Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/1-rLanF9A105XZ4KWdt-EfGDKDtk.roa
File:                     1-rLanF9A105XZ4KWdt-EfGDKDtk.roa (raw, json)
Hash identifier:          ObNt8WMj9wqjipXqQMj/38v8kxEWmtG19M0pzSC5eZ8=
Subject key identifier:   FA:B2:DA:9C:5F:40:D7:4E:57:67:82:96:76:DF:84:7C:60:CA:0E:D9
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       8B67B6
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/1-rLanF9A105XZ4KWdt-EfGDKDtk.roa
Signing time:             Sat 01 Jan 2022 02:58:16 +0000
ROA not before:           Sat 01 Jan 2022 02:58:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39392
IP address blocks:        185.80.30.0/24 maxlen: 24
                          2a10:3900::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9136054 (0x8b67b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jan  1 02:58:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fab2da9c5f40d74e5767829676df847c60ca0ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:7b:64:5c:40:1a:5b:42:59:c1:93:af:a4:
                    e3:57:1b:ca:9c:35:d7:bf:b3:1c:6e:a5:60:0c:08:
                    a9:be:b2:8e:0b:aa:6d:dd:06:ae:9b:d2:40:fe:dc:
                    ac:43:24:72:ef:85:0b:91:70:02:36:0b:1b:bc:d5:
                    c5:69:8b:87:20:4a:8e:93:ea:97:4d:73:6f:d3:7f:
                    0e:03:ea:b7:0d:bc:42:31:6d:03:c1:d1:74:f6:c1:
                    b9:85:e7:23:aa:03:3c:80:fe:00:79:ea:27:01:ad:
                    28:e4:ce:1d:3b:1a:ad:a9:db:7d:26:10:84:87:1e:
                    dd:dd:b9:a7:2f:ab:ab:62:a9:48:80:8d:16:5c:f3:
                    ae:e1:ef:86:d4:31:b5:41:2b:d4:99:15:9b:ea:32:
                    7a:fe:94:e0:b8:fb:e0:ab:1e:c2:8d:19:e8:3a:02:
                    d0:33:f1:54:03:c3:34:b1:c9:f1:14:90:bf:43:50:
                    05:e8:06:db:70:25:4d:d6:8c:f9:26:33:bf:cc:12:
                    3f:18:6b:69:ea:71:ce:ad:f0:60:3d:5d:fe:93:57:
                    55:13:d7:bf:2f:3d:7a:5b:71:9a:28:87:f5:8c:0d:
                    34:7c:95:cb:20:d1:62:c8:72:a6:0c:c7:0a:05:5b:
                    b4:c4:78:cd:3c:29:d7:a7:22:fb:12:d5:9c:84:63:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:DA:9C:5F:40:D7:4E:57:67:82:96:76:DF:84:7C:60:CA:0E:D9
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/1-rLanF9A105XZ4KWdt-EfGDKDtk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.30.0/24
                IPv6:
                  2a10:3900::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:48:b0:4d:21:86:5a:1f:de:02:0d:e9:a7:05:52:61:f6:a5:
         87:e0:6e:01:43:f7:17:ac:38:cc:16:b8:01:84:7a:8f:d6:39:
         3d:85:49:3a:bd:4e:b6:7f:b6:3c:b6:06:c5:a8:48:52:2d:d6:
         ce:d0:cf:c9:b8:7d:d8:a3:07:d4:c8:2c:0f:3e:24:ab:80:f6:
         10:32:7c:a5:12:6b:60:2d:35:e2:f5:cc:7a:66:22:f0:36:d5:
         ad:a3:fd:9e:a1:07:c3:84:50:40:be:13:4f:fe:c7:bd:8a:89:
         82:6a:60:96:73:66:cd:93:3d:89:79:1f:ea:d7:ae:7b:96:26:
         55:83:d9:bb:46:f0:3a:e1:3c:48:69:d1:8c:e5:c8:2f:31:d7:
         2b:d4:e3:77:17:2f:57:b5:6b:d6:4b:3d:79:f2:09:fa:c8:17:
         7c:dd:1a:cf:ed:a0:94:d8:65:0c:e2:29:fc:4f:cb:ec:aa:88:
         57:5a:8d:b4:69:08:83:a7:50:64:19:ae:a5:3c:06:72:49:ad:
         8c:ae:c4:6a:b1:e1:7c:04:e8:c2:d4:67:a1:1a:ae:2f:90:34:
         d3:9a:47:fe:76:42:60:a2:d5:81:f8:3f:5b:a3:6d:43:4e:3f:
         75:04:f4:83:85:15:75:ca:2e:2a:48:72:0a:30:bc:6f:02:df:
         93:29:fd:b0
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAItntjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OGNiOTRhNDQzNDlmOThkNDA5YjdkZGI5YTA1M2RmNGFlZjFhZGRmMB4XDTIyMDEw
MTAyNTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFiMmRhOWM1ZjQw
ZDc0ZTU3Njc4Mjk2NzZkZjg0N2M2MGNhMGVkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAQe2RcQBpbQlnBk6+k41cbypw117+zHG6lYAwIqb6yjguq
bd0GrpvSQP7crEMkcu+FC5FwAjYLG7zVxWmLhyBKjpPql01zb9N/DgPqtw28QjFt
A8HRdPbBuYXnI6oDPID+AHnqJwGtKOTOHTsaranbfSYQhIce3d25py+rq2KpSICN
FlzzruHvhtQxtUEr1JkVm+oyev6U4Lj74Ksewo0Z6DoC0DPxVAPDNLHJ8RSQv0NQ
BegG23AlTdaM+SYzv8wSPxhraepxzq3wYD1d/pNXVRPXvy89eltxmiiH9YwNNHyV
yyDRYshypgzHCgVbtMR4zTwp16ci+xLVnIRjFfUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT6stqcX0DXTldngpZ234R8YMoO2TAfBgNVHSMEGDAWgBRIy5SkQ0n5jUCb
fduaBT30rvGt3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NNdVVwRU5KLVkxQW0zM2JtZ1U5OUs3eHJkOC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvYWMwYzA2LTgwNzItNGUzMC05NWQxLWEzZDU1MzNmMTc1Ny8x
LzEtckxhbkY5QTEwNVhaNEtXZHQtRWZHREtEdGsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4
L2FjMGMwNi04MDcyLTRlMzAtOTVkMS1hM2Q1NTMzZjE3NTcvMS9TTXVVcEVOSi1Z
MUFtMzNibWdVOTlLN3hyZDguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAC5UB4wDwQCAAIwCQMHACoQOQAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAUUiwTSGGWh/eAg3ppwVSYfalh+BuAUP3F6w4
zBa4AYR6j9Y5PYVJOr1Otn+2PLYGxahIUi3WztDPybh92KMH1MgsDz4kq4D2EDJ8
pRJrYC014vXMemYi8DbVraP9nqEHw4RQQL4TT/7HvYqJgmpglnNmzZM9iXkf6teu
e5YmVYPZu0bwOuE8SGnRjOXILzHXK9TjdxcvV7Vr1ks9efIJ+sgXfN0az+2glNhl
DOIp/E/L7KqIV1qNtGkIg6dQZBmupTwGckmtjK7EarHhfATowtRnoRquL5A005pH
/nZCYKLVgfg/W6NtQ04/dQT0g4UVdcouKkhyCjC8bwLfkyn9sA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:43 2024 by rpki-client on console-ams.rpki-client.org