Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/52fX8rVZbj3thfBT5jNwQ3_OodQ.roa
File:                     52fX8rVZbj3thfBT5jNwQ3_OodQ.roa (raw, json)
Hash identifier:          NP5v1hPcUTvgBYK2WvANHM8AIKHox4uuSKWw3UEdaNE=
Subject key identifier:   E7:67:D7:F2:B5:59:6E:3D:ED:85:F0:53:E6:33:70:43:7F:CE:A1:D4
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1AEC7D21
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/52fX8rVZbj3thfBT5jNwQ3_OodQ.roa
Signing time:             Tue 03 May 2022 11:13:43 +0000
ROA not before:           Tue 03 May 2022 11:13:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25103
IP address blocks:        80.96.217.0/24 maxlen: 24
                          80.96.234.0/24 maxlen: 24
                          80.96.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451706145 (0x1aec7d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: May  3 11:13:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e767d7f2b5596e3ded85f053e63370437fcea1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:8e:b3:aa:a8:ac:c1:27:bb:56:a1:9b:3a:
                    21:46:62:e5:37:06:3f:6f:0c:b0:df:dc:6d:03:4c:
                    33:2e:46:df:f8:8d:cf:74:14:7f:ee:eb:d9:61:3d:
                    da:b7:fe:f2:94:65:32:57:ce:86:b1:85:56:0f:d3:
                    26:39:c6:1d:48:6e:c0:eb:75:9f:b3:25:d7:73:e2:
                    88:ab:93:79:f5:8a:42:51:ce:5e:eb:45:56:82:75:
                    47:c7:48:c1:41:ac:4e:3b:26:9d:da:cc:12:1b:ca:
                    8b:7c:1e:a6:a2:67:2d:a8:9c:b3:0d:33:02:b0:22:
                    d4:26:f8:94:22:c2:fb:6a:0d:d2:ac:60:13:cb:03:
                    a4:45:77:85:b7:f9:96:3b:11:7d:7f:03:57:ca:58:
                    ec:ed:c3:2f:3a:0b:d8:17:00:97:23:de:fa:4a:68:
                    fe:7a:3d:e8:68:d5:49:2f:42:35:44:72:6b:45:02:
                    49:c2:52:5b:98:b8:5c:f8:b8:34:ca:5f:33:58:79:
                    3a:16:99:49:a8:cc:c5:7f:a8:a0:a4:40:83:c0:cb:
                    06:47:13:88:a4:b7:44:e1:f6:67:b2:af:e9:32:bd:
                    f0:9a:aa:0e:47:49:25:e3:d4:37:87:3d:2c:fb:25:
                    2d:25:e2:8d:ef:8f:0a:c9:b8:d0:7b:4b:2b:06:85:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:67:D7:F2:B5:59:6E:3D:ED:85:F0:53:E6:33:70:43:7F:CE:A1:D4
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/52fX8rVZbj3thfBT5jNwQ3_OodQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.217.0/24
                  80.96.234.0/24
                  80.96.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:bf:92:99:9b:83:28:52:d5:ff:4d:d8:96:54:75:28:dd:
         b0:c7:c8:e0:e7:27:70:2b:48:ba:e4:d0:03:5c:f5:88:81:ec:
         cc:02:9b:4c:01:58:e9:e2:49:66:ea:4a:c2:df:6c:1f:7f:d5:
         81:f8:ca:31:f6:06:e7:10:5d:e1:bd:fe:d5:1f:26:be:69:af:
         6d:c1:f1:6f:01:07:db:d0:4d:dd:6e:50:90:9a:ae:a9:16:5b:
         b7:e8:b7:ec:4c:23:c4:31:87:6d:bb:8b:f2:ac:dc:ea:34:9d:
         1d:73:c4:b1:2c:b6:71:ae:fd:2c:73:66:24:f3:09:06:4b:55:
         6a:ad:79:ad:eb:6e:30:00:eb:50:0c:7c:d3:28:d9:e2:dd:dd:
         e4:83:f0:92:a8:5d:8d:f0:b6:25:f6:61:ec:8f:fe:3c:c0:85:
         c9:81:1f:c9:08:d0:a2:f2:89:24:6c:a5:6e:b7:7b:8f:2b:6b:
         4b:51:5e:b5:77:2d:20:62:0c:3d:43:e9:99:d4:13:6f:f9:5b:
         97:05:c9:45:c5:a1:f6:b7:c5:59:81:54:c2:fd:62:cb:94:e6:
         d9:a4:16:9a:15:52:85:82:75:b2:36:8d:74:08:97:e6:44:4c:
         a7:31:ab:ae:62:7a:02:9e:2a:8d:6b:6a:c6:4c:79:21:f0:cf:
         8a:cf:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org