Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/80_jnpV4N4PgMQCneLCAdW_CnBU.roa
File:                     80_jnpV4N4PgMQCneLCAdW_CnBU.roa (raw, json)
Hash identifier:          RL4jpChB8XT4YOdiwRwVfzRxYF/bvuprZcql6W7fX5E=
Subject key identifier:   F3:4F:E3:9E:95:78:37:83:E0:31:00:A7:78:B0:80:75:6F:C2:9C:15
Certificate issuer:       /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial:       06FCBC2F
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/80_jnpV4N4PgMQCneLCAdW_CnBU.roa
Signing time:             Sat 01 Jan 2022 15:03:28 +0000
ROA not before:           Sat 01 Jan 2022 15:03:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24978
IP address blocks:        80.79.224.0/20 maxlen: 20
                          80.79.232.0/22 maxlen: 22
                          185.133.104.0/22 maxlen: 22
                          2a03:89c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117226543 (0x6fcbc2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
        Validity
            Not Before: Jan  1 15:03:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f34fe39e95783783e03100a778b080756fc29c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:dc:2f:cb:b6:f8:1b:f7:05:49:f3:e2:1b:
                    44:dd:8e:5b:29:2d:28:e7:12:a1:75:56:7b:e5:49:
                    32:50:d2:03:c4:a2:7a:da:a6:1c:13:80:75:da:b8:
                    93:24:70:80:fd:89:d3:91:b3:17:db:28:b1:4a:bf:
                    03:cc:66:52:e2:1d:2d:91:fb:bc:68:d2:f1:9e:9c:
                    06:0d:bc:29:96:bd:b0:5e:e9:db:57:32:ac:e1:21:
                    61:18:fd:c4:1c:6e:07:b0:03:47:c3:bc:4e:3b:8e:
                    18:3d:c0:11:0c:45:91:9e:c1:9f:f8:0c:86:fc:06:
                    d7:44:f1:91:d9:8d:44:5a:84:df:63:a8:8f:17:24:
                    e3:7d:25:76:f6:29:fe:a7:74:44:68:2d:87:f8:13:
                    0e:29:32:c1:78:fa:af:ec:42:47:1d:51:0a:5b:47:
                    bd:ed:b5:76:49:ca:18:30:eb:c9:7d:cb:d6:8c:22:
                    50:ef:a0:c7:38:d1:26:c0:f8:b6:ad:7c:ec:95:4d:
                    df:19:e9:0f:44:13:35:8b:e9:aa:81:f2:4d:c7:ac:
                    3b:b9:d2:98:7c:65:27:f2:d1:8f:6a:b3:ca:9e:0b:
                    a3:6e:a8:00:99:e2:a1:10:35:56:fa:88:dd:39:54:
                    bd:dc:c5:45:cf:2f:cf:37:ec:1d:3e:17:7b:18:40:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:E3:9E:95:78:37:83:E0:31:00:A7:78:B0:80:75:6F:C2:9C:15
            X509v3 Authority Key Identifier:
                keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/80_jnpV4N4PgMQCneLCAdW_CnBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.79.224.0/20
                  185.133.104.0/22
                IPv6:
                  2a03:89c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:33:cf:dc:40:40:0b:75:01:25:b7:ad:cd:92:1c:b3:78:62:
         a3:a8:a7:84:63:94:fe:d7:f8:5c:93:b5:fa:e9:60:7e:f5:ce:
         d2:ea:5a:d4:94:ac:3d:71:65:da:bd:1e:c1:16:bf:69:fa:ed:
         9f:5e:2a:50:e3:d0:4e:60:8e:af:6b:20:2c:e7:f5:bf:33:dd:
         32:86:e2:08:1d:49:0b:8a:ec:29:46:82:85:6b:37:ae:37:ec:
         08:3c:66:5d:ff:af:4f:74:f0:62:83:fe:85:f5:0d:ed:fd:10:
         ad:18:5f:be:da:33:dd:79:0a:29:9c:16:16:5d:d4:2d:52:b7:
         28:1f:e8:a1:a9:e3:e6:ad:ff:1f:9a:f1:04:6d:93:d2:88:61:
         38:9e:93:73:3f:36:44:07:0b:ea:17:0f:9b:03:59:41:ea:34:
         55:ed:71:37:8e:6a:7c:66:26:dc:f1:e9:31:b3:a2:0f:9c:fc:
         7d:dd:cd:8e:72:f2:bd:53:3f:1e:94:18:2d:c5:64:24:97:d0:
         77:95:39:db:81:42:8c:93:64:47:33:0f:fa:6b:77:31:0a:12:
         89:ba:b1:2c:08:fb:8e:32:df:36:fe:fb:79:3f:7b:ef:25:71:
         8e:57:48:9b:0f:91:c9:f0:40:d5:f8:b8:f7:7c:e9:9c:b5:9a:
         bd:18:30:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:42 2024 by rpki-client on console-fra.rpki-client.org