Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/c8JR_IQyNMIICwqKqEJP5bXMGW0.roa
File:                     c8JR_IQyNMIICwqKqEJP5bXMGW0.roa (raw, json)
Hash identifier:          RHdWnx/MovYAFWagciTSO9dssaTvXlXjxtuY0ic2W1I=
Subject key identifier:   73:C2:51:FC:84:32:34:C2:08:0B:0A:8A:A8:42:4F:E5:B5:CC:19:6D
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       07FC8B91
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/c8JR_IQyNMIICwqKqEJP5bXMGW0.roa
Signing time:             Wed 02 Feb 2022 08:01:25 +0000
ROA not before:           Wed 02 Feb 2022 08:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34929
IP address blocks:        31.7.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133991313 (0x7fc8b91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Feb  2 08:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73c251fc843234c2080b0a8aa8424fe5b5cc196d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:4a:d5:60:9d:fa:02:78:e5:ed:bb:76:06:
                    4f:2d:6f:f0:3c:fd:bd:b6:60:c5:52:e9:9c:6d:de:
                    af:93:e1:1d:10:99:7c:46:4c:a9:b4:65:cd:52:e6:
                    e9:f8:51:a0:cd:7e:cc:b9:a1:11:5b:eb:85:4e:eb:
                    ce:d1:55:65:6f:57:6b:22:52:f4:a7:27:dc:37:1f:
                    ca:69:11:2d:84:61:59:b1:4a:29:55:89:02:e8:bd:
                    89:db:aa:cc:75:76:3e:0c:d6:a0:78:fd:62:3f:62:
                    84:05:ba:b0:04:ee:4b:1b:45:63:50:e0:78:0c:16:
                    fc:a6:ee:f0:cb:67:06:18:95:27:4c:5e:74:61:18:
                    ab:b6:a1:42:4c:c6:af:76:29:a6:a1:0c:21:71:84:
                    43:a5:b7:fe:a4:4f:6c:89:94:c5:bb:a1:33:48:d1:
                    e5:23:60:20:6f:34:7f:50:07:07:d1:c7:86:57:40:
                    53:00:d8:07:21:ed:36:21:13:18:c7:54:79:e0:15:
                    8a:cc:a9:51:55:99:d8:f8:cd:e8:4d:d5:c0:95:74:
                    2f:c8:4f:60:0c:d4:52:4c:be:15:7c:aa:ca:f1:be:
                    2d:63:02:11:b0:2a:d4:b7:86:90:b1:0d:6d:42:ff:
                    02:b7:e5:5e:07:0e:64:37:13:08:fe:65:30:9c:aa:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C2:51:FC:84:32:34:C2:08:0B:0A:8A:A8:42:4F:E5:B5:CC:19:6D
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/c8JR_IQyNMIICwqKqEJP5bXMGW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.7.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:cc:1e:85:a6:47:b6:fe:70:17:69:bf:c4:3c:1e:45:50:ca:
         da:c2:33:ec:44:6c:07:bd:24:90:38:a9:3b:85:eb:13:35:7e:
         d3:fd:79:6c:6d:56:8d:9d:99:c1:7b:56:9d:12:c5:1d:02:bb:
         68:ed:60:3a:03:be:6c:1c:07:f9:5b:08:50:0e:7a:4a:50:07:
         1f:43:af:94:a3:a1:61:1e:fa:51:a0:17:5d:b7:b4:cb:fb:14:
         66:6f:65:bd:2e:f1:47:a4:5c:e6:1a:a1:db:ef:0c:63:6b:c4:
         e3:08:aa:02:ca:58:be:db:c9:37:39:cb:98:49:72:9d:41:0b:
         ea:de:61:b0:88:33:3c:f0:d4:5a:1c:9b:91:0f:33:43:f2:e0:
         94:e8:65:96:26:fa:36:b0:dd:fe:2a:83:7c:91:41:a6:ce:36:
         1d:bb:9e:75:84:94:b8:10:af:f3:da:51:15:6f:9e:01:d5:0d:
         c0:7d:81:82:7a:53:6f:1d:61:1d:f5:ce:28:5d:2a:94:a1:74:
         40:3b:1f:a0:5e:d7:63:eb:3b:8b:dc:a4:3d:45:c5:ac:48:07:
         28:5e:85:40:b3:3b:42:15:77:1c:59:2e:99:cf:8a:5d:1f:6d:
         28:9a:8e:f9:60:6a:6f:f7:b4:ba:5a:7c:3c:6c:ad:ff:e9:24:
         0d:c0:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:24 2024 by rpki-client on console-ams.rpki-client.org