Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/PjVxckqgIpVlLhqnRxW6jkLVYXI.roa
File:                     PjVxckqgIpVlLhqnRxW6jkLVYXI.roa (raw, json)
Hash identifier:          Mu3W8cNVGXPt9EI3VRroZ9yhSWC9jdIktxXJll7gDbM=
Subject key identifier:   3E:35:71:72:4A:A0:22:95:65:2E:1A:A7:47:15:BA:8E:42:D5:61:72
Certificate issuer:       /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial:       0DA76222
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/PjVxckqgIpVlLhqnRxW6jkLVYXI.roa
Signing time:             Tue 26 Apr 2022 06:35:36 +0000
ROA not before:           Tue 26 Apr 2022 06:35:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8856
IP address blocks:        212.42.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229073442 (0xda76222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
        Validity
            Not Before: Apr 26 06:35:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e3571724aa02295652e1aa74715ba8e42d56172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:14:84:ed:d7:95:f2:93:4f:72:01:66:26:
                    c7:58:0c:f9:d2:bd:1e:3b:eb:31:8a:97:45:7a:03:
                    b1:d9:be:0c:15:54:47:08:90:c4:bf:ec:cf:3b:07:
                    ed:28:74:0f:11:cc:cc:04:b2:4f:13:26:ee:ac:a4:
                    8f:43:8f:49:a0:f2:e0:73:6f:67:90:97:3a:8a:11:
                    75:ef:76:26:1c:db:43:b8:bd:a5:65:37:ca:29:99:
                    11:d0:bf:bd:7e:48:0e:d3:bb:dc:18:9a:67:ad:6b:
                    17:1d:bd:d0:18:2c:ec:08:ac:f0:c8:51:0d:55:dc:
                    2e:78:2c:33:22:bb:c5:75:10:03:ff:04:56:a5:70:
                    c0:0e:f3:8c:e3:56:8c:26:62:68:ba:72:30:49:58:
                    8a:e3:18:f8:52:7d:bc:9f:c7:cf:17:4c:08:62:92:
                    fe:75:02:0a:34:14:c9:6b:7b:14:54:73:0b:70:8f:
                    89:2c:78:da:73:69:a1:bd:22:77:41:07:2f:b9:de:
                    59:84:7f:ab:d9:d4:d8:ac:ae:18:81:dc:0d:f3:b6:
                    1c:05:fb:5e:e6:94:6b:4c:7f:04:57:88:24:80:ae:
                    de:bc:48:c0:b5:5f:41:3d:a0:8d:87:0e:4d:6f:e7:
                    25:a4:c6:a1:7a:c6:cd:cc:fb:cd:3c:5e:2c:5a:83:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:71:72:4A:A0:22:95:65:2E:1A:A7:47:15:BA:8E:42:D5:61:72
            X509v3 Authority Key Identifier:
                keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/PjVxckqgIpVlLhqnRxW6jkLVYXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.42.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:8e:9b:35:28:80:1a:69:a4:4a:9e:f7:41:48:9e:bf:ab:
         a0:80:47:b4:27:5e:f2:d1:6e:83:41:2b:41:e9:85:7b:6f:f2:
         9a:26:72:f3:53:d6:db:65:15:c0:41:df:f3:8c:84:ba:c0:0b:
         49:b7:81:22:c1:91:9f:f3:85:e2:f0:c6:b8:20:77:57:21:17:
         a8:30:ab:f9:80:00:a4:70:99:45:81:a1:fc:fa:ce:24:2e:04:
         0b:e1:e9:b5:a8:91:af:b9:f3:58:a5:6f:d9:30:23:35:41:56:
         d7:e6:be:28:3e:37:c6:71:ae:ac:e5:9e:a9:c5:22:23:a0:73:
         e1:5e:d2:62:27:cb:b2:ff:7b:28:9f:c8:5a:7f:0b:4f:6b:b9:
         6f:de:ae:18:1c:da:5c:18:c1:d3:ed:e0:29:85:83:c8:75:d8:
         92:8b:86:ed:17:1d:aa:86:97:2b:43:c0:71:53:ff:53:02:cc:
         96:84:4f:91:10:95:18:1f:08:23:39:e1:66:74:c7:c9:25:8f:
         49:0d:7b:a8:57:40:dd:39:66:cd:0f:01:fa:23:53:ef:39:a9:
         cd:4a:a1:81:db:19:38:54:95:3a:85:ee:00:23:94:7d:b2:8e:
         2f:bd:95:5d:f2:59:45:27:30:8e:33:f2:78:ca:08:8c:e4:10:
         b9:6e:f2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:49 2024 by rpki-client on console-ams.rpki-client.org