Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/90Cn-t90FPieqcx_5USIWC9jJsI.roa
File:                     90Cn-t90FPieqcx_5USIWC9jJsI.roa (raw, json)
Hash identifier:          mgctCMnv512LNw1tr//cLEoAVnHtOsPSraXXIbh1d7c=
Subject key identifier:   F7:40:A7:FA:DF:74:14:F8:9E:A9:CC:7F:E5:44:88:58:2F:63:26:C2
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       05E3E4EA
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/90Cn-t90FPieqcx_5USIWC9jJsI.roa
Signing time:             Mon 16 May 2022 07:48:21 +0000
ROA not before:           Mon 16 May 2022 07:48:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206336
IP address blocks:        80.66.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98821354 (0x5e3e4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: May 16 07:48:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f740a7fadf7414f89ea9cc7fe54488582f6326c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bf:6f:b0:ca:b6:54:e3:e6:39:bd:7b:07:54:
                    75:82:af:cb:ac:8e:2a:98:94:30:a3:d9:76:02:bc:
                    39:87:5c:5f:c7:fa:da:38:2d:ce:f0:bf:12:47:6f:
                    be:01:2a:fc:96:dd:cc:12:a1:4d:ac:3c:e1:74:b8:
                    37:da:05:6c:95:2e:16:68:81:45:f2:fd:b3:a0:a3:
                    e0:49:28:28:ec:fb:9c:60:2a:ca:39:5d:1c:66:bd:
                    ff:9e:c4:22:43:60:8e:c9:92:5f:43:49:40:11:f9:
                    1d:31:58:4d:d0:70:37:36:be:93:da:cc:4c:43:cf:
                    fd:e0:78:15:6e:10:61:55:48:33:41:29:0d:11:42:
                    ad:bf:8a:50:7b:6b:29:ff:39:bb:27:8c:3a:39:1a:
                    94:dd:72:39:a7:9c:24:01:42:36:d7:44:c8:b6:45:
                    60:0c:09:0f:69:75:8c:4a:f6:90:90:8b:cb:c2:44:
                    5a:e4:68:56:7c:ee:d5:d6:6d:74:c9:e2:28:54:3e:
                    16:33:f0:5d:66:f5:63:41:d6:4b:4c:e0:4c:f1:81:
                    06:fe:62:65:3a:50:c1:c7:15:d1:c0:55:15:ab:c5:
                    3a:04:63:b8:76:bf:a1:a5:28:16:97:46:9d:87:1f:
                    72:63:7e:56:95:e0:d0:dd:64:21:f7:f6:8a:40:8f:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:A7:FA:DF:74:14:F8:9E:A9:CC:7F:E5:44:88:58:2F:63:26:C2
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/90Cn-t90FPieqcx_5USIWC9jJsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:2f:5a:73:33:47:a5:9e:c5:d7:38:a1:fe:63:e3:56:f1:
         eb:49:e5:19:48:10:8a:ee:cf:a0:00:39:db:53:07:2d:6c:e8:
         6d:56:d8:ad:ce:28:34:27:42:fa:ea:2a:7e:6c:26:9e:3a:c8:
         4b:36:55:03:25:6e:8e:bf:63:46:95:3a:54:db:99:bd:27:60:
         d7:98:29:49:bc:40:93:25:0d:a1:ab:af:20:ef:2d:fc:ca:6a:
         5c:a8:e3:f8:f1:7a:23:56:c7:2d:c4:d3:74:68:b4:ac:5e:7f:
         6d:df:f1:80:c7:ed:25:f0:cf:fa:0e:23:69:41:5a:e3:fe:fd:
         d8:7f:26:26:9e:23:0f:93:5f:82:e7:21:f3:b4:fc:b7:1b:e2:
         5f:97:24:8f:16:bc:5f:71:d8:84:eb:7e:9f:67:e5:f9:e1:3b:
         1d:cf:58:db:71:f8:4b:53:33:ee:46:a0:d6:7e:2e:09:75:69:
         69:69:bd:25:5a:d1:3e:c0:f2:6f:6f:a2:3c:50:dc:02:c9:82:
         84:c8:cd:b3:79:57:ab:6d:fc:cc:f0:9d:4a:ec:fe:65:9c:d3:
         d0:a8:aa:83:d3:e9:45:8e:be:17:dc:25:7d:10:d2:a8:85:53:
         23:1d:01:ae:a6:95:eb:3a:2e:4f:15:b8:37:30:2c:41:af:8a:
         d0:d1:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:35 2023 by rpki-client on console-ams.rpki-client.org