Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/b0JLqEq1vFeOIkoU-VmDoCgT2lA.roa
File:                     b0JLqEq1vFeOIkoU-VmDoCgT2lA.roa (raw, json)
Hash identifier:          PVbudyB5TyaF8zjc0JPBimoTzMk+gBr7sicaCouDzjM=
Subject key identifier:   6F:42:4B:A8:4A:B5:BC:57:8E:22:4A:14:F9:59:83:A0:28:13:DA:50
Certificate issuer:       /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial:       01847B7E47AD9F84694BDD3F0FAAA7CD622A
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/b0JLqEq1vFeOIkoU-VmDoCgT2lA.roa
Signing time:             Tue 15 Nov 2022 13:33:04 +0000
ROA not before:           Tue 15 Nov 2022 13:33:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20882
IP address blocks:        80.75.224.0/24 maxlen: 24
                          80.75.225.0/24 maxlen: 24
                          80.75.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7b:7e:47:ad:9f:84:69:4b:dd:3f:0f:aa:a7:cd:62:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
        Validity
            Not Before: Nov 15 13:33:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f424ba84ab5bc578e224a14f95983a02813da50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:31:58:b1:ab:01:ed:39:86:e1:b2:76:25:
                    8e:63:47:22:6b:e7:64:fc:f3:e4:b8:89:f0:d3:f2:
                    b5:cc:8f:93:df:75:8a:ac:49:28:a2:46:a6:b2:21:
                    05:6b:8e:7b:b9:db:09:bf:a1:9a:69:46:9d:61:36:
                    69:eb:0c:23:5a:30:68:36:3b:63:bc:f2:5d:e6:fb:
                    97:d7:de:87:10:4b:28:78:5f:c9:96:f0:18:2c:c1:
                    b5:63:ca:ba:2f:6a:9d:4e:52:29:38:05:79:05:bb:
                    94:51:93:b2:ee:57:82:d1:a2:58:23:57:ba:2f:0e:
                    d4:34:c0:19:5e:75:e2:83:70:cd:92:8b:07:33:ed:
                    cc:74:80:7f:42:95:1a:6a:e5:bf:e6:4c:cd:bd:f4:
                    ad:3a:dc:0c:46:fe:07:67:96:57:2c:b1:06:8c:7d:
                    3f:e8:e8:05:ea:3f:03:fd:28:99:65:32:76:ac:fa:
                    05:95:7a:60:9e:fb:12:b2:b7:2a:00:e4:6b:b2:44:
                    40:64:90:d2:51:9f:c2:f0:4a:da:a7:fa:72:58:e5:
                    17:d6:4e:23:0e:a8:9a:c5:52:5e:b3:55:b0:1d:5c:
                    db:99:b2:05:4d:d5:60:ba:1e:b5:28:49:f9:da:f2:
                    71:ab:8a:e0:53:ac:cc:11:d0:6b:85:90:3a:2b:75:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:42:4B:A8:4A:B5:BC:57:8E:22:4A:14:F9:59:83:A0:28:13:DA:50
            X509v3 Authority Key Identifier:
                keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/b0JLqEq1vFeOIkoU-VmDoCgT2lA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:80:13:96:96:ad:dc:e4:f1:43:54:6e:61:d7:c3:b7:85:79:
         b0:9c:6c:e6:63:cb:6b:ee:b0:d1:23:18:ab:d5:ca:39:80:0a:
         af:fe:3c:b5:1f:81:c0:41:d6:50:02:d5:93:b4:33:1e:9d:ef:
         02:db:f8:d1:25:ae:4d:af:a2:cb:04:04:cf:45:f6:1b:48:05:
         04:a5:a5:c9:76:28:cb:18:9d:2f:57:01:98:85:7b:5f:44:00:
         38:23:c7:3c:f6:a6:f6:f7:d7:71:23:d2:54:d5:36:43:a6:ae:
         bd:bf:c9:ba:c4:c8:3d:38:3e:4f:c0:bf:c7:02:99:0e:cd:c0:
         ef:0c:4f:f6:b8:d1:65:72:aa:25:f6:61:4c:34:bf:32:14:ec:
         ae:c5:52:46:ce:f3:6b:4a:c1:ef:f2:00:34:34:f1:c0:2e:3a:
         1e:b2:af:13:bb:d7:ca:ae:63:d8:fb:18:1e:86:6b:a3:e0:47:
         b8:49:e7:74:cd:e5:86:80:59:35:5a:e3:44:63:70:7f:ea:4d:
         7a:7d:f8:9f:15:24:83:b8:96:2d:1e:88:e5:63:73:ba:c1:46:
         33:36:f5:f6:2d:11:7b:b7:e0:12:f6:25:d7:a6:02:8b:f6:69:
         1b:db:a3:bf:f9:80:98:25:b3:d9:64:09:ed:ed:b2:bb:6b:c2:
         0f:5f:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:54 2024 by rpki-client on console-fra.rpki-client.org