Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/b_rPt2CTrwOUkAGC16Fh1GdVUPE.roa
File:                     b_rPt2CTrwOUkAGC16Fh1GdVUPE.roa (raw, json)
Hash identifier:          JXfv96H+qzQ5Bq17Lu4CDABpqaR5kIf20tM+xmj2u3A=
Subject key identifier:   6F:FA:CF:B7:60:93:AF:03:94:90:01:82:D7:A1:61:D4:67:55:50:F1
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1B56ECBB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/b_rPt2CTrwOUkAGC16Fh1GdVUPE.roa
Signing time:             Mon 30 May 2022 08:28:04 +0000
ROA not before:           Mon 30 May 2022 08:28:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42731
IP address blocks:        80.97.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458681531 (0x1b56ecbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: May 30 08:28:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ffacfb76093af0394900182d7a161d4675550f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:68:1e:97:17:71:06:6e:d8:dc:e1:d3:af:d0:
                    cd:27:ed:9e:47:fd:d8:bf:fd:6a:24:7b:19:88:6f:
                    ca:dc:68:bf:78:8b:de:22:9b:01:70:0a:01:88:77:
                    4e:f7:de:a1:c7:0e:ed:84:99:8c:3f:92:cb:2a:8b:
                    ea:54:3a:df:00:34:87:65:5b:21:a7:12:62:1c:4d:
                    41:bf:52:20:92:5a:21:04:ae:79:bb:32:08:9b:be:
                    7f:3a:7c:9e:3e:89:8d:67:99:c5:88:4a:cc:20:bb:
                    0d:0b:fc:7c:44:bf:e4:b8:1b:f0:51:24:a9:10:56:
                    5f:6e:3e:a3:08:96:2a:ab:df:50:db:ba:c8:d0:ee:
                    25:fc:bb:ec:64:34:23:1f:e4:ce:3a:4a:d4:f9:70:
                    68:a2:52:b6:3a:48:6f:1e:50:91:a8:78:8c:37:ac:
                    03:05:e8:bb:9c:6c:18:45:e1:36:87:d6:a2:a6:31:
                    6d:d3:59:c9:eb:cc:57:8c:15:6b:2c:79:3b:bc:af:
                    a0:ee:c3:25:38:b4:c8:06:7a:c3:2d:3d:19:9d:f7:
                    16:0c:b7:59:c6:0e:43:66:4c:9c:2b:47:78:3a:e1:
                    5c:f7:85:d9:83:a0:e1:be:d6:e4:11:60:af:59:f8:
                    d0:a0:03:f0:41:9d:d8:b6:4d:40:78:14:2d:15:01:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FA:CF:B7:60:93:AF:03:94:90:01:82:D7:A1:61:D4:67:55:50:F1
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/b_rPt2CTrwOUkAGC16Fh1GdVUPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.97.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:19:1b:db:76:f3:80:87:81:d9:cd:2e:56:0e:da:24:c1:13:
         17:2c:4c:4b:ed:09:1a:ee:52:53:f5:cf:56:99:a0:76:38:2b:
         6b:e4:0d:18:91:1f:b1:4c:e7:59:10:54:2a:f4:fd:37:97:e2:
         22:ad:fd:58:89:8b:fe:c5:44:df:83:24:1f:e8:a0:0e:45:a7:
         5b:b5:32:68:38:90:13:cf:97:f5:e0:cd:00:eb:eb:69:d3:69:
         8a:e6:1d:fc:a2:eb:46:d9:6f:30:5a:67:62:6d:6c:7a:38:d1:
         3f:26:e4:d4:80:80:a1:a9:b5:e7:6a:f6:7f:9c:22:40:90:4a:
         6e:9c:22:0d:fa:a3:73:86:50:f6:75:82:e7:c9:88:4a:bc:02:
         d2:73:6b:eb:37:a9:3b:8e:5f:e0:e5:e6:82:4c:7f:10:fe:67:
         24:3e:a4:a0:22:14:c3:7c:0c:f6:ca:e8:ce:8e:b7:29:71:89:
         be:56:36:55:1d:c4:b3:43:cb:ff:6c:6c:e4:67:d0:7b:12:b3:
         45:94:13:45:4b:0b:75:c3:4a:07:4c:dd:5e:a6:33:a9:6e:d4:
         06:b4:c3:94:bb:7c:ae:7a:cb:28:6a:6d:69:8f:e0:3b:82:ad:
         26:2a:bd:9c:b9:a4:92:f6:ea:81:cc:fd:14:f3:49:a5:bf:40:
         00:7b:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org