Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/synvikkLogofzZvP409SxF2l9j0.roa
File:                     synvikkLogofzZvP409SxF2l9j0.roa (raw, json)
Hash identifier:          wwbVialHjTYAuvT3MCLfnRyL+Io2DORBAPuhKZE/thc=
Subject key identifier:   B3:29:EF:8A:49:0B:A2:0A:1F:CD:9B:CF:E3:4F:52:C4:5D:A5:F6:3D
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       07ABFE51
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/synvikkLogofzZvP409SxF2l9j0.roa
Signing time:             Sat 01 Jan 2022 08:01:49 +0000
ROA not before:           Sat 01 Jan 2022 08:01:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62805
IP address blocks:        45.87.166.0/24 maxlen: 24
                          45.87.165.0/24 maxlen: 24
                          45.87.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128712273 (0x7abfe51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 08:01:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b329ef8a490ba20a1fcd9bcfe34f52c45da5f63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:21:94:33:cd:09:82:46:e5:bf:5f:9f:34:
                    0e:42:26:1a:08:3e:ee:8d:49:f0:dd:fb:8c:9d:59:
                    9a:6c:9a:e7:e1:40:a6:62:0d:de:d4:ab:06:4e:74:
                    19:77:66:dc:ea:49:1f:41:36:6d:99:26:1c:82:4e:
                    bc:2e:4b:1f:cc:1a:ac:9b:06:b2:a0:dd:d1:b4:b9:
                    a1:e6:6e:3b:f7:27:f5:cd:3c:47:14:e8:d5:7d:c6:
                    3d:23:72:2a:3e:9d:89:8e:08:19:f1:04:f2:39:17:
                    4f:21:71:f9:91:cf:4c:73:a2:d3:11:98:48:af:d9:
                    e2:a2:80:f7:f5:65:02:f0:a2:d2:73:33:cc:79:0f:
                    67:74:83:a7:17:2f:a2:ff:58:0c:b7:76:14:b3:26:
                    cc:44:90:e4:25:51:2c:99:1e:5b:7a:61:37:93:94:
                    b7:35:37:60:aa:3f:4c:0d:91:5a:35:11:f0:ff:1f:
                    a4:2b:f1:a8:44:16:21:e4:dd:ca:f8:54:45:7e:28:
                    bc:64:c3:77:ef:4e:d8:ed:7e:b8:2d:31:7a:47:d9:
                    9c:f2:9b:1b:8a:57:dd:f1:8f:ae:4a:b7:0c:02:4e:
                    87:09:6b:45:62:e2:d6:1c:55:ac:83:6d:8e:9a:e0:
                    17:f0:3e:6b:1f:6e:65:b9:89:38:2c:42:1c:e3:e3:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:EF:8A:49:0B:A2:0A:1F:CD:9B:CF:E3:4F:52:C4:5D:A5:F6:3D
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/synvikkLogofzZvP409SxF2l9j0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.165.0-45.87.167.255

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:90:3a:ca:56:c9:f9:71:77:2d:be:6a:d4:a3:56:b6:77:
         f5:12:39:45:d4:25:66:dc:fd:7f:75:c7:53:23:b4:65:44:ed:
         13:05:33:83:6a:a7:72:c8:66:95:42:10:98:69:66:2f:6b:64:
         a9:57:dc:e8:c6:47:e1:52:46:69:d5:2a:fa:24:00:e8:53:ab:
         e0:d4:88:78:bd:28:64:ea:70:43:5c:df:13:29:c8:11:7f:8e:
         24:f7:3f:b8:26:bf:49:e8:bb:31:d4:da:fe:32:b8:ff:96:71:
         08:87:dc:ba:2e:13:85:38:09:4b:19:69:10:2c:69:76:01:79:
         9c:fc:04:e4:1c:a1:f1:76:ed:ae:10:77:80:00:2c:3a:41:2f:
         7a:95:02:d7:78:c9:da:d9:77:97:75:6e:8a:ba:ef:3c:03:7d:
         e7:22:a7:f5:c7:78:dc:71:2a:fb:ac:18:78:74:84:d2:14:24:
         8e:58:a6:a7:6a:b5:2c:30:dd:4c:df:01:8a:63:3b:66:b2:01:
         57:9e:05:a6:a3:92:49:6d:bd:64:c4:dd:a9:22:02:e1:9d:d5:
         9f:8e:af:bc:7d:54:b3:a1:13:57:01:39:94:56:07:7c:de:be:
         f6:e6:c1:01:3f:82:66:0a:0c:09:e1:15:47:0e:e5:80:f1:b9:
         45:01:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org