Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/qCLfcYiPi0ufgfTkY9BtrzK4PuU.roa
File:                     qCLfcYiPi0ufgfTkY9BtrzK4PuU.roa (raw, json)
Hash identifier:          XLTX6/0N6meYUOvR64Sf46uswDHnHRUkgpi07hfkUSk=
Subject key identifier:   A8:22:DF:71:88:8F:8B:4B:9F:81:F4:E4:63:D0:6D:AF:32:B8:3E:E5
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       0182D8F769A9ECCB265041E0159CF9D4FDA5
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/qCLfcYiPi0ufgfTkY9BtrzK4PuU.roa
Signing time:             Fri 26 Aug 2022 07:04:29 +0000
ROA not before:           Fri 26 Aug 2022 07:04:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57277
IP address blocks:        80.92.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d8:f7:69:a9:ec:cb:26:50:41:e0:15:9c:f9:d4:fd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Aug 26 07:04:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a822df71888f8b4b9f81f4e463d06daf32b83ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:d0:65:e9:e4:9c:66:6f:cf:cd:95:eb:87:
                    d9:56:93:cf:d9:b5:85:86:f4:af:03:f7:69:ea:25:
                    e9:95:e8:bf:55:d1:f6:da:a3:98:3c:7f:66:a4:3c:
                    c9:d3:1e:4c:ef:3c:74:f0:b3:c9:c1:69:e3:14:36:
                    61:62:08:70:92:e6:38:3e:49:4c:80:e3:75:44:48:
                    ad:e9:eb:a9:93:c4:f8:a7:7d:45:41:aa:54:8d:cc:
                    2c:61:d0:92:e9:62:b3:2a:cc:73:cf:aa:93:c3:f4:
                    95:7e:27:c1:c6:e0:50:64:9e:33:b3:61:34:b8:26:
                    ec:e9:fe:02:ca:a8:55:c6:65:df:d4:2b:6e:c9:9b:
                    b7:e0:54:22:bc:62:7f:b6:26:6e:2c:ec:90:e5:af:
                    3f:a6:2e:d1:b4:12:ad:5e:86:0e:0f:f6:af:ac:cd:
                    c0:c3:79:75:ce:ef:90:23:e0:5f:3e:78:8a:7b:e4:
                    28:89:b6:6a:95:e5:4a:af:56:d8:18:f3:c9:49:5b:
                    09:78:24:ee:25:2d:b2:8d:2b:c8:1e:92:05:59:e0:
                    5d:63:c2:5a:6c:31:c2:b3:03:6b:9c:e0:35:ea:6c:
                    cd:9a:7f:3d:07:06:ab:16:32:8f:68:64:9a:08:ea:
                    d6:b6:b4:8b:30:98:e5:1a:64:25:8c:a2:b5:78:1a:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:22:DF:71:88:8F:8B:4B:9F:81:F4:E4:63:D0:6D:AF:32:B8:3E:E5
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/qCLfcYiPi0ufgfTkY9BtrzK4PuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:4b:67:e8:23:71:ac:04:7d:13:79:cb:5e:97:3d:95:5d:
         f4:ef:d2:b3:13:22:e3:73:c9:1f:00:f0:31:ed:05:02:6e:93:
         9b:48:09:00:25:57:0d:5e:51:90:e3:07:bc:a7:97:60:4e:9d:
         c8:bb:d4:37:d3:5a:48:e6:57:7f:f3:67:8a:16:ca:53:07:3d:
         f4:38:97:e4:0f:88:c6:44:02:27:d1:85:b4:f7:20:f9:01:26:
         66:ff:4c:e5:ea:32:63:c5:e2:bb:bc:03:fa:33:0e:22:84:07:
         40:22:78:d3:5e:3f:1b:2c:f3:45:f4:a2:4c:b7:3e:73:e3:67:
         04:61:92:55:0d:1e:51:a6:21:63:fa:9b:60:69:b3:31:3c:2c:
         c4:b3:0a:20:01:b5:b5:68:26:60:4f:7d:68:fa:79:30:a3:a8:
         9c:11:05:ac:e5:ca:2b:cb:ea:fe:23:50:49:4f:be:e9:7e:a8:
         96:18:85:e8:fe:c7:53:09:11:35:3b:71:60:95:a4:55:7e:ae:
         03:8f:cc:07:ad:8b:c4:51:32:a2:5c:69:9f:97:19:be:14:a5:
         5c:29:f3:a0:bc:7a:35:aa:b2:e7:3e:a6:60:4a:fc:1b:65:91:
         f0:2b:9f:d6:d4:45:3f:fa:5d:a8:97:55:80:65:aa:0f:91:5d:
         2b:f6:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org