Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/92U9lbnnW1M8c55377tN8ZUD100.roa
File:                     92U9lbnnW1M8c55377tN8ZUD100.roa (raw, json)
Hash identifier:          IKyoDUOgRp9XEPaU07FD8RMP/zTOLUOP63nTem5O2po=
Subject key identifier:   F7:65:3D:95:B9:E7:5B:53:3C:73:9E:77:EF:BB:4D:F1:95:03:D7:4D
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       38E00E88
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/92U9lbnnW1M8c55377tN8ZUD100.roa
Signing time:             Sat 01 Jan 2022 07:55:20 +0000
ROA not before:           Sat 01 Jan 2022 07:55:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201208
IP address blocks:        145.62.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954207880 (0x38e00e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 07:55:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7653d95b9e75b533c739e77efbb4df19503d74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:e0:d4:7a:e0:56:ec:06:51:40:1a:db:ae:
                    19:a8:20:e3:26:f2:65:44:b3:10:1a:de:31:9e:c6:
                    d2:6f:45:98:e0:62:2a:c6:c0:ce:2b:43:cb:22:60:
                    24:b8:b3:5f:43:c0:58:f7:67:73:a5:ba:f2:19:d6:
                    3e:82:80:97:00:7e:a9:d9:fb:3b:57:54:49:38:5e:
                    f4:b6:a7:3c:23:ca:36:3b:32:74:ed:5e:6e:a7:e8:
                    47:f1:b8:93:98:bf:4d:45:9d:b9:76:82:b7:6c:c7:
                    77:37:d6:ac:60:3a:68:9c:f9:63:e1:b1:0b:f5:96:
                    cf:e1:ae:e3:3e:08:c5:97:68:7c:63:12:ec:90:61:
                    74:d6:bc:e2:45:79:55:f0:b5:b6:c6:fd:a6:a0:49:
                    13:11:9d:82:4b:87:55:3c:18:14:4a:e5:95:95:c9:
                    3b:69:f6:79:38:ed:12:1a:d1:2f:26:b2:4c:4f:43:
                    1e:e2:ba:64:f1:7d:a1:ef:2d:8e:d4:aa:69:5f:74:
                    88:ce:05:f9:6f:cc:8f:80:03:95:80:4a:b4:57:f7:
                    59:fd:82:14:4c:6d:cc:1d:70:87:f3:00:cf:1d:cc:
                    c2:10:b1:99:b2:c5:e7:b7:04:b7:e4:31:78:3e:93:
                    21:13:9d:af:e4:69:67:f5:5c:62:e2:a3:b2:d5:ab:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:65:3D:95:B9:E7:5B:53:3C:73:9E:77:EF:BB:4D:F1:95:03:D7:4D
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/92U9lbnnW1M8c55377tN8ZUD100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.62.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:3a:cd:75:1e:e6:2b:4e:c4:05:cc:30:ff:6e:4f:b1:7b:
         ae:35:2b:64:70:89:91:f0:94:ca:4d:7e:d4:a0:b8:83:76:66:
         5d:92:06:e3:15:54:b3:a1:27:f8:f1:58:a5:36:50:fe:a9:c5:
         b5:7c:b9:19:e1:c3:d3:c7:19:c3:8f:78:73:21:2e:f0:3a:cc:
         43:33:8e:43:2b:c7:88:26:ef:e8:2e:05:50:ab:87:06:b3:d0:
         dc:9a:45:d3:ea:cf:a0:b3:8a:19:e5:67:c4:7b:79:f2:e9:a8:
         28:1f:d2:d5:64:b0:dc:ff:af:e1:d8:40:d9:bb:f7:a5:cc:8a:
         e6:f3:3a:a9:3a:c4:46:c8:5b:f5:60:27:31:c4:18:75:7b:2a:
         9b:a1:eb:f0:ec:bd:56:96:9a:38:e3:0c:34:8e:66:d1:b1:60:
         ae:40:8c:47:8f:c7:23:1c:aa:b3:07:a1:f5:f3:14:97:5b:b4:
         9e:9b:64:1b:d7:5d:e0:84:0e:8d:dc:5b:03:ea:4b:38:36:f0:
         9e:12:ce:37:f0:1a:fb:ce:4e:6b:c6:b1:0f:f0:7c:29:a7:86:
         e8:e1:f9:08:10:07:a2:64:eb:38:79:40:25:3d:5e:c3:8f:7b:
         e1:ec:97:27:b4:b5:8f:dc:73:f9:61:52:73:1c:bb:e7:36:69:
         b0:6c:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org