Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/spFoPT-btl3-5nNpyyt6UEYuX9o.roa
File:                     spFoPT-btl3-5nNpyyt6UEYuX9o.roa (raw, json)
Hash identifier:          Y1dfMsHXL3xj4CaTDH8zccTaW+rrgfJgZ10pxaqCmhI=
Subject key identifier:   B2:91:68:3D:3F:9B:B6:5D:FE:E6:73:69:CB:2B:7A:50:46:2E:5F:DA
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1B1E63CA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/spFoPT-btl3-5nNpyyt6UEYuX9o.roa
Signing time:             Mon 16 May 2022 15:06:29 +0000
ROA not before:           Mon 16 May 2022 15:06:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6718
IP address blocks:        80.97.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454976458 (0x1b1e63ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: May 16 15:06:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b291683d3f9bb65dfee67369cb2b7a50462e5fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:ab:df:45:9d:0c:48:9b:54:dd:50:a1:d4:
                    41:53:6e:c4:5f:49:9e:bf:0e:96:6e:e0:6e:39:23:
                    be:5b:26:ea:69:3f:cb:07:9f:9d:5b:73:29:dd:fb:
                    6d:93:68:d1:d4:db:c2:c1:d4:b4:ad:4b:14:e5:4b:
                    d6:24:00:e9:5b:3b:1c:34:80:dd:21:a9:d3:84:b2:
                    34:3d:57:70:62:6f:b0:5a:71:10:71:90:c4:ee:37:
                    d9:63:1c:89:81:cf:92:88:7d:55:bd:a0:11:ca:52:
                    ca:8f:b0:ba:ae:5c:45:40:6b:34:45:d5:11:30:e2:
                    22:ea:4a:2d:dc:01:b8:73:93:1a:a0:91:ba:ba:35:
                    54:e8:36:d5:87:ec:ef:e8:78:3e:e3:7c:f2:e9:63:
                    f2:d9:30:4e:43:9c:8f:df:87:92:87:57:49:0f:66:
                    cf:b8:6c:af:e4:c0:79:82:15:b9:49:e4:01:63:dd:
                    2f:c9:20:f6:a5:00:c2:dd:db:33:d3:c1:02:a8:01:
                    fc:0a:76:77:95:00:c5:d8:b1:00:71:91:a6:27:35:
                    43:5e:18:88:57:59:69:40:fb:1e:19:85:42:8f:6b:
                    ac:03:f2:55:9c:66:15:2d:fc:0d:dc:51:8e:50:09:
                    76:28:f3:a7:63:65:10:e5:ac:fe:69:cc:78:56:34:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:91:68:3D:3F:9B:B6:5D:FE:E6:73:69:CB:2B:7A:50:46:2E:5F:DA
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/spFoPT-btl3-5nNpyyt6UEYuX9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.97.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:82:1e:3a:52:bf:64:f1:30:e1:d1:e9:39:56:90:76:c7:53:
         2b:21:99:0c:74:07:8b:ee:ec:fc:88:a7:e7:32:2d:4d:e8:b2:
         a5:32:5e:b8:ed:f6:f4:39:60:a0:e5:52:d3:8b:6e:c8:57:f1:
         3f:6e:ac:c4:75:d3:7f:26:26:fa:03:b7:1e:6e:98:84:f2:a8:
         54:71:55:1b:34:22:88:5f:40:2f:a2:5a:14:fd:0f:29:b1:d7:
         66:49:cc:ff:d0:3b:ad:37:e0:d0:b2:f5:6d:33:d5:51:39:ec:
         fb:8d:59:7d:13:d7:a3:4a:a2:00:14:32:78:be:56:ad:cc:a7:
         9a:99:c2:01:e3:64:89:c4:11:17:18:63:20:8b:00:44:f5:25:
         e1:9f:c3:83:5f:17:65:fb:e7:f3:cd:e2:81:ac:4b:65:f4:db:
         38:43:60:92:2d:7c:33:10:6c:73:4b:75:c3:55:b4:ae:5f:f1:
         79:ff:f1:e8:09:22:49:ce:12:cb:84:2b:20:2c:bc:72:68:84:
         3b:15:c3:61:6b:6e:9e:66:e1:c9:de:60:46:4b:1b:e7:ab:c8:
         c9:98:a1:57:23:4b:e2:74:9d:31:83:23:3d:89:63:86:ed:58:
         d5:fa:af:8a:98:f8:33:37:0f:e3:6a:e2:84:14:b0:6a:c0:2a:
         2a:34:f8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org