Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/vCCO6D1MGp00tqgmYAeVu2AjTw4.roa
File:                     vCCO6D1MGp00tqgmYAeVu2AjTw4.roa (raw, json)
Hash identifier:          ZieJaBeiFQE32a6oo5tAzzqnelvLZ+CbcmEIXyxUClo=
Subject key identifier:   BC:20:8E:E8:3D:4C:1A:9D:34:B6:A8:26:60:07:95:BB:60:23:4F:0E
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       06198F5B
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/vCCO6D1MGp00tqgmYAeVu2AjTw4.roa
Signing time:             Thu 07 Apr 2022 16:20:42 +0000
ROA not before:           Thu 07 Apr 2022 16:20:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        77.81.80.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102338395 (0x6198f5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Apr  7 16:20:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc208ee83d4c1a9d34b6a826600795bb60234f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:32:7e:26:70:2c:bb:b3:70:d3:7b:a2:dd:
                    2f:df:4c:42:3a:da:5c:2b:17:44:32:17:0a:13:29:
                    50:3c:e6:be:fb:11:24:43:06:8e:50:87:3c:49:0e:
                    69:af:ec:7d:67:1a:cc:fa:b8:14:14:27:94:27:bc:
                    78:14:f4:1e:9d:fa:28:bc:e1:9e:48:c1:56:69:9f:
                    56:78:03:b6:21:d8:4d:c5:cf:06:ba:86:83:b7:89:
                    b4:73:c7:55:19:51:78:74:8a:8b:a8:b4:7a:03:8e:
                    44:d4:c7:48:d4:2a:07:7f:8c:9a:db:ee:14:6f:2c:
                    79:81:50:89:5a:3f:6a:46:4f:c4:45:d8:4f:c3:dc:
                    6a:8c:f9:a2:1d:13:52:2a:ac:ae:06:ae:3c:14:7d:
                    bb:1d:5a:b1:32:a2:56:03:78:a9:3f:16:f2:60:f8:
                    ec:7b:63:be:f9:ad:ed:af:3b:c3:c9:88:a5:47:66:
                    88:42:15:2e:43:cd:28:e0:ec:d0:c5:a1:b6:fb:24:
                    70:f8:33:51:a1:06:00:8b:d9:30:53:10:4f:3e:3b:
                    58:7e:b6:21:7c:4c:1f:78:c6:5e:01:c3:00:25:82:
                    26:32:2e:24:86:f5:d2:d3:29:ba:13:dd:2a:f8:4b:
                    9a:e7:e5:68:05:87:c6:78:0e:04:e1:06:50:44:55:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:8E:E8:3D:4C:1A:9D:34:B6:A8:26:60:07:95:BB:60:23:4F:0E
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/vCCO6D1MGp00tqgmYAeVu2AjTw4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:12:00:26:a8:12:42:64:07:40:ba:d3:2e:ec:91:7a:37:30:
         d3:c8:12:59:76:74:4f:1b:9d:ad:0d:58:0c:5e:61:04:be:ae:
         a9:37:f8:0b:fa:7e:e9:7c:12:0d:32:7d:d5:23:33:fa:4c:fa:
         2d:5e:19:3c:b4:16:2b:94:c4:4e:e8:44:b5:03:0e:be:3f:d0:
         bd:e8:38:fc:68:de:0f:d5:78:34:15:52:4b:ad:7d:48:5b:e6:
         7c:7a:ba:ae:85:fd:90:b3:dd:bc:5a:9d:d6:64:cd:c7:ff:36:
         fa:e0:6b:6d:4c:75:0b:3d:69:50:b7:23:d2:85:e7:2a:75:ac:
         a7:e1:33:92:b6:80:7a:55:43:c9:c5:00:2e:b7:81:38:92:cc:
         69:39:13:47:16:6b:48:75:0e:0a:4a:39:25:1b:73:9f:65:4c:
         45:38:e7:0b:56:f0:2d:1f:3e:e2:c1:e0:d5:e2:4d:ca:45:2b:
         3e:73:80:d8:b3:ae:86:db:9b:a0:5f:4b:8c:19:e8:71:62:f0:
         e7:eb:4c:13:71:7c:65:8c:47:5f:5f:30:28:2d:4a:f7:8a:40:
         cc:b0:42:4a:45:c6:50:7b:84:77:5c:0e:86:2e:54:f2:23:fb:
         ac:1a:95:38:b2:55:5b:ec:67:73:fe:22:8d:2e:4b:3c:e6:bd:
         94:1a:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org