Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/g6UW1y4mskIv_mOxH6nLKJHAs74.roa
File:                     g6UW1y4mskIv_mOxH6nLKJHAs74.roa (raw, json)
Hash identifier:          v46Yk6AM3jZfxuZeRkaut4P8+mLYuLdHRkWTsbLKGh4=
Subject key identifier:   83:A5:16:D7:2E:26:B2:42:2F:FE:63:B1:1F:A9:CB:28:91:C0:B3:BE
Certificate issuer:       /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial:       0464B9B9
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/g6UW1y4mskIv_mOxH6nLKJHAs74.roa
Signing time:             Mon 14 Mar 2022 17:51:00 +0000
ROA not before:           Mon 14 Mar 2022 17:51:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203012
IP address blocks:        185.248.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73710009 (0x464b9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
        Validity
            Not Before: Mar 14 17:51:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83a516d72e26b2422ffe63b11fa9cb2891c0b3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:02:d8:c3:0c:1f:4e:dd:8b:d8:87:7c:ff:
                    c7:13:f8:7d:1e:47:39:4f:ce:6c:88:54:1b:b8:7c:
                    27:52:c2:91:a8:96:71:f9:a3:3e:b5:d7:b3:89:80:
                    fe:46:17:5a:ca:07:92:10:09:0d:b2:68:43:07:30:
                    37:e5:f9:3c:bf:3b:f6:7e:eb:59:8f:02:7c:93:bb:
                    a5:d0:17:d4:69:f8:d1:99:3d:e6:e7:5a:cd:94:c1:
                    fb:86:76:c4:e6:70:d8:61:df:bb:88:cc:cd:18:46:
                    36:a8:ab:e6:f9:77:59:e7:3e:50:f2:23:1e:66:c3:
                    ab:09:85:c4:2f:da:7a:9e:cb:93:26:74:6b:ad:4b:
                    f1:6b:36:4f:90:7f:44:15:54:79:a8:d4:a5:de:c7:
                    da:e0:a3:07:ee:f9:11:14:d9:d9:3b:86:49:a5:4d:
                    f1:ff:1e:e7:7f:eb:60:ba:95:ff:a3:f7:cb:f2:ab:
                    c8:df:b0:1d:9f:c6:f5:59:55:90:3d:32:83:5c:0c:
                    f6:61:c4:0c:b9:e5:c6:8e:22:ef:be:e6:93:e9:de:
                    e1:4b:e7:98:a5:d8:bf:bd:ba:87:2f:8a:5c:e2:92:
                    f0:7c:e5:06:4e:b7:6e:34:31:13:d8:42:a3:8e:e3:
                    e5:57:cc:bc:ad:a9:40:cf:06:d9:a6:4b:1c:8c:97:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:16:D7:2E:26:B2:42:2F:FE:63:B1:1F:A9:CB:28:91:C0:B3:BE
            X509v3 Authority Key Identifier:
                keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/g6UW1y4mskIv_mOxH6nLKJHAs74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:05:a6:21:e4:71:0d:3b:55:a7:fc:0d:8e:a5:54:9f:cd:
         66:59:74:b0:2b:6c:54:70:e2:e6:93:ff:7c:be:09:23:24:bc:
         9f:f6:8f:54:3c:64:b8:10:05:a0:5a:ae:16:90:b0:5e:51:72:
         93:9d:45:e7:cb:0f:61:f7:d5:0b:c9:89:c4:6e:9f:60:27:8d:
         30:b9:75:13:8d:ed:bf:56:41:56:26:df:ac:5d:06:ab:11:b0:
         b5:5b:ce:b3:a3:0a:b3:a3:29:df:c6:92:22:81:4e:35:46:f5:
         c3:88:1c:5c:dc:d9:a1:d2:8e:ae:29:75:22:a1:3b:cd:1c:d0:
         74:30:e1:ed:9a:83:27:76:43:1b:44:8b:1c:fb:9c:5d:9f:08:
         c5:63:bc:12:29:8b:93:2e:5e:65:21:19:88:8b:aa:ea:dd:f1:
         5b:b5:92:d4:19:f1:5d:38:ff:47:75:77:00:dc:54:ac:58:7c:
         78:a4:bf:38:42:e2:4c:eb:99:24:bb:5f:f5:d5:18:40:1d:60:
         8a:3b:72:3f:95:dc:98:ff:08:91:d3:45:f8:0e:20:af:da:eb:
         b9:5b:4c:4b:6b:00:01:35:ca:88:d0:0c:b9:9c:f5:00:4c:86:
         fc:98:d3:91:cd:d2:70:16:ed:48:41:2f:cb:13:e6:b9:ec:c4:
         42:14:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:01 2023 by rpki-client on console.sobornost.net