Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/7-L2_BLsZ4OOtlJ_VsznCSvaHGw.roa
File:                     7-L2_BLsZ4OOtlJ_VsznCSvaHGw.roa (raw, json)
Hash identifier:          AKB+Y7Vfa8l49waf2ZdFVyIXPWj6jLsxVqfwkbzhGQI=
Subject key identifier:   EF:E2:F6:FC:12:EC:67:83:8E:B6:52:7F:56:CC:E7:09:2B:DA:1C:6C
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       04970B9C
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/7-L2_BLsZ4OOtlJ_VsznCSvaHGw.roa
Signing time:             Sat 01 Jan 2022 15:04:26 +0000
ROA not before:           Sat 01 Jan 2022 15:04:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16262
IP address blocks:        87.251.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77007772 (0x4970b9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jan  1 15:04:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efe2f6fc12ec67838eb6527f56cce7092bda1c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:30:a1:dc:76:99:3f:33:99:42:9f:66:f4:
                    30:27:3d:13:75:a9:61:fc:98:e4:e2:4b:6d:27:fa:
                    5e:f1:23:68:93:c9:5a:aa:1b:63:ec:3c:93:af:28:
                    8e:68:06:d7:a3:02:af:7f:c3:f0:1c:af:a2:75:8c:
                    ce:3e:51:d2:c6:50:8c:cd:f8:d0:77:ab:8c:9a:63:
                    24:8e:d8:7a:f4:6e:84:9d:2e:95:b3:35:b4:b4:26:
                    24:0c:99:94:aa:2f:b4:27:9c:46:89:f5:be:f8:23:
                    63:e6:71:8f:55:1f:31:b9:3a:be:59:7c:ff:a2:b8:
                    14:11:f1:d3:7a:8f:55:12:49:ea:70:d8:2b:05:8a:
                    32:3f:72:c7:f7:1c:36:b2:54:20:3d:87:0f:e1:34:
                    55:f5:57:b8:5b:99:da:d4:60:7d:fb:c7:cb:32:38:
                    38:98:a2:19:52:a2:e6:73:6c:3d:95:57:03:c7:6f:
                    ad:51:5f:80:bf:49:1c:29:05:ba:03:31:25:68:11:
                    af:a2:9e:72:c4:c7:c9:c8:0d:42:d9:b3:4c:7d:40:
                    11:c5:aa:7e:4f:4b:5b:ab:ec:ac:35:3c:3f:ec:9f:
                    5f:50:c3:a0:80:3d:58:86:ff:7b:6b:34:66:9d:2b:
                    87:aa:0b:02:e1:a9:f0:f8:ca:5c:67:de:0e:37:d0:
                    24:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:F6:FC:12:EC:67:83:8E:B6:52:7F:56:CC:E7:09:2B:DA:1C:6C
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/7-L2_BLsZ4OOtlJ_VsznCSvaHGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:89:52:15:72:95:b3:e5:f8:b4:b8:f9:2c:04:55:da:24:48:
         78:47:05:41:a5:81:f1:bf:a6:e8:6d:5a:1f:67:40:22:d5:34:
         ab:f8:6d:8d:1e:a9:da:be:32:48:4d:40:89:28:13:23:80:1f:
         7c:40:2a:64:a4:98:5e:02:02:36:55:02:39:d6:22:af:f3:a7:
         da:ff:bb:31:6e:2d:b0:ea:03:c7:9b:b9:51:b1:66:6a:54:c4:
         47:9b:3d:88:da:df:5c:87:a0:d0:7e:26:16:97:ad:17:4a:76:
         39:3c:42:67:13:02:6f:23:9c:72:55:ea:d8:f2:3c:d3:21:99:
         00:a5:71:48:27:40:65:cd:0f:ab:b4:18:09:ac:45:03:b8:1a:
         03:a4:38:81:f8:0d:76:7d:70:e7:09:b0:0b:33:c9:41:a0:47:
         d1:0c:ba:ec:b7:5f:e6:eb:90:3f:77:cf:57:fe:be:93:b2:5c:
         56:ae:80:7f:b1:ee:f0:af:f9:35:19:8b:b9:89:b0:4a:e9:e5:
         b5:fc:8a:6c:0d:39:58:06:5d:a2:84:8d:d1:34:bd:83:d9:38:
         df:b2:41:39:bd:50:e6:c0:93:7f:22:b5:ee:a8:b2:8f:fd:d9:
         f2:91:a0:f7:af:ff:35:77:07:ac:0c:59:82:d5:3f:f6:e1:79:
         ad:d6:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-fra.rpki-client.org