Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/gcbd_HhNTXf3lV5Z_VZQtuLQr4Q.roa
File:                     gcbd_HhNTXf3lV5Z_VZQtuLQr4Q.roa (raw, json)
Hash identifier:          dhWSV5eeYJB2/T2z+YtVIbLPj/7efQLO0SfOBboQNr0=
Subject key identifier:   81:C6:DD:FC:78:4D:4D:77:F7:95:5E:59:FD:56:50:B6:E2:D0:AF:84
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       01837CB6F59E9B5BD001F7AF5F6CA1F50F1A
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/gcbd_HhNTXf3lV5Z_VZQtuLQr4Q.roa
Signing time:             Tue 27 Sep 2022 02:11:48 +0000
ROA not before:           Tue 27 Sep 2022 02:11:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202759
IP address blocks:        77.81.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7c:b6:f5:9e:9b:5b:d0:01:f7:af:5f:6c:a1:f5:0f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Sep 27 02:11:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81c6ddfc784d4d77f7955e59fd5650b6e2d0af84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:d2:b5:8e:6b:76:d7:18:5e:3c:2c:4c:42:
                    f2:7c:8d:6f:93:14:6e:52:dd:d4:06:5d:3d:e0:d4:
                    40:a1:0e:7e:9b:40:f3:7b:3a:e4:a4:6a:5f:09:fc:
                    bf:f9:70:df:a0:86:b6:be:42:b4:90:f7:2e:1e:f0:
                    8c:f1:c9:52:92:4b:1d:8b:2d:ca:87:fa:1b:a4:2d:
                    75:11:34:6d:e1:68:ce:55:6e:a9:45:b7:42:80:6e:
                    d3:67:6c:06:1a:d8:93:f9:e1:90:1e:31:be:19:9b:
                    f7:bc:bb:76:09:46:8a:bc:c9:a1:6e:26:76:14:d4:
                    a6:e1:4e:83:d3:e6:7b:a2:bc:a6:3f:1f:70:4c:92:
                    31:2f:7b:ad:65:dc:65:c3:e3:8b:ca:65:e1:19:13:
                    10:b4:15:ed:46:37:77:4d:6d:71:07:a2:5f:a6:02:
                    e2:d2:38:62:26:f0:b0:88:2f:fa:8e:7f:b3:dc:7f:
                    51:31:8c:cb:c8:bc:f6:93:90:54:d3:95:af:6e:56:
                    66:77:e9:67:31:ea:c8:47:42:86:ab:72:4a:21:6d:
                    bb:88:f4:99:76:33:c2:60:23:fb:1d:2c:b3:1d:c0:
                    00:7a:bf:93:24:e0:4c:b9:40:5a:22:17:39:8b:09:
                    91:83:8c:f2:1c:68:ad:2d:2c:50:4a:91:04:ba:98:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:DD:FC:78:4D:4D:77:F7:95:5E:59:FD:56:50:B6:E2:D0:AF:84
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/gcbd_HhNTXf3lV5Z_VZQtuLQr4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:63:2f:6d:69:56:52:fe:92:04:4d:f7:fb:75:dc:b9:bc:
         e3:bf:b5:7c:50:87:79:5d:b8:10:98:ef:89:60:86:3f:e7:e5:
         bc:7a:38:a0:36:42:d9:66:ba:1a:14:08:c2:1c:86:81:e8:c3:
         2b:32:d7:0d:21:d9:83:eb:30:9a:94:46:10:1c:8b:89:d3:ad:
         0f:be:ea:76:62:7c:d4:03:6f:ae:a4:a3:a7:5a:ab:5c:db:bb:
         d1:7e:e9:cb:71:98:95:c3:c0:cf:d3:e7:a9:08:13:c7:57:d0:
         d6:75:85:2b:7e:a2:d7:dc:1d:31:53:9a:ed:a6:0a:6b:24:e9:
         d8:92:58:a9:02:e9:bf:5a:09:dc:c0:96:8d:85:93:cf:e1:54:
         9a:a7:4d:d2:34:57:c7:2d:2d:4b:27:9e:f3:d7:f9:05:fd:dd:
         4f:8d:10:2b:08:32:a0:e2:2f:49:7b:d0:37:4e:8b:1a:7e:84:
         bc:39:05:cc:07:58:34:ee:eb:cb:cf:2b:0d:b6:b5:a7:f3:43:
         da:4b:be:5d:8e:8d:1f:7e:f5:68:25:96:8f:c1:54:a6:31:fb:
         49:f4:6d:8b:93:2c:59:24:17:fe:3b:62:13:6e:77:8c:25:8b:
         93:ca:c6:33:e6:2d:a3:5f:c6:8a:92:3e:d2:a7:3c:ed:05:0f:
         37:17:16:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN8tvWem1vQAfevX2yh9Q8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjIwOTI3MDIxMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWM2ZGRmYzc4NGQ0ZDc3Zjc5NTVlNTlmZDU2NTBiNmUyZDBhZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHXStY5rdtcYXjwsTELyfI1vkxRu
Ut3UBl094NRAoQ5+m0DzezrkpGpfCfy/+XDfoIa2vkK0kPcuHvCM8clSkksdiy3K
h/obpC11ETRt4WjOVW6pRbdCgG7TZ2wGGtiT+eGQHjG+GZv3vLt2CUaKvMmhbiZ2
FNSm4U6D0+Z7orymPx9wTJIxL3utZdxlw+OLymXhGRMQtBXtRjd3TW1xB6JfpgLi
0jhiJvCwiC/6jn+z3H9RMYzLyLz2k5BU05WvblZmd+lnMerIR0KGq3JKIW27iPSZ
djPCYCP7HSyzHcAAer+TJOBMuUBaIhc5iwmRg4zyHGitLSxQSpEEupiJbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHG3fx4TU1395VeWf1WULbi0K+EMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvZ2NiZF9IaE5UWGYzbFY1Wl9WWlF0dUxRcjRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVFNMA0G
CSqGSIb3DQEBCwUAA4IBAQA6pmMvbWlWUv6SBE33+3Xcubzjv7V8UId5XbgQmO+J
YIY/5+W8ejigNkLZZroaFAjCHIaB6MMrMtcNIdmD6zCalEYQHIuJ060Pvup2YnzU
A2+upKOnWqtc27vRfunLcZiVw8DP0+epCBPHV9DWdYUrfqLX3B0xU5rtpgprJOnY
klipAum/WgncwJaNhZPP4VSap03SNFfHLS1LJ57z1/kF/d1PjRArCDKg4i9Je9A3
TosafoS8OQXMB1g07uvLzysNtrWn80PaS75djo0ffvVoJZaPwVSmMftJ9G2LkyxZ
JBf+O2ITbneMJYuTysYz5i2jX8aKkj7SpzztBQ83Fxa+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org