ff:09:de:2f:6f:b1:df:16:0c:d3:
         e6:c9:ce:a3:3c:9c:18:d3:ca:ea:e4:49:6f:71:77:b1:1e:c3:
         a5:27:5a:1c:92:02:96:79:ac:82:06:cb:b1:00:aa:e7:9c:5b:
         ae:25:4c:77:9d:51:57:8d:53:11:b1:42:41:00:e7:56:6e:12:
         7f:7e:b4:fd:29:ee:c9:48:7f:0a:51:c0:52:a7:8a:a2:5d:3a:
         b6:2a:6c:0b:32:36:fb:71:05:e3:02:e5:60:ee:e0:28:89:d1:
         9c:24:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org