Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/QObyYoHY1DY2M_Lr-zQz_GlG6pM.roa
File:                     QObyYoHY1DY2M_Lr-zQz_GlG6pM.roa (raw, json)
Hash identifier:          PEl4sI4ISdAV1s6fvzfkkIyTVuy2Fh+BuTyERnYlR9M=
Subject key identifier:   40:E6:F2:62:81:D8:D4:36:36:33:F2:EB:FB:34:33:FC:69:46:EA:93
Certificate issuer:       /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial:       07320610
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/QObyYoHY1DY2M_Lr-zQz_GlG6pM.roa
Signing time:             Sat 01 Jan 2022 13:05:23 +0000
ROA not before:           Sat 01 Jan 2022 13:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39273
IP address blocks:        78.110.79.0/24 maxlen: 24
                          81.22.30.0/24 maxlen: 24
                          81.22.31.0/24 maxlen: 24
                          81.22.28.0/24 maxlen: 24
                          81.22.29.0/24 maxlen: 24
                          81.22.27.0/24 maxlen: 24
                          81.22.25.0/24 maxlen: 24
                          81.22.26.0/24 maxlen: 24
                          77.92.165.0/24 maxlen: 24
                          77.92.166.0/24 maxlen: 24
                          77.92.163.0/24 maxlen: 24
                          77.92.164.0/24 maxlen: 24
                          77.92.161.0/24 maxlen: 24
                          77.92.162.0/24 maxlen: 24
                          77.92.160.0/19 maxlen: 19
                          77.92.160.0/24 maxlen: 24
                          77.92.172.0/24 maxlen: 24
                          77.92.170.0/24 maxlen: 24
                          77.92.171.0/24 maxlen: 24
                          77.92.168.0/24 maxlen: 24
                          77.92.169.0/24 maxlen: 24
                          77.92.167.0/24 maxlen: 24
                          77.92.173.0/24 maxlen: 24
                          77.92.179.0/24 maxlen: 24
                          77.92.177.0/24 maxlen: 24
                          77.92.178.0/24 maxlen: 24
                          77.92.175.0/24 maxlen: 24
                          77.92.176.0/24 maxlen: 24
                          77.92.174.0/24 maxlen: 24
                          77.92.186.0/24 maxlen: 24
                          77.92.184.0/24 maxlen: 24
                          77.92.185.0/24 maxlen: 24
                          77.92.182.0/24 maxlen: 24
                          77.92.183.0/24 maxlen: 24
                          77.92.181.0/24 maxlen: 24
                          77.92.180.0/24 maxlen: 24
                          77.92.191.0/24 maxlen: 24
                          77.92.189.0/24 maxlen: 24
                          77.92.190.0/24 maxlen: 24
                          77.92.188.0/24 maxlen: 24
                          77.92.187.0/24 maxlen: 24
                          81.22.16.0/20 maxlen: 20
                          81.22.16.0/24 maxlen: 24
                          81.22.17.0/24 maxlen: 24
                          81.22.23.0/24 maxlen: 24
                          81.22.24.0/24 maxlen: 24
                          81.22.21.0/24 maxlen: 24
                          81.22.22.0/24 maxlen: 24
                          81.22.20.0/24 maxlen: 24
                          81.22.18.0/24 maxlen: 24
                          81.22.19.0/24 maxlen: 24
                          78.110.64.0/24 maxlen: 24
                          78.110.64.0/20 maxlen: 20
                          78.110.70.0/24 maxlen: 24
                          78.110.71.0/24 maxlen: 24
                          78.110.68.0/24 maxlen: 24
                          78.110.69.0/24 maxlen: 24
                          78.110.67.0/24 maxlen: 24
                          78.110.65.0/24 maxlen: 24
                          78.110.66.0/24 maxlen: 24
                          78.110.74.0/24 maxlen: 24
                          78.110.77.0/24 maxlen: 24
                          77.83.91.0/24 maxlen: 24
                          78.110.78.0/24 maxlen: 24
