Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/vyRjIXzQyLqhL-cCD0h7WIcSpgc.roa
File:                     vyRjIXzQyLqhL-cCD0h7WIcSpgc.roa (raw, json)
Hash identifier:          lybMTkt0ACy3X56gpHYXazssoLXOskbU82IFDh3kmTQ=
Subject key identifier:   BF:24:63:21:7C:D0:C8:BA:A1:2F:E7:02:0F:48:7B:58:87:12:A6:07
Certificate issuer:       /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial:       09A73FE2
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/vyRjIXzQyLqhL-cCD0h7WIcSpgc.roa
Signing time:             Thu 30 Jun 2022 15:14:02 +0000
ROA not before:           Thu 30 Jun 2022 15:14:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400384
IP address blocks:        80.76.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161955810 (0x9a73fe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
        Validity
            Not Before: Jun 30 15:14:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf2463217cd0c8baa12fe7020f487b588712a607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:13:90:b4:bc:e5:62:65:0a:00:92:c4:64:
                    40:db:a8:19:37:16:5b:35:1e:ec:c1:2d:77:f2:82:
                    2e:6c:3f:92:c6:52:d7:66:f4:64:ce:c8:c4:12:8d:
                    cb:d3:22:f2:d2:f3:a3:39:90:01:fb:df:cf:93:6b:
                    95:5c:5e:e5:2a:2b:b4:c8:e0:a8:dd:19:7a:4b:d3:
                    97:3e:b1:a6:a8:16:3e:79:82:92:4c:17:2d:34:7f:
                    60:ba:1b:30:4a:e4:49:3a:ef:a8:45:f6:3a:99:42:
                    43:a6:e4:19:90:5f:08:1b:85:b1:35:d8:78:90:4c:
                    02:7f:dd:90:55:6e:24:39:df:06:1c:55:09:47:5e:
                    77:6d:9f:f0:7d:a7:f6:4a:0f:19:86:21:46:a5:91:
                    61:d7:38:20:9a:57:ba:76:7c:58:ba:25:fe:42:88:
                    68:48:e4:9b:d8:90:5b:8b:dd:ed:e3:70:90:89:27:
                    d3:3a:56:c1:2c:4f:0e:f9:42:fd:aa:35:1d:5a:f9:
                    27:bf:48:f8:61:38:cc:1c:d4:76:83:ec:70:2b:6b:
                    53:b8:cf:be:a4:ee:2b:df:c7:17:8a:d8:97:4c:45:
                    d4:ee:f3:f4:37:87:58:ab:b5:c6:93:17:68:c0:c6:
                    79:b4:0e:81:5a:b0:0b:f2:27:59:bb:bc:55:dd:dc:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:24:63:21:7C:D0:C8:BA:A1:2F:E7:02:0F:48:7B:58:87:12:A6:07
            X509v3 Authority Key Identifier:
                keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/vyRjIXzQyLqhL-cCD0h7WIcSpgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:86:88:eb:81:f0:73:e1:82:8b:67:05:37:01:1a:66:60:9e:
         2c:80:d5:96:27:6f:af:c3:b7:f8:f7:35:6d:5e:37:e2:60:d6:
         87:12:35:bf:ce:46:7b:dd:c7:98:c5:69:49:c2:66:fa:1b:1c:
         d1:8e:b9:98:2c:6b:9b:1b:09:4f:a1:df:54:dd:99:5b:37:fc:
         8e:ab:d4:c3:3d:ae:4a:68:f4:f6:e9:49:48:6e:81:11:7e:67:
         82:df:d7:79:68:fe:f6:8d:77:17:ea:12:58:dc:17:17:6f:17:
         11:37:83:b3:8f:15:10:ed:90:b0:64:8d:04:ce:e8:a4:23:a1:
         9f:a4:c1:2a:50:b9:18:6b:6a:c0:ac:49:c3:eb:46:1c:7d:7e:
         34:3c:33:7b:df:1c:f5:64:90:c9:80:96:2d:47:74:24:31:1a:
         96:85:f0:4a:95:70:8d:bf:64:76:6a:79:4c:8f:e1:2d:16:3c:
         e1:24:34:fe:ea:fe:ae:57:c7:14:72:4a:63:e0:2c:d4:9c:51:
         87:38:5c:40:63:46:f2:10:fc:48:b0:57:fe:d8:8a:a8:11:54:
         a5:cd:4d:04:9c:e3:be:98:af:0a:ff:28:9a:90:ea:a4:14:8a:
         48:11:d6:90:e6:f1:37:31:b5:2b:35:af:92:77:e1:c2:6d:4e:
         30:67:70:fa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECac/4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTgzYjMyNzFjMDJkZjMyZGIzYzUxZmM0MGE5NTM4MzY4ODM0ZjBiMB4XDTIyMDYz
MDE1MTQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmYyNDYzMjE3Y2Qw
YzhiYWExMmZlNzAyMGY0ODdiNTg4NzEyYTYwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANE6E5C0vOViZQoAksRkQNuoGTcWWzUe7MEtd/KCLmw/ksZS
12b0ZM7IxBKNy9Mi8tLzozmQAfvfz5NrlVxe5SortMjgqN0ZekvTlz6xpqgWPnmC
kkwXLTR/YLobMErkSTrvqEX2OplCQ6bkGZBfCBuFsTXYeJBMAn/dkFVuJDnfBhxV
CUded22f8H2n9koPGYYhRqWRYdc4IJpXunZ8WLol/kKIaEjkm9iQW4vd7eNwkIkn
0zpWwSxPDvlC/ao1HVr5J79I+GE4zBzUdoPscCtrU7jPvqTuK9/HF4rYl0xF1O7z
9DeHWKu1xpMXaMDGebQOgVqwC/InWbu8Vd3ceDcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS/JGMhfNDIuqEv5wIPSHtYhxKmBzAfBgNVHSMEGDAWgBR6g7MnHALfMts8
UfxAqVODaINPCzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VvT3pKeHdDM3pMYlBGSDhRS2xUZzJpRFR3cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvY2IwMDMyLTg1NWYtNDQyMi1iODEzLTgzNjZkZjBmNDQzOC8x
L3Z5UmpJWHpReUxxaEwtY0NEMGg3V0ljU3BnYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
Y2IwMDMyLTg1NWYtNDQyMi1iODEzLTgzNjZkZjBmNDQzOC8xL2VvT3pKeHdDM3pM
YlBGSDhRS2xUZzJpRFR3cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBMIjANBgkqhkiG9w0BAQsFAAOC
AQEAeYaI64Hwc+GCi2cFNwEaZmCeLIDVlidvr8O3+Pc1bV434mDWhxI1v85Ge93H
mMVpScJm+hsc0Y65mCxrmxsJT6HfVN2ZWzf8jqvUwz2uSmj09ulJSG6BEX5ngt/X
eWj+9o13F+oSWNwXF28XETeDs48VEO2QsGSNBM7opCOhn6TBKlC5GGtqwKxJw+tG
HH1+NDwze98c9WSQyYCWLUd0JDEaloXwSpVwjb9kdmp5TI/hLRY84SQ0/ur+rlfH
FHJKY+As1JxRhzhcQGNG8hD8SLBX/tiKqBFUpc1NBJzjvpivCv8ompDqpBSKSBHW
kObxNzG1KzWvknfhwm1OMGdw+g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:08 2023 by rpki-client on console-fra.rpki-client.org