Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa
File:                     RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa (raw, json)
Hash identifier:          ejBgedJckxngoyK9Pln3YaADyDu2Vq1qOQ3mAAGloV0=
Subject key identifier:   45:8E:27:4F:2C:89:AF:A0:07:C3:C8:50:E8:CF:8D:F0:3F:C5:D2:6D
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1AB0FA0A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa
Signing time:             Thu 21 Apr 2022 17:30:14 +0000
ROA not before:           Thu 21 Apr 2022 17:30:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209644
IP address blocks:        80.97.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447805962 (0x1ab0fa0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Apr 21 17:30:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=458e274f2c89afa007c3c850e8cf8df03fc5d26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:e8:60:6d:4f:88:ca:d1:ff:bf:72:d8:82:
                    4d:86:e8:09:d6:b3:8c:fb:c5:5c:15:8a:de:fe:f8:
                    d5:5b:8a:79:64:8d:46:f6:f3:fa:14:7b:95:93:7f:
                    91:48:dc:72:9a:94:69:77:4a:d7:d2:01:60:69:99:
                    3a:17:2e:0b:92:9c:1a:6c:87:4c:a0:58:4d:2b:00:
                    44:91:c7:a5:65:08:ae:9f:31:34:72:1f:cd:67:86:
                    a2:02:d1:b9:c3:df:19:78:28:a7:f9:e8:2c:8b:e6:
                    e6:68:32:ee:09:96:6a:e5:ff:41:75:e8:94:d9:89:
                    7e:30:14:02:0a:4f:a5:a4:fc:c9:0c:1e:11:21:7c:
                    97:49:e4:43:ce:93:95:c7:2f:02:14:ff:17:fe:aa:
                    12:9b:e4:77:f3:c0:e5:d5:dc:2b:de:85:44:80:8e:
                    ec:06:e0:7e:28:db:a9:9c:5c:dd:07:9d:cf:4d:b7:
                    ab:7f:26:6a:97:a7:94:4a:08:12:c3:35:55:a5:69:
                    4c:46:40:4a:10:03:b7:ac:d8:90:a1:cb:21:d0:88:
                    93:ac:9c:a5:01:22:d9:02:55:e7:f8:42:73:34:34:
                    81:f9:9c:28:f8:47:86:a6:61:20:ff:c9:89:c6:c8:
                    1c:1a:f3:ea:79:c6:11:52:1c:14:82:ab:e1:1d:28:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:27:4F:2C:89:AF:A0:07:C3:C8:50:E8:CF:8D:F0:3F:C5:D2:6D
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RY4nTyyJr6AHw8hQ6M-N8D_F0m0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.97.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:09:a9:c2:f2:33:ff:d7:07:fd:19:61:08:e8:e9:37:c8:
         70:61:87:65:0f:f5:28:ac:13:6d:d3:aa:a2:f5:8a:7a:7a:5c:
         e5:d4:66:6c:79:52:a1:1e:ee:48:9f:cc:75:c7:27:b5:d8:76:
         fe:8c:b8:5e:99:6a:2e:a9:ff:56:2a:4f:6a:15:48:7c:f1:5e:
         83:0d:18:b4:65:90:cc:fb:98:36:f4:39:a7:8e:01:a1:60:06:
         2a:88:15:39:7c:7b:b1:a4:ca:10:76:cf:12:bb:39:d8:ea:32:
         5b:2b:4b:98:06:dd:99:f0:15:e5:14:85:97:c7:42:3b:ee:1f:
         76:df:8f:c6:e7:42:27:57:94:1e:6a:4d:f6:ea:e1:d7:47:5a:
         6a:0f:dc:70:af:10:36:6a:2b:30:df:b3:a2:f4:1f:8b:40:ed:
         11:c2:f6:11:25:0b:43:d4:e2:b8:29:3e:73:8c:ce:98:1f:9a:
         4c:aa:a9:3f:c7:7a:a5:91:3f:41:8c:d7:d5:6e:81:2c:f3:a6:
         ba:8f:8d:12:14:d7:e0:a7:f3:49:02:7e:13:80:4d:56:43:c7:
         41:8d:3c:95:cf:ec:71:9e:f2:31:f6:92:0e:b0:e6:d6:ee:71:
         d9:23:37:24:14:1c:5c:9f:21:6a:04:64:17:f1:65:92:f6:dc:
         8a:95:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org