Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/8a-c50WmpFK8LT9Vf57WdmYrsfo.roa
File:                     8a-c50WmpFK8LT9Vf57WdmYrsfo.roa (raw, json)
Hash identifier:          nV0dMKMNmOCyUoVhdaiixY6lE3FkpDgNoO2xmzSsYRQ=
Subject key identifier:   F1:AF:9C:E7:45:A6:A4:52:BC:2D:3F:55:7F:9E:D6:76:66:2B:B1:FA
Certificate issuer:       /CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
Certificate serial:       01821CFE4A547F375C9CAD4338ACBAA10471
Authority key identifier: 96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/8a-c50WmpFK8LT9Vf57WdmYrsfo.roa
Signing time:             Wed 20 Jul 2022 19:03:23 +0000
ROA not before:           Wed 20 Jul 2022 19:03:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     996
IP address blocks:        80.71.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1c:fe:4a:54:7f:37:5c:9c:ad:43:38:ac:ba:a1:04:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
        Validity
            Not Before: Jul 20 19:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f1af9ce745a6a452bc2d3f557f9ed676662bb1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:85:53:44:54:1c:e9:f7:a5:f6:22:c7:ab:
                    0e:a4:07:13:a9:6e:94:1d:5a:b2:f3:ff:04:bc:db:
                    e1:8c:16:6e:77:29:81:2b:db:f8:0a:db:21:5b:10:
                    9d:d3:3a:51:42:81:2e:de:09:de:04:2c:6b:e5:89:
                    7c:ea:26:87:33:e7:df:4c:41:9c:d3:85:17:b7:78:
                    5d:0e:6d:c6:93:b3:5e:c8:6b:9b:bc:ac:26:05:da:
                    fa:1d:6e:63:52:48:4e:56:82:25:dd:9d:55:55:4c:
                    1b:26:bc:e0:3d:4a:34:62:32:90:b3:39:dd:2b:6c:
                    92:86:a2:85:37:cf:46:0d:ba:56:db:da:dc:37:08:
                    fe:a6:84:69:5d:1a:d1:f8:e5:f4:79:d2:7c:c6:03:
                    87:e6:4f:95:5e:37:95:32:4f:34:c6:5d:18:c4:62:
                    e8:19:8b:46:05:b1:36:8d:64:3b:17:80:7c:8b:e2:
                    56:19:0b:ee:de:f6:f3:3e:3c:c2:d5:66:82:f9:71:
                    dc:87:62:10:1e:83:36:41:86:f7:9e:be:6b:75:8f:
                    91:bb:2f:93:b4:82:30:22:0c:59:58:1a:36:01:e1:
                    b3:81:ab:da:be:69:b9:2c:94:c5:05:6f:b2:72:17:
                    e8:d5:4e:39:24:aa:58:45:5b:89:ed:0b:9b:23:50:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AF:9C:E7:45:A6:A4:52:BC:2D:3F:55:7F:9E:D6:76:66:2B:B1:FA
            X509v3 Authority Key Identifier:
                keyid:96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/8a-c50WmpFK8LT9Vf57WdmYrsfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/lgv_0ND7W2jwhxc4Ug3PQihM-jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:59:f8:dd:6a:7d:05:7f:3d:8d:0a:28:78:5b:a1:f1:46:
         11:af:ae:25:17:d6:29:96:dd:1d:08:d3:3d:49:ca:30:b2:5a:
         23:10:32:d5:29:16:99:c4:7c:9f:c7:8d:3c:95:fb:e9:68:f3:
         b5:0d:7d:b5:9c:7d:ad:73:31:14:ec:31:40:21:b4:66:3a:27:
         1b:63:73:26:cf:0c:d1:18:0f:7b:6e:05:69:ad:da:f5:0f:a0:
         46:29:b9:0c:d9:40:5f:6a:1d:27:cf:87:7a:e6:e4:72:f2:f5:
         ed:d9:5c:51:1c:eb:d5:33:0d:d8:8c:f1:ac:b0:d5:06:88:bc:
         1a:bd:56:6b:07:1b:c7:35:60:d3:e1:2e:14:27:97:42:3d:a4:
         c8:c7:5b:2c:22:8b:81:55:86:41:0b:28:06:a9:7f:07:90:b4:
         ff:26:32:91:60:89:1c:a2:be:e4:8f:6c:52:73:44:79:f5:b9:
         cf:5d:c1:3d:3b:e4:fb:e9:a2:e0:a8:7e:8e:3a:d6:ab:06:fb:
         cb:fb:25:56:96:ba:ad:6c:f1:ed:c9:44:e8:45:51:9b:3a:e9:
         ae:2a:d1:e5:07:4d:ec:b8:e4:69:f3:c2:76:21:7a:09:23:ac:
         16:81:e0:ed:43:e9:7f:69:35:87:46:11:33:c5:c8:02:5f:6c:
         ac:ef:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:31 2023 by rpki-client on console-ams.rpki-client.org