Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l9d2Qokd1XejQALgktfFHgQbOIo.roa
File:                     l9d2Qokd1XejQALgktfFHgQbOIo.roa (raw, json)
Hash identifier:          hVvD0DMLT7lGu3325c7Cp71b2a61OfOq2wdjSfJE70w=
Subject key identifier:   97:D7:76:42:89:1D:D5:77:A3:40:02:E0:92:D7:C5:1E:04:1B:38:8A
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1B63CAE8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l9d2Qokd1XejQALgktfFHgQbOIo.roa
Signing time:             Tue 31 May 2022 12:27:58 +0000
ROA not before:           Tue 31 May 2022 12:27:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33875
IP address blocks:        81.180.92.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459524840 (0x1b63cae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: May 31 12:27:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97d77642891dd577a34002e092d7c51e041b388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:09:52:41:0e:20:cd:77:11:4e:2e:4f:83:
                    df:5e:e2:7a:8e:ed:3b:bc:ef:ac:f8:53:4e:e6:37:
                    fc:ed:a2:84:b0:b6:df:1a:f8:22:94:de:a7:fa:c2:
                    f3:ec:ed:8d:34:49:55:c8:0a:3c:64:94:34:18:5a:
                    9a:b5:c0:4f:14:8b:7e:82:ba:e7:6e:9e:b3:0c:ac:
                    77:56:57:f1:3d:5a:35:86:01:a9:09:b2:37:fb:36:
                    09:5a:42:9e:b2:b5:9e:3e:56:b7:52:b2:a2:2d:5a:
                    c3:24:86:32:f7:67:18:d7:41:44:6f:59:33:1c:c1:
                    a3:1e:72:cf:a7:0a:fa:84:63:ab:ce:26:2c:69:db:
                    bd:c7:e2:71:d5:38:7f:95:fb:d9:12:66:38:2f:c9:
                    ce:17:60:42:c9:d2:0d:ba:d7:43:42:ab:dd:a5:4c:
                    ca:bc:16:47:7a:9b:2d:bf:b1:2f:71:cb:22:a0:e8:
                    4e:e2:e0:a8:fa:14:99:e7:e2:10:7d:31:3e:97:4c:
                    7b:18:29:3b:1a:04:49:7e:35:47:52:b6:43:f6:8b:
                    3b:a9:bb:f5:ed:94:8a:58:e5:f1:d9:59:e1:c8:1b:
                    1e:b7:42:8b:0e:25:a2:05:47:93:c3:93:b8:77:62:
                    02:cb:7b:cd:45:da:fd:6c:a3:55:12:a4:48:76:37:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:76:42:89:1D:D5:77:A3:40:02:E0:92:D7:C5:1E:04:1B:38:8A
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l9d2Qokd1XejQALgktfFHgQbOIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.180.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:73:ce:b0:16:bb:c4:ac:09:6a:6f:99:9b:9f:f8:be:cd:db:
         ce:19:37:58:0b:80:05:a4:38:fb:9f:8a:2b:ca:c5:4b:cd:d8:
         0d:a1:c9:17:d6:25:21:18:58:e1:9f:c8:17:7a:12:85:59:59:
         f4:08:4a:78:fe:ec:9e:89:a6:7b:9c:1c:6f:ec:6d:f5:a5:4e:
         80:d1:d4:a8:76:d2:a4:12:e8:4c:f9:23:b0:b8:d9:f7:36:3e:
         4e:80:86:14:4d:fb:2e:ed:c9:a8:85:5e:c5:77:ef:ab:72:6a:
         94:ef:44:ed:0f:72:28:dc:0c:58:60:fb:6d:ab:44:6c:c7:24:
         1a:88:b0:b3:75:04:92:52:38:d5:39:22:0b:77:dc:b2:b9:4f:
         d0:02:93:a0:98:a8:cb:fd:85:21:06:41:4f:80:76:56:52:36:
         8f:24:dd:9d:8c:e8:bc:11:b0:b2:4c:6e:5d:b6:90:32:ef:f5:
         eb:f0:59:f5:2c:8b:b2:dd:9f:00:e7:b4:a8:e1:9e:64:4d:a8:
         b2:4c:da:9b:00:b2:0b:89:fb:e4:20:4c:3e:e1:4a:7b:9f:ed:
         e4:03:a9:5c:db:fa:fa:67:94:17:d6:75:31:c6:b4:a3:34:4d:
         4c:4f:8b:17:55:72:69:3a:df:15:e3:fe:e0:2d:43:ee:69:b0:
         ef:78:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org