Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_BByQMuDjOxgq3CpINwDiyqAgI0.roa
File:                     _BByQMuDjOxgq3CpINwDiyqAgI0.roa (raw, json)
Hash identifier:          ksn2LQcMGt+mAupdFcACDUeTtFK1EsguzsBgkZP361s=
Subject key identifier:   FC:10:72:40:CB:83:8C:EC:60:AB:70:A9:20:DC:03:8B:2A:80:80:8D
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       01835983763CB1F82C3D2049C7783A3147D7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_BByQMuDjOxgq3CpINwDiyqAgI0.roa
Signing time:             Tue 20 Sep 2022 06:08:51 +0000
ROA not before:           Tue 20 Sep 2022 06:08:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        80.71.224.0/24 maxlen: 24
                          80.71.238.0/24 maxlen: 24
                          80.71.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:59:83:76:3c:b1:f8:2c:3d:20:49:c7:78:3a:31:47:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Sep 20 06:08:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc107240cb838cec60ab70a920dc038b2a80808d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:e3:bc:f6:67:a2:1e:59:8a:1c:bf:06:d2:
                    68:f6:f5:67:8f:96:4e:2f:9f:04:20:0e:a6:7c:e2:
                    fd:1f:4c:10:13:04:1a:5e:2a:13:77:be:1f:43:aa:
                    38:35:bd:3a:a7:00:ca:c6:c8:23:03:f7:bc:18:41:
                    9e:d0:59:52:f8:bd:98:51:83:0f:d6:de:9c:b9:6a:
                    20:48:e5:38:e6:2e:1e:66:e4:3c:de:8c:8a:71:b4:
                    e5:aa:28:75:b8:45:5d:70:e0:f3:97:c5:e0:9b:0e:
                    20:79:54:a1:9a:1c:09:24:b6:6e:38:49:29:7d:10:
                    38:9d:5b:f4:1c:62:f0:7e:cf:e2:85:3a:83:5b:96:
                    f9:91:51:f7:9f:1e:ee:72:dd:44:a1:4a:0a:cc:ed:
                    6b:fc:ac:e7:5a:8b:73:1f:34:20:6f:37:2d:fd:2e:
                    d1:8f:8b:5a:ea:a0:9a:33:7c:1d:8a:27:ad:db:72:
                    72:a4:b2:ad:14:ab:8d:e7:3a:a1:ac:17:6b:b6:34:
                    25:b4:4d:6f:83:e1:4d:41:8d:67:a6:11:c7:ca:21:
                    24:fc:b7:e1:3e:c9:7e:8f:81:61:d0:bc:5d:a3:23:
                    8e:e3:5e:34:37:18:d5:83:05:ac:88:c2:eb:34:7f:
                    f6:1c:e1:78:e2:e7:f7:a9:61:aa:0e:d1:a5:05:36:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:72:40:CB:83:8C:EC:60:AB:70:A9:20:DC:03:8B:2A:80:80:8D
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_BByQMuDjOxgq3CpINwDiyqAgI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.224.0/24
                  80.71.236.0/24
                  80.71.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:92:05:90:1c:01:a6:89:b6:fc:f1:c4:c4:25:5b:93:53:7c:
         68:63:12:10:98:bb:d7:f5:36:a8:06:12:e6:0b:16:45:a1:f7:
         29:18:7a:11:4b:06:9c:8b:d3:8a:ae:13:f5:cf:80:6f:aa:8e:
         33:88:11:ff:64:29:d3:5d:37:1f:f0:7f:b1:e0:a9:44:e3:d8:
         51:5f:23:4f:78:4f:90:9d:70:95:aa:cc:4f:6a:7d:b4:a9:37:
         35:93:71:34:dd:90:47:6b:88:dc:32:d1:44:04:8c:2d:94:c7:
         04:58:f1:96:82:e7:86:76:5b:25:11:50:53:32:48:90:04:49:
         cd:49:cc:bb:02:3a:9b:ec:cb:cd:5f:89:31:c4:d9:f8:fe:2b:
         06:18:a5:e5:a6:e4:d0:ba:19:45:dd:dd:31:fb:fd:53:23:dd:
         68:e5:28:23:f2:39:97:80:ae:ef:ce:7d:b6:f7:2c:58:a4:79:
         3e:e1:fd:55:09:b8:25:f7:3f:7d:75:00:bc:c0:0f:1c:8d:18:
         16:7e:e7:4a:4c:14:90:9c:8f:43:f3:5c:ec:4a:ed:66:e3:c5:
         ce:c0:34:d8:25:37:63:fb:38:1b:f5:da:cf:bf:5a:ea:cb:b6:
         93:96:04:b7:da:37:41:b5:91:1d:57:b5:23:8a:0e:a3:41:5c:
         01:76:89:c7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYNZg3Y8sfgsPSBJx3g6MUfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjIwOTIwMDYwODUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzEwNzI0MGNiODM4Y2VjNjBhYjcwYTkyMGRjMDM4YjJhODA4MDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O/jvPZnoh5Zihy/BtJo9vVnj5ZO
L58EIA6mfOL9H0wQEwQaXioTd74fQ6o4Nb06pwDKxsgjA/e8GEGe0FlS+L2YUYMP
1t6cuWogSOU45i4eZuQ83oyKcbTlqih1uEVdcODzl8Xgmw4geVShmhwJJLZuOEkp
fRA4nVv0HGLwfs/ihTqDW5b5kVH3nx7uct1EoUoKzO1r/KznWotzHzQgbzct/S7R
j4ta6qCaM3wdiiet23JypLKtFKuN5zqhrBdrtjQltE1vg+FNQY1nphHHyiEk/Lfh
Psl+j4Fh0LxdoyOO4140NxjVgwWsiMLrNH/2HOF44uf3qWGqDtGlBTYIfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPwQckDLg4zsYKtwqSDcA4sqgICNMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvX0JCeVFNdURqT3hncTNDcElOd0RpeXFBZ0kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEfgAwQA
UEfsAwQAUEfuMA0GCSqGSIb3DQEBCwUAA4IBAQBJkgWQHAGmibb88cTEJVuTU3xo
YxIQmLvX9TaoBhLmCxZFofcpGHoRSwaci9OKrhP1z4Bvqo4ziBH/ZCnTXTcf8H+x
4KlE49hRXyNPeE+QnXCVqsxPan20qTc1k3E03ZBHa4jcMtFEBIwtlMcEWPGWgueG
dlslEVBTMkiQBEnNScy7Ajqb7MvNX4kxxNn4/isGGKXlpuTQuhlF3d0x+/1TI91o
5Sgj8jmXgK7vzn229yxYpHk+4f1VCbgl9z99dQC8wA8cjRgWfudKTBSQnI9D81zs
Su1m48XOwDTYJTdj+zgb9drPv1rqy7aTlgS32jdBtZEdV7Ujig6jQVwBdonH
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org