Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/xXcMg-3JzCYohPHE5GllupJlLq8.roa
File:                     xXcMg-3JzCYohPHE5GllupJlLq8.roa (raw, json)
Hash identifier:          F5q5wLqzYGqPu36A4vuTxPsnwJhfKS5vL3vAc2ZzlT0=
Subject key identifier:   C5:77:0C:83:ED:C9:CC:26:28:84:F1:C4:E4:69:65:BA:92:65:2E:AF
Certificate issuer:       /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial:       02078A17
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/xXcMg-3JzCYohPHE5GllupJlLq8.roa
Signing time:             Wed 23 Mar 2022 13:02:02 +0000
ROA not before:           Wed 23 Mar 2022 13:02:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50673
IP address blocks:        84.246.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34048535 (0x2078a17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
        Validity
            Not Before: Mar 23 13:02:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c5770c83edc9cc262884f1c4e46965ba92652eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:b7:6a:01:64:d8:0d:b1:24:a0:12:0a:74:
                    22:61:fd:7c:1d:ad:c6:92:95:be:ec:b7:8b:49:bf:
                    20:ab:de:ba:89:b8:cc:33:ad:f9:f3:33:30:bb:07:
                    db:eb:6d:d5:92:96:00:46:db:a8:f2:92:36:9a:8b:
                    07:fc:fe:b5:18:f7:3e:2c:8e:02:96:28:85:25:cf:
                    b9:a3:70:f6:be:1b:0d:84:7f:a5:45:f8:5e:2b:a0:
                    0e:9a:da:3a:5c:80:80:18:eb:08:15:4a:21:76:a9:
                    cc:5a:06:20:8f:68:22:01:15:c3:09:b2:0b:74:76:
                    f0:d6:c0:e2:c5:f5:3d:3e:b1:69:5d:fc:06:38:4c:
                    e9:70:12:c6:15:06:b9:0c:92:23:dc:6f:8b:69:27:
                    46:61:47:15:4c:ac:07:7b:7e:cf:66:82:28:a9:c9:
                    b0:c5:ff:e9:91:b8:23:05:13:63:6f:a9:82:47:bc:
                    b4:8d:95:16:d4:c7:66:30:c5:4f:7b:76:a3:13:f6:
                    ae:59:ec:63:ba:a1:59:0b:17:59:33:60:98:96:4c:
                    50:f5:3a:6b:2b:70:dc:e0:5a:17:f4:74:e4:f9:80:
                    e8:71:1f:ac:d3:c8:4e:b4:1c:0b:6d:53:92:20:06:
                    84:04:ee:da:26:12:3f:30:5a:c4:5d:30:92:ee:fa:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:77:0C:83:ED:C9:CC:26:28:84:F1:C4:E4:69:65:BA:92:65:2E:AF
            X509v3 Authority Key Identifier:
                keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/xXcMg-3JzCYohPHE5GllupJlLq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.246.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:3b:d7:ba:12:c9:e5:f8:30:c5:bf:89:bd:f5:6f:63:a8:
         07:f8:cb:31:40:62:a0:71:0b:e3:da:16:2b:49:2f:c7:31:97:
         01:0a:db:9a:03:b7:e8:aa:a5:13:83:2d:6a:d3:86:de:e4:68:
         49:c6:88:17:35:41:37:97:f0:5e:0e:a0:92:35:d4:c4:24:ae:
         4b:43:bd:07:3d:34:60:f4:3a:7c:d1:70:5e:ac:ed:d5:42:3a:
         b0:c9:e9:3a:e3:fe:fe:c1:5b:db:c9:44:cf:06:e5:85:e7:34:
         63:44:88:e8:f1:e0:9d:09:3f:02:b8:21:51:33:71:fb:7d:a8:
         b2:92:7f:6f:fd:55:0f:1b:b1:02:e1:c0:ca:8a:f5:64:da:00:
         81:c5:d3:ab:34:10:04:c2:5d:df:4d:97:c5:82:b3:9d:f1:2f:
         64:6d:5b:e8:8a:60:f0:19:1f:3d:2f:7d:5d:32:32:47:82:67:
         14:c6:2b:26:6d:d5:7a:05:4b:1b:e6:34:ac:d5:01:7f:07:7d:
         6a:05:fa:73:ff:83:00:61:f2:59:f0:07:a3:6f:90:56:9e:9f:
         c4:65:10:68:cb:53:f4:e1:8f:d9:94:8b:ac:05:4e:d4:fe:80:
         ea:26:d2:4f:ae:73:73:cb:02:15:77:78:8e:f4:14:7e:d9:fd:
         c1:da:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:07 2023 by rpki-client on console-fra.rpki-client.org