Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/dRJ_hMsB1Mn7vrow6piyCyJJSZA.roa
File:                     dRJ_hMsB1Mn7vrow6piyCyJJSZA.roa (raw, json)
Hash identifier:          w9ko9MslcCo+bQd/wxRDiZqrem2vnBfwwx3EJuCNYak=
Subject key identifier:   75:12:7F:84:CB:01:D4:C9:FB:BE:BA:30:EA:98:B2:0B:22:49:49:90
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       05343B01
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/dRJ_hMsB1Mn7vrow6piyCyJJSZA.roa
Signing time:             Sat 05 Mar 2022 04:23:21 +0000
ROA not before:           Sat 05 Mar 2022 04:23:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208091
IP address blocks:        80.66.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87309057 (0x5343b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Mar  5 04:23:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75127f84cb01d4c9fbbeba30ea98b20b22494990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:9b:f2:19:ae:56:2c:84:cb:37:2d:2c:e3:
                    08:92:0e:19:0f:98:cf:da:7e:30:1c:9b:f8:ed:0c:
                    2f:33:75:32:63:72:0f:9d:a1:dd:73:39:58:c0:2f:
                    97:d4:72:d5:0c:a0:0e:99:ea:32:b8:f5:ed:8d:2d:
                    39:45:64:ae:15:46:d6:a4:a7:5f:89:4f:d7:48:46:
                    b1:d4:39:71:b2:e6:31:20:c8:17:d8:53:93:8b:14:
                    ba:b1:3f:c7:07:a1:5e:5d:99:e9:41:f4:4f:03:28:
                    17:c8:c5:88:83:11:69:a7:46:c9:af:31:aa:aa:3f:
                    2f:e3:d8:fe:73:99:a8:01:0d:df:9f:ac:5f:0d:90:
                    5f:9e:38:6b:8d:40:69:ef:9b:36:bf:4a:20:08:02:
                    e0:46:d7:db:70:6c:de:34:fc:5d:6f:f1:a4:a9:72:
                    49:a8:6f:86:66:d5:b8:6b:60:33:7a:9a:2f:63:a6:
                    77:0e:20:79:2e:0c:bc:fd:3d:b3:a0:f8:f1:94:88:
                    15:8e:9e:c6:0e:cd:f7:ea:9c:01:d7:95:3e:59:04:
                    34:ad:24:0c:f5:39:91:54:c4:6f:42:91:a7:32:f8:
                    d8:50:cb:90:25:8c:7f:f9:c3:fb:64:9f:2c:e9:d9:
                    c6:81:77:8b:14:11:c1:47:35:6c:ad:40:f0:86:60:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:7F:84:CB:01:D4:C9:FB:BE:BA:30:EA:98:B2:0B:22:49:49:90
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/dRJ_hMsB1Mn7vrow6piyCyJJSZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:b5:9f:58:31:89:6e:ce:b9:69:a5:0a:18:b9:43:ac:e2:
         4c:16:76:43:47:49:93:fb:97:37:e8:41:06:9a:d3:3c:77:d0:
         b4:d3:34:7a:93:9a:db:a8:59:80:0a:2a:82:d7:aa:2d:9b:8d:
         e4:03:91:25:c7:a5:3b:ca:c9:05:b5:e8:a7:71:40:f9:20:15:
         5e:85:bf:d5:2a:7e:4a:c3:4f:f0:de:88:f0:d9:89:99:9d:58:
         f1:e9:f2:e5:cc:24:0f:6a:83:06:d4:76:f6:0e:a7:6a:87:f7:
         98:be:d7:2b:2b:bf:70:09:0b:49:91:82:4d:b7:17:93:ed:b6:
         b3:46:4e:a9:bf:55:72:7b:a3:13:39:98:74:e6:74:f0:e6:76:
         e2:f1:96:9a:01:8c:b7:35:c8:cb:9d:ef:97:a2:77:fe:75:dc:
         45:80:81:57:3e:29:01:76:b5:97:c0:d4:7c:18:71:59:23:5f:
         c0:3c:55:f5:96:50:40:57:d2:d8:3b:14:55:e0:bd:e2:60:d3:
         bb:72:e0:a3:9e:1e:0e:d9:aa:dd:b0:0b:8c:ec:35:23:a2:c3:
         9d:f2:42:90:43:65:2b:6e:40:d6:82:89:ed:d8:5e:94:cf:3f:
         94:5a:1a:03:ae:bd:fd:b3:63:b2:56:d9:86:23:da:f3:19:2e:
         1b:68:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org