Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/_PdFBJfT_b_dxpyRUzDpxVtkBd4.roa
File:                     _PdFBJfT_b_dxpyRUzDpxVtkBd4.roa (raw, json)
Hash identifier:          bacU/2p95Sr568EacbHE1xxjjCHveS9Wht2HSkx0GR0=
Subject key identifier:   FC:F7:45:04:97:D3:FD:BF:DD:C6:9C:91:53:30:E9:C5:5B:64:05:DE
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       150CA219
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/_PdFBJfT_b_dxpyRUzDpxVtkBd4.roa
Signing time:             Sat 01 Jan 2022 15:54:52 +0000
ROA not before:           Sat 01 Jan 2022 15:54:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49234
IP address blocks:        193.30.80.0/24 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353149465 (0x150ca219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan  1 15:54:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcf7450497d3fdbfddc69c915330e9c55b6405de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:fc:22:c9:45:1b:42:4f:9a:e5:84:96:85:
                    c2:ba:5e:52:f5:90:1b:6a:ff:d3:c9:d8:97:55:14:
                    32:1e:2a:d8:6c:d7:6c:87:2f:0e:b6:68:88:b5:e6:
                    73:b5:35:dc:a7:3b:2b:9d:3c:8d:03:23:89:1d:5b:
                    2b:2f:fc:ab:65:48:c1:50:95:d7:b0:b1:d4:aa:c3:
                    8d:1c:03:55:72:c5:b2:2c:fb:34:00:f8:9b:30:ba:
                    d7:b5:72:2d:f0:7d:33:2f:bb:5e:ae:76:61:02:73:
                    89:41:cd:01:66:03:0b:19:da:63:8b:f3:06:6c:6d:
                    6d:da:60:96:e3:15:81:1e:66:0e:27:d7:90:e1:b9:
                    94:35:28:4c:df:4c:f0:2e:76:fe:0d:0c:44:98:60:
                    cb:09:d7:21:81:ec:b6:a0:4d:c6:28:fa:f2:92:f0:
                    de:70:c5:a6:94:5e:4b:3c:14:7d:70:29:6c:25:d1:
                    4c:9a:f3:a7:9c:81:1d:83:31:a3:fb:c4:23:81:b1:
                    01:15:51:43:a2:d7:af:a0:3b:34:c7:61:98:88:f8:
                    be:a5:d6:8d:a6:ac:cf:76:a5:64:b0:71:10:c3:50:
                    e1:78:93:c8:bc:ea:1b:ef:6f:bb:18:c7:0f:9f:a4:
                    b7:cd:ef:e1:af:eb:fa:77:8f:70:f2:c8:6c:e1:fb:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:45:04:97:D3:FD:BF:DD:C6:9C:91:53:30:E9:C5:5B:64:05:DE
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/_PdFBJfT_b_dxpyRUzDpxVtkBd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:5c:b3:cc:cf:88:d2:cd:cf:89:c3:4e:bb:4c:6d:e2:b7:
         05:69:57:3f:ce:be:a5:6e:99:c2:27:7d:52:8e:da:e4:bb:86:
         14:e5:3c:1e:5e:37:0d:85:2d:87:82:81:5c:a2:cc:f2:d5:d0:
         a0:f3:b0:c9:5d:b4:4c:26:7c:48:8f:f4:18:19:1f:65:50:a2:
         d9:80:d8:d0:e7:93:ca:ce:68:b9:fd:ec:31:fc:79:f2:ca:ea:
         e6:be:67:92:66:85:f0:7c:d2:29:32:24:4e:80:68:32:3f:c4:
         9e:aa:f8:81:b6:d6:9e:56:3a:53:10:9a:c5:81:0f:5a:71:36:
         98:29:7b:a3:2b:6e:5f:2b:01:67:80:aa:75:a1:53:6f:83:1e:
         b7:27:9e:52:25:b1:cf:ca:ce:97:ad:9e:44:ce:bb:e5:57:32:
         fa:05:53:60:1b:2f:68:68:1d:d1:8a:db:9e:70:0d:45:09:42:
         9a:c5:08:b8:68:4f:b8:65:22:d1:26:a3:1b:dd:15:a2:ac:67:
         21:7e:69:b3:91:1c:90:91:fa:02:0b:5e:9f:61:11:a5:c0:e1:
         d4:38:52:3c:6f:9f:4c:e3:22:49:87:9c:03:0e:a3:97:0e:7f:
         e0:63:8e:4f:8a:96:84:21:31:14:0f:cd:7f:c3:a0:5e:39:2a:
         f3:2f:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:30 2024 by rpki-client on console-ams.rpki-client.org