Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/SS6WOQFOIRZ37874X_ZRbEvLXmc.roa
File:                     SS6WOQFOIRZ37874X_ZRbEvLXmc.roa (raw, json)
Hash identifier:          uDVGZrShbvuwXc6KIOFn8Yh/Vb3RWnVn5lSySOPX0rg=
Subject key identifier:   49:2E:96:39:01:4E:21:16:77:EF:CE:F8:5F:F6:51:6C:4B:CB:5E:67
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       0623C7E3
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/SS6WOQFOIRZ37874X_ZRbEvLXmc.roa
Signing time:             Sat 11 Jun 2022 11:53:02 +0000
ROA not before:           Sat 11 Jun 2022 11:53:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211849
IP address blocks:        80.66.77.0/24 maxlen: 24
                          80.66.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103008227 (0x623c7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jun 11 11:53:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=492e9639014e211677efcef85ff6516c4bcb5e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:f0:a7:32:5a:28:ec:d9:c1:8a:83:70:ac:
                    05:5f:ef:9b:d6:32:f0:ce:d2:53:21:a9:3f:ec:ca:
                    67:fb:85:bf:6d:7b:c6:0e:04:24:d7:dd:2a:f3:bb:
                    d1:95:d5:ec:b3:c1:58:af:2b:82:6e:45:30:04:b0:
                    ae:ab:50:9a:a0:e0:7a:9e:bb:6a:30:3b:99:fe:74:
                    51:93:c6:32:06:9e:c0:5e:48:5c:71:87:aa:9d:f0:
                    8c:80:e9:47:1a:e6:13:14:f8:26:24:36:b4:7b:80:
                    6d:58:09:e1:28:f0:0b:c6:da:53:16:a0:00:c4:8c:
                    07:8c:b2:02:3b:eb:e0:77:99:35:79:ed:83:e7:23:
                    68:95:aa:61:e0:0f:fa:7c:69:49:92:3b:27:a5:db:
                    a4:20:b4:b7:01:a7:f7:8f:8c:18:05:d0:53:6a:f2:
                    89:6c:bb:dd:16:1f:50:4f:c9:11:7c:ea:b8:45:93:
                    2d:18:94:41:58:0e:33:11:3c:23:db:e4:ff:56:67:
                    11:ee:f7:02:90:7d:a0:91:60:5c:38:4c:3a:e9:02:
                    8c:ff:aa:38:75:62:a4:c7:26:f7:23:96:ec:1e:ba:
                    ac:fa:12:6d:c0:bd:5c:f6:3e:e0:1a:dd:3a:17:1a:
                    88:44:a9:ce:c8:af:17:4f:be:2e:36:7e:b4:a8:e5:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:96:39:01:4E:21:16:77:EF:CE:F8:5F:F6:51:6C:4B:CB:5E:67
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/SS6WOQFOIRZ37874X_ZRbEvLXmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.75.0/24
                  80.66.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:72:00:bb:0d:54:bf:85:4f:06:d8:eb:36:b2:60:aa:09:
         45:83:c8:f9:b5:75:e3:e3:c4:83:42:cc:8a:0c:68:db:70:50:
         ac:17:78:54:f4:7d:44:57:47:91:c0:b6:7c:b6:58:be:97:db:
         b5:dd:d1:0d:e0:01:3e:e1:03:6a:40:72:8a:f5:90:2c:c1:6f:
         65:50:c4:fa:74:40:a5:be:76:e3:4f:51:f6:df:87:80:61:82:
         02:3b:80:d8:ec:bc:92:57:80:15:c0:e7:56:6f:3e:a4:f1:7f:
         6f:13:70:27:1e:77:a8:c7:e6:da:96:b5:35:78:26:b5:91:74:
         67:5a:d8:a9:62:44:cc:29:5f:ea:87:7c:69:c6:2e:13:0a:80:
         fd:90:46:ba:84:f3:6a:b8:e8:85:c5:06:f7:bf:11:c4:6f:6d:
         72:b4:5d:23:b4:4f:ad:ca:cd:63:e9:31:00:05:8a:60:64:65:
         42:0b:fa:13:67:65:8f:b1:42:8d:70:2d:9b:a5:09:e0:f4:25:
         3f:d2:2e:93:e3:42:e7:77:98:47:b9:12:71:5b:ce:7c:99:33:
         45:66:db:32:de:de:c7:71:ee:bd:bf:c9:30:27:32:7f:6a:7c:
         4b:59:3f:e4:12:f8:86:16:07:9e:b4:40:d5:0a:39:68:68:05:
         ce:60:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org