Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/V8PtWNH07b2wkrdi-RzwIDBFGmI.roa
File:                     V8PtWNH07b2wkrdi-RzwIDBFGmI.roa (raw, json)
Hash identifier:          f8ZmuYOi4HhnA3nzw8cWpvYcgwEOdEcyDzbZoejY1qc=
Subject key identifier:   57:C3:ED:58:D1:F4:ED:BD:B0:92:B7:62:F9:1C:F0:20:30:45:1A:62
Certificate issuer:       /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial:       0143D57A
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/V8PtWNH07b2wkrdi-RzwIDBFGmI.roa
Signing time:             Sat 01 Jan 2022 12:03:59 +0000
ROA not before:           Sat 01 Jan 2022 12:03:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57167
IP address blocks:        84.246.80.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21222778 (0x143d57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
        Validity
            Not Before: Jan  1 12:03:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57c3ed58d1f4edbdb092b762f91cf02030451a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:27:87:56:e0:f5:7d:ec:00:81:7b:38:77:
                    dd:c0:04:bd:7c:78:4f:13:14:82:17:65:74:8f:65:
                    60:59:1f:a4:90:e9:f3:6a:cc:a8:89:33:2c:e2:47:
                    37:ce:c4:b8:57:5e:43:1e:12:f8:74:ce:7b:6a:a3:
                    11:32:a8:14:1e:56:0f:26:c3:16:b2:14:05:84:79:
                    dc:52:4a:7c:39:43:1b:1d:8f:bf:a5:7e:bc:9c:0b:
                    fa:bc:78:a2:52:22:af:20:40:2f:37:8b:33:1c:05:
                    24:2b:5e:2f:11:e7:00:27:e2:6d:5b:32:e9:b1:98:
                    9d:eb:99:82:ee:0b:b2:07:8c:fe:8b:45:8d:f7:f4:
                    e4:d1:18:7b:45:8d:5e:fe:1f:fa:2d:91:f2:e0:8b:
                    7b:51:45:6e:67:a7:e8:d4:91:f5:8a:c3:e2:31:85:
                    8e:0a:89:33:0f:e7:a9:da:da:6f:ba:0d:03:02:bc:
                    09:3b:61:21:10:bc:0b:54:77:94:58:78:d1:76:12:
                    92:ce:29:81:b6:07:bf:a4:f7:ba:55:b1:69:38:d4:
                    44:2b:ea:f8:66:16:09:ff:33:b3:ff:1e:27:31:a5:
                    b0:b0:2e:f0:83:64:a8:fb:82:64:15:e8:7f:ff:3c:
                    2f:d3:0b:15:2a:56:1e:34:68:3c:00:74:c9:ab:cb:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C3:ED:58:D1:F4:ED:BD:B0:92:B7:62:F9:1C:F0:20:30:45:1A:62
            X509v3 Authority Key Identifier:
                keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/V8PtWNH07b2wkrdi-RzwIDBFGmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.246.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:32:dd:71:00:6e:fd:4e:29:db:c8:65:6a:e1:94:f4:5b:
         de:a6:00:64:a5:98:ba:2c:52:ac:75:30:f0:b7:9a:9f:b5:08:
         d8:2f:61:2d:c6:30:93:58:ed:31:be:cc:18:46:a2:9f:30:93:
         5c:06:a5:53:05:0c:bd:18:74:b2:00:9b:2c:22:bf:9a:db:15:
         25:c2:f8:8d:5d:12:c9:36:11:2e:8d:5f:d9:4f:3b:0a:03:09:
         26:ee:7c:ad:d3:a4:8e:9c:84:ba:64:13:53:de:5e:23:7e:6d:
         6d:19:7c:09:92:6f:e7:56:00:0f:f8:ab:0a:11:fc:30:68:b4:
         d5:66:0f:36:27:42:9c:db:6f:0e:a8:fb:d3:2b:90:45:68:dd:
         da:a3:2f:bd:c6:06:9c:79:87:f8:10:0a:bc:ac:5c:6a:39:97:
         89:4f:12:4f:6e:4f:59:58:a5:43:46:ad:46:7c:7e:77:0b:31:
         d6:73:55:cb:7e:2b:1f:ba:df:33:65:01:49:40:6b:e2:3a:68:
         c0:4f:ea:ec:40:f1:2b:53:07:8a:6e:0c:b1:e5:e7:41:38:21:
         bc:fb:da:80:ef:df:52:d1:36:76:35:97:f4:31:ee:93:c8:83:
         26:b8:a4:5b:d1:69:1d:f3:74:7e:0d:7e:4c:8f:a9:18:ec:91:
         bc:cd:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:34 2025 by rpki-client