Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/q7X_v8dyG5sR5Ezki1QdKLpK0x8.roa
File:                     q7X_v8dyG5sR5Ezki1QdKLpK0x8.roa (raw, json)
Hash identifier:          X5s/v7QnApjVTxGRod3Vs7tjadDEmvAMXCijCv+CHxc=
Subject key identifier:   AB:B5:FF:BF:C7:72:1B:9B:11:E4:4C:E4:8B:54:1D:28:BA:4A:D3:1F
Certificate issuer:       /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial:       0721A7AC
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/q7X_v8dyG5sR5Ezki1QdKLpK0x8.roa
Signing time:             Sat 01 Jan 2022 16:05:53 +0000
ROA not before:           Sat 01 Jan 2022 16:05:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51353
IP address blocks:        80.82.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119646124 (0x721a7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
        Validity
            Not Before: Jan  1 16:05:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abb5ffbfc7721b9b11e44ce48b541d28ba4ad31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:23:4e:55:43:53:5e:c3:fd:ce:5d:74:b6:
                    7f:77:e3:c3:90:d8:5b:2a:84:4c:a6:5b:92:33:c1:
                    fe:a2:b6:c9:55:50:3b:17:c5:ed:79:b7:42:08:9a:
                    5b:8d:8f:65:7a:d4:44:26:5b:ce:5a:43:95:ff:2d:
                    02:85:e1:ca:d7:de:a5:14:3e:04:1d:42:eb:cc:c1:
                    be:f7:01:35:50:42:da:96:4c:6a:77:84:a3:99:bc:
                    e6:7d:d4:1f:8e:3c:0c:1e:ca:12:00:18:6c:61:24:
                    0b:ea:b6:a7:c8:82:6b:46:f8:a9:ac:a9:8b:64:85:
                    ac:b9:da:9f:7f:01:54:3d:bc:e4:99:d0:77:76:51:
                    15:5a:46:7e:51:c6:92:91:38:15:5c:0f:4f:fa:d2:
                    57:8b:91:d0:b7:b4:fc:b4:2d:93:ae:81:d9:df:df:
                    b8:fd:54:93:34:98:cd:59:8f:27:35:44:e8:9c:ae:
                    3e:ed:e9:36:57:a3:06:21:f3:56:eb:25:69:24:a7:
                    1e:76:0e:93:0e:25:8a:7d:4d:2a:51:76:41:2f:0c:
                    f4:76:ca:fb:b3:f6:de:d9:f1:b3:fd:ba:b7:e9:89:
                    12:8c:b7:35:41:44:9f:72:30:65:2e:f0:c4:35:d4:
                    fa:5f:fe:39:0e:e6:05:0a:71:95:b4:e7:c8:e7:7d:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B5:FF:BF:C7:72:1B:9B:11:E4:4C:E4:8B:54:1D:28:BA:4A:D3:1F
            X509v3 Authority Key Identifier:
                keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/q7X_v8dyG5sR5Ezki1QdKLpK0x8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.82.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:ca:10:01:50:76:85:35:73:c7:c3:8a:10:4b:8c:c8:a2:
         52:db:86:ac:4f:d6:a6:35:0d:e4:ff:e6:77:aa:c6:ae:e7:0e:
         7c:44:5e:8b:6a:14:a7:53:6c:73:db:86:49:96:77:8f:83:53:
         a0:cd:48:8b:34:5c:31:4f:70:44:3a:2a:a8:90:31:b9:cf:df:
         26:97:01:0f:56:7d:29:2e:38:10:26:a2:83:c7:47:f1:88:9a:
         d9:49:90:31:44:f6:4b:29:9d:80:c3:63:51:19:37:21:e2:9e:
         48:0a:ea:86:51:b5:0a:8d:df:41:f4:49:2a:ca:7f:e3:35:4d:
         8b:d2:98:19:00:0d:38:c8:95:51:37:ff:20:7c:6b:36:b6:a3:
         04:56:0f:82:17:2f:fe:35:9e:bf:9f:dd:63:10:fd:43:1f:24:
         8b:0d:67:05:0f:94:f2:fc:07:dd:4f:38:6c:33:83:d8:3c:63:
         0e:e1:c0:a8:70:b5:e8:70:92:7c:ff:df:9b:3a:fb:ee:91:a7:
         c0:c7:02:ba:90:d5:05:54:3d:9f:cf:2c:c1:f5:0e:d1:67:fc:
         21:c5:4f:a3:66:26:16:da:a3:55:dc:66:10:8f:2f:3f:1b:df:
         60:06:be:76:03:a1:7a:28:e6:5c:88:11:db:56:fb:ee:7c:a0:
         df:2a:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:23 2024 by rpki-client on console-fra.rpki-client.org