Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/dRgCKUAy-qI5aP5VM-jpLetltU4.roa
File:                     dRgCKUAy-qI5aP5VM-jpLetltU4.roa (raw, json)
Hash identifier:          hvi2MrFXElikL7Ig+QglMi+da65Mv4WmaRjVuMkjDTE=
Subject key identifier:   75:18:02:29:40:32:FA:A2:39:68:FE:55:33:E8:E9:2D:EB:65:B5:4E
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       368DD4DF
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/dRgCKUAy-qI5aP5VM-jpLetltU4.roa
Signing time:             Sat 01 Jan 2022 01:01:03 +0000
ROA not before:           Sat 01 Jan 2022 01:01:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6774
IP address blocks:        80.231.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915264735 (0x368dd4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jan  1 01:01:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=751802294032faa23968fe5533e8e92deb65b54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:5f:04:22:76:f3:5c:1e:c3:8d:b3:76:86:
                    00:a0:1a:52:ff:9e:ab:f8:1c:5b:d6:99:cd:ee:3e:
                    4b:d7:61:ff:08:88:23:c7:69:b3:03:b9:82:54:98:
                    52:0a:d4:e9:1f:6e:59:7e:e3:03:9b:e8:98:f9:88:
                    46:76:f4:69:17:81:bc:8c:18:bc:e4:ef:26:cc:e0:
                    2f:5d:87:67:f0:3f:89:81:e6:3c:e5:d3:16:b7:87:
                    87:27:b7:e3:25:58:8f:d9:b4:55:9e:71:98:3b:de:
                    4a:4e:1f:e6:9e:92:01:dc:fa:f7:17:02:13:03:50:
                    12:7c:2f:45:58:3b:80:79:ad:0e:26:e2:70:89:86:
                    3d:37:81:1b:c2:d5:8a:f0:34:fe:d8:7d:61:86:de:
                    6a:00:f4:62:04:7c:70:23:e7:5f:f8:b8:12:92:07:
                    d1:9d:22:6b:c9:5a:40:03:38:33:a2:26:59:4f:d2:
                    4a:9a:e7:de:63:c0:9c:c2:6a:d6:b9:9c:89:64:49:
                    52:17:66:be:42:59:23:05:06:e2:b2:db:fe:bc:5f:
                    cd:3a:a9:20:a9:c2:d8:0c:19:12:11:c1:e9:bd:0a:
                    09:38:ea:c0:78:26:98:ec:4c:ab:e9:74:dc:61:b0:
                    f8:61:e2:c2:79:d3:cd:18:f2:be:b4:3c:bf:d3:ce:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:02:29:40:32:FA:A2:39:68:FE:55:33:E8:E9:2D:EB:65:B5:4E
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/dRgCKUAy-qI5aP5VM-jpLetltU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.231.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:95:17:9c:cf:da:ec:fa:21:03:8a:62:92:46:3d:ca:34:
         54:e5:49:d8:31:e2:43:b7:14:89:8c:bd:b9:b5:e3:09:34:8c:
         b0:26:6a:36:49:46:56:99:a8:57:86:5a:03:55:17:de:fb:53:
         eb:cf:2f:68:fb:a7:54:ed:91:99:75:6c:38:85:9a:7e:9b:92:
         35:4b:57:5d:9c:18:32:b7:39:03:87:57:ae:81:d8:7b:0b:02:
         83:7e:91:b5:88:35:01:60:59:52:c1:86:fd:1f:bf:59:c6:2f:
         90:d9:9e:1e:c2:73:6f:9f:2e:78:3d:62:9e:d8:a1:0b:95:6b:
         39:48:9f:8b:5c:47:4c:f7:12:15:73:1a:5f:a0:fb:82:51:93:
         0b:ae:42:b0:c3:9c:8d:a6:4d:56:0a:2f:a2:aa:c2:08:47:d9:
         37:4a:a6:4f:a5:08:03:33:3f:1b:ea:c0:b6:b0:db:3f:90:ae:
         db:ce:cd:91:2e:ca:d6:db:14:15:a9:af:9d:da:f6:40:0d:8f:
         fb:12:e3:ce:7e:2e:8d:36:3b:4d:03:78:49:20:cb:78:b9:07:
         ce:0f:2a:bb:d6:3c:32:82:e2:de:f4:00:fb:b4:59:f6:db:2c:
         8c:be:3a:4e:b2:dc:76:26:1b:89:5f:16:6b:43:65:f5:cb:6a:
         f1:f8:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:30 2024 by rpki-client on console-fra.rpki-client.org