Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/fTMppp4WqJJkAGJ2paEk-yc_D04.roa
File:                     fTMppp4WqJJkAGJ2paEk-yc_D04.roa (raw, json)
Hash identifier:          Ol+CFLVTYHl8funK7M/101mE/bdgdqruDpJ5O9JayA8=
Subject key identifier:   7D:33:29:A6:9E:16:A8:92:64:00:62:76:A5:A1:24:FB:27:3F:0F:4E
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       063E4579
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/fTMppp4WqJJkAGJ2paEk-yc_D04.roa
Signing time:             Tue 21 Jun 2022 10:37:44 +0000
ROA not before:           Tue 21 Jun 2022 10:37:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35029
IP address blocks:        80.66.77.0/24 maxlen: 24
                          80.66.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104744313 (0x63e4579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jun 21 10:37:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d3329a69e16a89264006276a5a124fb273f0f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:70:8e:15:3a:43:31:c7:a6:9b:2d:3c:c1:
                    7c:a6:47:fd:98:0a:31:21:83:06:be:56:a4:59:8a:
                    4c:54:23:da:69:fb:7f:e9:8f:df:b1:b4:92:d9:80:
                    b9:9d:89:04:c7:85:09:d4:84:9c:63:96:de:d7:70:
                    7c:17:eb:e7:86:94:91:03:2b:9d:05:82:dc:30:88:
                    04:5d:ae:c2:3e:05:aa:26:ec:10:b6:41:62:3a:0b:
                    9c:cd:0f:7a:d3:0c:9c:ee:38:a6:9b:27:5e:cd:8e:
                    9c:6a:96:e9:e8:00:0a:bb:82:a7:44:3a:91:55:fb:
                    a8:d4:85:a3:5a:03:44:cf:81:40:c5:70:a7:4e:cf:
                    84:bf:ac:3d:dc:67:66:7a:9d:83:1d:3f:dc:f8:a8:
                    04:3d:95:55:6a:47:7d:5b:27:01:21:5e:c4:b5:77:
                    01:a5:42:e3:33:ab:3b:4d:f8:36:17:49:5c:63:19:
                    9d:fe:f0:eb:a3:77:84:20:d6:2e:4f:fc:54:0d:e4:
                    67:e3:43:af:b2:55:67:9d:be:60:5e:b9:bf:01:df:
                    1c:31:4a:73:0a:00:d8:6b:a4:91:d9:34:62:40:ba:
                    f4:d8:08:e1:f6:92:ac:3a:63:21:a6:47:60:91:37:
                    17:98:42:f9:27:7e:3f:7f:64:26:f0:df:14:53:e9:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:33:29:A6:9E:16:A8:92:64:00:62:76:A5:A1:24:FB:27:3F:0F:4E
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/fTMppp4WqJJkAGJ2paEk-yc_D04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.75.0/24
                  80.66.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:8c:c2:4f:a2:2d:9c:13:a5:2e:87:d6:f3:6a:54:60:56:
         16:ef:ca:4a:93:39:b5:75:bf:d8:e0:2d:4b:26:0b:85:c1:9f:
         d4:6a:0d:7a:44:39:c9:cc:23:99:cf:f6:f7:80:ed:ce:a1:86:
         82:85:b0:42:76:03:2d:dd:85:9d:7d:a7:bf:32:0e:d9:0a:93:
         2c:ef:70:e8:08:4c:72:37:2e:60:70:ad:6c:43:1a:f2:0e:fe:
         14:4b:d6:01:4d:03:63:f1:d5:19:ba:55:a6:37:d7:42:e7:e8:
         7f:24:bf:16:be:c0:fd:b5:b1:cb:85:c6:ba:85:de:37:0b:a4:
         e9:e3:17:6d:d1:ad:95:b9:03:ad:e4:be:50:2f:cc:fb:5e:61:
         fb:a5:b0:91:9a:d0:d7:01:91:28:eb:66:1d:51:bb:37:fb:5e:
         f0:b5:aa:99:45:ed:a6:84:a0:d0:b5:6e:ac:d8:3c:e2:06:96:
         e2:bd:52:40:62:0e:77:ff:67:09:59:1e:f1:48:11:53:0b:5c:
         3a:9b:6d:5f:dc:61:cd:5b:3c:fd:05:14:cd:bc:3d:ed:4a:ee:
         4b:d4:6a:49:88:4b:44:37:3c:78:e2:a7:96:53:47:f8:dc:6e:
         ca:31:ac:f4:78:98:b7:43:79:66:5c:2e:f4:2a:44:b2:77:16:
         20:36:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org