Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/0gHdFqKOjzQ5OX7MI0ebrA7wLIQ.roa
File:                     0gHdFqKOjzQ5OX7MI0ebrA7wLIQ.roa (raw, json)
Hash identifier:          avetChyd/wa8fQoeplK4xkWBnhVKnp7q+FvWHk3Ptx8=
Subject key identifier:   D2:01:DD:16:A2:8E:8F:34:39:39:7E:CC:23:47:9B:AC:0E:F0:2C:84
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       1119F73C
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/0gHdFqKOjzQ5OX7MI0ebrA7wLIQ.roa
Signing time:             Tue 07 Jun 2022 15:47:02 +0000
ROA not before:           Tue 07 Jun 2022 15:47:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8881
IP address blocks:        80.90.24.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286914364 (0x1119f73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Jun  7 15:47:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d201dd16a28e8f3439397ecc23479bac0ef02c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:fd:7a:36:25:43:17:1c:e2:e9:56:03:da:
                    85:ce:3b:58:f4:1e:a8:d6:63:ba:cf:b1:4c:55:61:
                    2d:de:c6:77:f3:46:6e:f6:c2:ba:4c:b5:c2:23:fd:
                    b6:d0:3a:d7:1f:4a:01:8e:3d:4b:31:7d:74:57:23:
                    1f:7a:b8:8c:e0:52:8a:dd:a2:f4:43:4c:b0:f6:a1:
                    80:f7:9b:0e:e5:fc:6e:8f:f9:08:7c:f4:91:61:b2:
                    3b:09:6d:64:64:a8:21:30:a1:6a:04:8a:8e:1b:82:
                    8e:91:fb:2a:de:e9:5c:b5:ab:ea:21:d2:3a:23:24:
                    c4:f5:37:5e:41:43:13:6f:36:90:71:ca:d3:08:fa:
                    20:2d:82:34:a8:a3:49:e5:51:c1:48:a1:09:e1:06:
                    46:09:5a:4c:95:00:4c:d5:2e:86:c3:8d:96:3c:44:
                    7b:37:71:5d:1a:20:9b:c7:e0:32:7c:63:34:3b:56:
                    71:b6:f8:7f:5b:ef:87:37:d2:a5:14:cc:7b:cb:e8:
                    e1:28:2d:ad:1f:aa:35:e0:85:49:fd:a8:86:0b:f8:
                    af:09:23:b4:ef:db:d7:9b:8a:61:97:d9:3a:9a:6b:
                    d5:34:f9:3c:8f:70:ad:6b:cb:9f:65:1a:96:38:06:
                    ac:90:c7:e4:f3:06:0c:f5:d7:b2:1e:45:59:be:a6:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:DD:16:A2:8E:8F:34:39:39:7E:CC:23:47:9B:AC:0E:F0:2C:84
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/0gHdFqKOjzQ5OX7MI0ebrA7wLIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.90.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:ea:da:15:be:af:bd:fb:8a:d5:7d:25:0b:1c:ab:00:ac:
         97:df:51:74:92:0b:e6:79:00:95:22:1c:72:09:f8:06:9c:30:
         81:03:9a:a5:6d:45:cf:52:7b:45:05:8d:e4:e0:f4:de:b7:80:
         41:2b:67:f4:22:a1:8b:09:74:dd:ae:a1:f0:43:a1:3a:84:42:
         0e:34:92:62:53:ee:8c:55:94:bf:a4:48:e2:08:b4:58:ac:d9:
         23:76:25:7c:c5:40:9b:92:86:b0:b9:10:3d:c8:43:b9:61:6f:
         97:6c:87:bd:fe:98:7b:cd:ec:26:32:5d:b0:0f:28:0d:fd:49:
         83:79:84:50:2f:ab:76:90:00:f0:b4:d7:11:0f:26:38:db:83:
         d8:15:14:fd:1f:6b:be:38:32:d5:4b:6b:b5:d2:3d:45:ba:e9:
         f8:53:9a:b6:a0:71:f6:af:fd:b2:47:37:f6:74:ae:f5:87:d1:
         30:f9:f9:1d:3b:39:1e:9d:84:66:8b:91:05:7b:86:ed:e4:b4:
         25:b9:c1:ee:41:b1:e2:60:07:fd:b6:2a:9d:df:b6:ed:c0:79:
         75:f0:64:fd:9d:af:32:ba:3d:f1:8d:d7:31:9b:4b:ea:08:65:
         18:b3:01:53:1c:e7:4b:3e:c4:58:b4:5d:33:30:71:f0:83:c3:
         d8:27:42:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:24 2024 by rpki-client on console-ams.rpki-client.org