Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/myI4pXyS-pvKKpOkxcO_A6-usig.roa
File:                     myI4pXyS-pvKKpOkxcO_A6-usig.roa (raw, json)
Hash identifier:          YJSep/CBCrrHvCOunli8aKBP5xMWfGjr15zpVntocXI=
Subject key identifier:   9B:22:38:A5:7C:92:FA:9B:CA:2A:93:A4:C5:C3:BF:03:AF:AE:B2:28
Certificate issuer:       /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial:       387D19AA
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/myI4pXyS-pvKKpOkxcO_A6-usig.roa
Signing time:             Sat 01 Jan 2022 16:10:56 +0000
ROA not before:           Sat 01 Jan 2022 16:10:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31253
IP address blocks:        80.242.222.0/24 maxlen: 24
                          80.242.223.0/24 maxlen: 24
                          188.127.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947722666 (0x387d19aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
        Validity
            Not Before: Jan  1 16:10:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b2238a57c92fa9bca2a93a4c5c3bf03afaeb228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:95:e0:9a:42:d1:98:07:11:ad:cb:c2:5e:d4:
                    b2:76:fe:2a:31:6d:ba:20:22:fc:74:a6:e4:ff:93:
                    f7:8e:a2:c1:aa:45:f0:82:f9:2f:08:55:86:8f:6a:
                    d7:ab:1f:42:a9:5f:cc:5f:29:8d:54:89:65:0c:4b:
                    a1:ed:63:c8:31:f1:60:f6:d1:aa:d9:b1:db:e0:c2:
                    36:64:c5:40:a5:1d:8e:87:be:08:25:5e:5a:1d:8f:
                    64:38:73:72:b2:ae:b4:a7:d1:c7:ca:fd:02:14:c0:
                    35:e7:5f:05:91:a4:04:6d:7a:6e:ee:57:1f:c3:ff:
                    ee:f7:79:db:43:de:2e:0f:69:4d:50:e2:08:54:dd:
                    d5:f4:a7:99:c9:84:fb:37:86:2b:da:cf:e6:25:aa:
                    90:eb:b1:94:26:24:e2:0d:e5:cc:6c:69:69:8d:5d:
                    14:7e:e1:11:72:67:1e:d7:26:4d:33:60:ff:fd:f5:
                    7d:42:19:cf:bf:88:ea:af:11:6e:34:00:00:f5:89:
                    1f:e1:40:2e:27:e5:27:34:2b:42:d2:13:ab:f0:a8:
                    4f:07:0f:48:02:30:f2:09:30:19:83:d7:dd:57:86:
                    44:ef:13:ca:9f:62:5e:26:79:75:8e:a1:66:3a:7e:
                    10:0f:6d:f8:8a:a6:25:06:be:17:98:24:ec:c6:da:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:38:A5:7C:92:FA:9B:CA:2A:93:A4:C5:C3:BF:03:AF:AE:B2:28
            X509v3 Authority Key Identifier:
                keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/myI4pXyS-pvKKpOkxcO_A6-usig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.242.222.0/23
                  188.127.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d7:3c:4f:2d:9d:57:fc:af:1d:30:45:6e:8c:e1:e3:65:3e:
         7e:2b:e5:04:5c:ac:6d:f5:43:35:22:7a:d8:e6:e9:dd:82:43:
         f1:50:a6:e6:68:fc:99:80:b6:b2:c0:82:d6:0f:4c:fa:13:8e:
         5c:a7:89:27:b6:11:4e:9f:ef:30:98:f2:e2:79:6d:a0:79:db:
         54:a1:7c:83:8d:82:cd:b5:00:fd:8b:d0:65:75:98:86:32:d8:
         e2:b2:bf:2e:76:ba:92:a8:15:23:42:86:ad:14:04:8f:22:5c:
         f3:12:87:62:00:a5:e3:ef:73:b8:79:67:ad:a6:e9:7c:02:5a:
         39:ea:b5:ef:6a:78:c5:7c:d3:0c:a8:a5:29:02:6e:8b:36:77:
         a1:0b:2a:1c:42:17:a1:be:fb:4c:6f:c2:ed:19:ce:92:b8:ab:
         a0:a7:e3:22:d3:8e:dc:96:d5:ce:a2:78:10:a2:63:84:9f:89:
         98:6e:a1:8f:1f:28:05:d3:a1:45:35:45:30:62:60:0e:f2:92:
         27:76:03:88:c6:63:2a:25:64:da:69:6e:10:3c:9a:fd:06:a2:
         53:84:91:f4:7a:6b:f8:ce:a7:b9:a7:1d:04:2f:ab:a2:7d:72:
         f4:a6:98:f2:ab:20:f8:02:e4:4e:87:1f:ce:92:08:5c:58:b4:
         4b:50:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org