Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ZvBveukAS7GkvQtovEN5b37gWmM.roa
File:                     ZvBveukAS7GkvQtovEN5b37gWmM.roa (raw, json)
Hash identifier:          I2Sz1GTpX6renTMmM8WPvJoz2RhUVkTDdouTmyFXGyQ=
Subject key identifier:   66:F0:6F:7A:E9:00:4B:B1:A4:BD:0B:68:BC:43:79:6F:7E:E0:5A:63
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       01843325DDB19FEC12F0BE7C0109D15BAC65
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ZvBveukAS7GkvQtovEN5b37gWmM.roa
Signing time:             Tue 01 Nov 2022 12:23:50 +0000
ROA not before:           Tue 01 Nov 2022 12:23:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60602
IP address blocks:        80.66.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:33:25:dd:b1:9f:ec:12:f0:be:7c:01:09:d1:5b:ac:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Nov  1 12:23:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66f06f7ae9004bb1a4bd0b68bc43796f7ee05a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:47:b5:d5:d4:1e:31:6d:7d:42:4f:a2:69:ca:
                    8f:cf:eb:d3:4e:f2:ea:ea:20:7c:3c:44:34:85:c9:
                    8a:a4:f6:dd:41:35:af:68:e0:3c:e0:b9:1a:6b:09:
                    b2:d5:a8:59:ff:f5:33:c2:08:9b:78:95:dd:68:14:
                    e8:3f:c8:29:0f:95:89:95:04:8f:0b:36:5b:a2:8e:
                    3c:c9:af:31:a0:d6:e7:94:07:7e:c5:eb:67:4e:ea:
                    17:6c:66:d5:1b:6f:3c:49:2b:b6:f7:19:bc:d0:46:
                    72:d2:9d:69:9b:21:0e:fa:35:cb:b6:96:2d:bb:22:
                    1f:54:16:14:47:ca:0d:f7:3d:e6:41:be:d2:e4:35:
                    f6:72:46:95:b2:85:52:de:b0:1a:80:34:95:a4:69:
                    62:a4:ec:58:96:dc:7e:af:08:bc:97:b6:3a:aa:9b:
                    92:42:49:5d:3d:3f:52:66:ec:6a:fa:98:d3:83:e8:
                    bb:31:0a:02:f5:b1:98:5c:e4:54:14:72:5a:ba:13:
                    de:00:3f:f4:96:b4:1f:38:3e:61:27:49:e1:ae:12:
                    27:12:29:f4:95:29:de:ae:84:77:97:78:9c:0d:4d:
                    a8:e0:77:e9:f3:d1:6a:c7:7d:10:ad:49:98:7b:30:
                    99:7d:34:38:3d:b0:fc:07:ba:10:cf:1d:6f:89:27:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F0:6F:7A:E9:00:4B:B1:A4:BD:0B:68:BC:43:79:6F:7E:E0:5A:63
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ZvBveukAS7GkvQtovEN5b37gWmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a3:d2:4a:e7:81:9a:f9:73:d1:82:a3:0c:33:20:95:76:b4:
         f6:ae:05:30:d2:61:2d:4b:20:21:37:fb:9c:68:27:af:41:be:
         76:f8:4e:c6:ab:8f:c1:44:80:52:94:ab:d2:e0:84:cf:a4:53:
         41:82:a0:a6:46:e8:1e:d4:0b:73:c3:21:24:28:87:ae:86:9f:
         de:b7:5d:7a:48:1e:f6:e1:ef:61:38:46:fb:8b:ac:9c:f4:51:
         8d:f9:25:63:1f:dc:d0:2a:87:ca:27:c3:92:c4:b6:70:f8:7c:
         ce:cf:72:16:3a:10:ad:dc:02:31:aa:dc:94:f9:7e:46:c0:63:
         1e:c6:fc:ae:ce:75:37:15:0c:4f:39:e4:a3:eb:a2:ff:02:c5:
         a0:5d:10:80:d3:e8:d4:95:4a:bc:b8:14:0b:27:3c:9a:e2:b6:
         9a:de:55:2c:84:0e:80:96:13:94:1f:54:f6:ee:9e:21:66:79:
         ce:ec:ba:f9:6f:73:7d:9d:38:fe:02:ac:f6:8d:56:01:9e:1f:
         eb:84:d6:9b:46:27:d7:47:d5:08:62:fb:d9:57:a5:14:a4:40:
         f2:49:b6:2d:60:27:12:92:fe:eb:e5:34:a7:9a:20:46:0c:2d:
         e2:84:70:20:ad:2d:ef:06:65:85:e6:19:ba:04:15:fb:a9:47:
         81:48:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org