                          78.110.75.0/24 maxlen: 24
                          78.110.72.0/24 maxlen: 24
                          78.110.73.0/24 maxlen: 24
                          77.83.89.0/24 maxlen: 24
                          78.110.76.0/24 maxlen: 24
                          77.83.90.0/24 maxlen: 24
                          77.83.88.0/24 maxlen: 24
                          77.83.88.0/22 maxlen: 22
                          87.236.50.0/24 maxlen: 24
                          87.236.48.0/21 maxlen: 21
                          87.236.51.0/24 maxlen: 24
                          87.236.48.0/24 maxlen: 24
                          87.236.49.0/24 maxlen: 24
                          185.33.178.0/24 maxlen: 24
                          185.33.179.0/24 maxlen: 24
                          185.33.177.0/24 maxlen: 24
                          185.33.176.0/24 maxlen: 24
                          87.236.54.0/24 maxlen: 24
                          87.236.52.0/24 maxlen: 24
                          87.236.53.0/24 maxlen: 24
                          87.236.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120718864 (0x7320610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
        Validity
            Not Before: Jan  1 13:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40e6f26281d8d4363633f2ebfb3433fc6946ea93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:2e:67:ec:11:d4:a6:5a:ab:b5:92:a0:1b:
                    7b:c0:12:b3:d0:ba:ac:04:61:f5:e0:57:fc:bc:c9:
                    cd:0f:f1:af:79:58:3d:f2:de:e0:b9:79:44:3c:fc:
                    88:90:38:70:ae:80:a6:f8:ad:69:a6:c0:fd:7f:0e:
                    9a:1c:58:65:22:1e:17:f9:5f:cc:07:aa:2a:62:40:
                    e7:39:14:83:29:ea:8d:54:f4:a4:3f:06:ac:b2:59:
                    d2:73:c2:a1:84:70:d1:82:dc:c2:0f:58:b2:21:9f:
                    8a:f8:cc:d0:dd:ab:83:dc:36:a3:d7:f3:ec:4d:0f:
                    3a:a8:bb:56:19:4d:c4:31:94:26:3f:4a:df:ec:a8:
                    c0:39:f3:eb:d4:84:05:17:38:28:f2:93:26:62:27:
                    bc:05:5c:0f:df:a8:72:7b:ed:5c:43:9e:48:0d:c4:
                    07:cf:67:32:c3:e4:f8:26:31:81:fc:e9:fe:fe:dd:
                    66:8c:5b:29:b8:5c:d9:ab:18:49:30:1b:1a:71:82:
                    42:36:40:3f:27:de:a7:6f:8a:10:44:5a:2f:c1:56:
                    5c:9b:32:14:76:b5:f6:4b:19:fe:b9:ba:a4:fd:2f:
                    35:81:7e:c5:ab:9d:94:4b:4a:5b:a9:34:73:7f:18:
                    20:3f:a4:e3:1d:15:73:8a:9a:5c:ac:f1:3e:30:85:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E6:F2:62:81:D8:D4:36:36:33:F2:EB:FB:34:33:FC:69:46:EA:93
            X509v3 Authority Key Identifier:
                keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/QObyYoHY1DY2M_Lr-zQz_GlG6pM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.88.0/22
                  77.92.160.0/19
                  78.110.64.0/20
                  81.22.16.0/20
                  87.236.48.0/21
                  185.33.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:fc:58:a5:39:b2:82:1d:ea:43:94:2c:27:cb:b4:ca:d6:5d:
         91:38:2a:2d:18:ff:88:98:fb:cc:0d:dd:cc:56:9f:dd:f1:99:
         be:e3:c2:fc:f2:ff:9f:4a:d2:e0:a8:b4:f3:e9:d1:e7:25:39:
         36:21:84:86:15:2e:3f:b5:8d:a7:e0:28:5b:bc:a2:b8:b8:7f:
         36:99:10:c9:01:dd:2f:21:e3:47:15:9b:74:eb:0d:33:b9:85:
         dd:da:94:cd:d4:b7:44:ba:1b:af:4a:09:ea:28:4a:e3:10:b3:
         a6:f4:fb:1d:e8:8f:55:0d:ca:6b:93:d5:4c:46:0e:16:42:30:
         46:5e:77:d9:40:96:8c:55:7b:aa:58:09:e0:9c:a1:02:b7:df:
         d5:8b:42:5b:10:9f:4c:c0:7d:27:4b:f7:05:8d:1f:50:d1:19:
         c1:57:82:9c:b4:d1:cf:20:bf:62:c3:56:4d:c1:fc:08:b7:a5:
         12:4a:3f:89:c6:71:da:c9:b4:50:ca:71:5e:5e:92:f4:b3:24:
         84:20:ca:63:0f:a8:49:9d:07:2f:51:12:0d:99:c2:67:e3:10:
         9c:46:77:80:ab:ea:17:17:2f:b8:46:b4:4c:e8:75:a9:e3:cc:
         73:ff:ad:d4:15:04:98:18:88:28:57:70:61:1e:88:fe:f7:7f:
         69:fc:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net