Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa
File:                     m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa (raw, json)
Hash identifier:          gaLzE9JSk99MsRW0HDlYWxnQauJD4Lrt8RLzAG3xIvw=
Subject key identifier:   9B:FC:99:BF:3F:31:52:00:69:38:5E:3F:87:8B:7B:5B:49:79:C7:AC
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       06D593A5
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa
Signing time:             Fri 13 May 2022 10:43:40 +0000
ROA not before:           Fri 13 May 2022 10:43:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a05:1087::/32 maxlen: 48
                          2a0d:2585::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114660261 (0x6d593a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: May 13 10:43:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9bfc99bf3f31520069385e3f878b7b5b4979c7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:4d:01:cb:d7:8a:46:73:5c:56:be:30:ff:
                    94:b1:83:26:b1:73:1d:c5:cf:d9:80:ce:59:43:18:
                    6a:5e:18:c0:57:66:df:57:1e:e2:08:cd:c3:b7:7d:
                    01:b6:a6:09:0f:e2:4e:5b:0e:5d:2b:c9:23:16:e3:
                    f4:e9:d3:4e:f3:75:dc:01:92:62:0a:57:c9:56:b3:
                    ac:85:12:20:e0:d7:aa:a5:5d:88:30:70:50:ef:d5:
                    3b:8a:16:4e:38:26:14:22:b5:c5:9c:6f:4a:98:e8:
                    fb:f8:38:23:29:d3:5f:d2:63:09:74:84:ea:8d:26:
                    1f:2f:a9:96:d0:0f:74:5d:48:51:ee:60:21:82:61:
                    0b:85:56:e5:f4:61:68:a0:70:79:cb:56:77:2b:b8:
                    e3:f9:32:1e:13:42:b0:46:56:b0:fb:ca:eb:03:a0:
                    f5:17:d2:97:6b:09:90:51:6d:d6:37:9f:a1:1c:18:
                    80:f7:05:0c:fe:c9:93:b9:6a:c1:61:08:16:80:23:
                    1c:c8:e1:3a:04:5f:02:d7:3c:20:63:d2:ed:99:e1:
                    29:6b:99:bf:27:31:0e:f9:df:73:76:7d:8f:66:87:
                    4f:be:8b:bc:dc:2a:44:89:3d:cd:85:a0:9c:71:92:
                    f8:5a:0f:52:93:67:59:f9:24:04:6a:6a:0a:41:7f:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FC:99:BF:3F:31:52:00:69:38:5E:3F:87:8B:7B:5B:49:79:C7:AC
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1087::/32
                  2a0d:2585::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:74:db:9f:f6:0d:d4:0e:e8:59:83:93:ae:c7:fd:23:0a:
         3a:96:b4:f6:eb:0e:4b:9b:f1:ab:79:15:ea:e2:71:00:48:ae:
         fb:51:0c:65:04:ba:3c:79:a5:2b:45:4a:60:f8:2f:12:3f:09:
         c4:7a:25:ef:b2:2c:0d:96:38:0c:ca:79:98:26:fd:8b:df:29:
         63:69:b5:01:9b:22:91:4b:b6:06:6c:15:6c:6e:a9:3b:45:89:
         61:71:be:38:1d:97:5b:02:4d:21:5b:08:c4:df:6d:3c:af:de:
         75:ea:51:f8:6d:b3:8f:a8:a5:0e:1d:f4:d3:9b:0d:ec:9a:40:
         fa:92:a9:2d:57:25:34:7a:8a:43:83:83:2f:07:b9:9b:ca:b6:
         d4:b7:d5:68:2a:0f:b6:63:f9:27:e7:f2:65:fd:d5:0b:c9:ae:
         12:be:12:27:fb:cc:6f:24:ca:40:bf:f2:eb:36:cb:bb:36:f2:
         d7:6f:49:78:c0:36:14:43:80:f9:31:db:dc:ee:c5:21:00:38:
         b2:d4:b9:be:96:85:67:11:ca:90:57:48:93:2e:4c:e4:4f:4e:
         9e:ec:40:99:d5:81:0e:11:e9:ca:fc:4a:27:6e:40:24:44:26:
         a8:34:a7:94:88:a9:f1:fa:5a:61:7c:00:f0:66:1d:6f:cb:3e:
         28:ce:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org