Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/LLPHqc589DqYYwe9Ob3QY_nTJ0w.roa
File:                     LLPHqc589DqYYwe9Ob3QY_nTJ0w.roa (raw, json)
Hash identifier:          GUQ/mxL9uOuzWOhU8okb9CKQY6C8jLHXrZzt24UYTgA=
Subject key identifier:   2C:B3:C7:A9:CE:7C:F4:3A:98:63:07:BD:39:BD:D0:63:F9:D3:27:4C
Certificate issuer:       /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial:       02980E51
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/LLPHqc589DqYYwe9Ob3QY_nTJ0w.roa
Signing time:             Sun 12 Jun 2022 11:02:09 +0000
ROA not before:           Sun 12 Jun 2022 11:02:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14445
IP address blocks:        80.73.247.0/24 maxlen: 24
                          2a11:1680:16::/48 maxlen: 48
                          2a11:1680:1::/48 maxlen: 48
                          2a11:1680:c::/48 maxlen: 48
                          2a11:1680:1c::/48 maxlen: 48
                          2a11:1680:17::/48 maxlen: 48
                          2a11:1680:1a::/48 maxlen: 48
                          2a11:1680:a::/48 maxlen: 48
                          2a11:1680:15::/48 maxlen: 48
                          2a11:1680:5::/48 maxlen: 48
                          2a11:1680::/48 maxlen: 48
                          2a11:1680:b::/48 maxlen: 48
                          2a11:1680:1b::/48 maxlen: 48
                          2a11:1680:e::/48 maxlen: 48
                          2a11:1680:4::/48 maxlen: 48
                          2a11:1680:14::/48 maxlen: 48
                          2a11:1680:1f::/48 maxlen: 48
                          2a11:1680:f::/48 maxlen: 48
                          2a11:1680:2::/48 maxlen: 48
                          2a11:1680:1d::/48 maxlen: 48
                          2a11:1680:d::/48 maxlen: 48
                          2a11:1680:18::/48 maxlen: 48
                          2a11:1680:13::/48 maxlen: 48
                          2a11:1680:3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43519569 (0x2980e51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
        Validity
            Not Before: Jun 12 11:02:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2cb3c7a9ce7cf43a986307bd39bdd063f9d3274c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:56:83:a0:c4:06:71:fe:96:69:c6:ba:26:
                    72:15:45:ea:fa:ff:7d:ab:56:7e:4c:b8:f9:df:a5:
                    b5:fe:04:bc:27:3d:79:4a:bb:dd:91:a4:75:5e:ec:
                    c1:df:14:5e:23:7b:09:14:bb:68:0c:a6:0e:a4:9f:
                    39:74:01:e4:6e:17:2d:3f:8a:43:09:79:0a:fd:ed:
                    90:c1:a2:5c:f7:ba:2a:e4:9e:bd:39:91:89:04:8d:
                    c7:c7:a4:db:14:bc:e7:b9:3b:c1:45:03:fa:2d:cb:
                    8c:87:02:11:63:90:0c:3a:03:6b:3d:07:85:2c:c7:
                    59:83:87:08:07:e0:11:22:f2:48:3d:77:de:4d:4c:
                    40:0f:62:65:21:f6:8d:33:ec:c8:52:c5:79:5f:f7:
                    2a:7d:d9:f7:d8:92:a5:63:20:f4:c1:36:0b:cb:08:
                    33:65:97:6d:55:e2:71:fa:f0:02:fe:28:28:88:1b:
                    32:c4:cc:c9:a2:4e:6b:68:e5:61:0f:0c:a8:fd:a7:
                    97:f0:95:f7:c2:08:ec:7b:fb:de:77:a3:38:48:23:
                    ea:28:70:07:2f:8c:e3:0a:00:2a:b0:88:fb:19:ce:
                    23:29:f0:7d:d1:13:4e:52:54:a4:80:7c:a2:f2:15:
                    81:c5:0c:f4:52:57:26:67:0c:65:25:10:8d:a4:ae:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:C7:A9:CE:7C:F4:3A:98:63:07:BD:39:BD:D0:63:F9:D3:27:4C
            X509v3 Authority Key Identifier:
                keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/LLPHqc589DqYYwe9Ob3QY_nTJ0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.247.0/24
                IPv6:
                  2a11:1680::-2a11:1680:5:ffff:ffff:ffff:ffff:ffff
                  2a11:1680:a::-2a11:1680:f:ffff:ffff:ffff:ffff:ffff
                  2a11:1680:13::-2a11:1680:18:ffff:ffff:ffff:ffff:ffff
                  2a11:1680:1a::-2a11:1680:1d:ffff:ffff:ffff:ffff:ffff
                  2a11:1680:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:49:f2:d2:3b:2d:2f:9a:18:b7:ff:c6:c9:97:70:32:19:1c:
         77:77:8e:ed:d7:73:fd:f4:a4:a9:70:a2:8e:ef:bb:2d:fe:1a:
         2b:6b:77:d8:76:22:fe:35:6a:0f:c0:ac:07:3b:6d:32:cf:fb:
         8c:fd:80:a2:55:40:3f:57:ef:22:80:91:96:0e:3c:38:77:21:
         d1:b0:c7:86:27:06:96:4f:a3:40:77:42:0d:f0:94:14:fb:02:
         d7:f5:2f:ce:5f:0a:f2:3d:42:57:90:bd:6e:e1:4b:42:10:1d:
         92:d3:aa:3b:ea:74:f5:9c:45:ef:72:10:28:a8:37:1f:55:54:
         8c:a3:6a:e9:d0:88:30:c9:1a:87:78:ba:37:02:06:55:b7:ce:
         80:ed:e9:3c:30:53:2c:a0:0b:03:03:63:a4:3f:7b:1f:09:8f:
         97:d7:2a:45:13:25:2f:92:ad:35:fd:ac:ee:6a:5c:28:17:a3:
         2d:b1:b2:5a:73:0b:c2:8f:89:6b:46:1b:86:9c:5c:f5:8b:1c:
         2a:4e:a9:9d:e7:2f:b3:4e:0e:47:0e:16:ed:73:6b:30:f6:a1:
         75:2f:e0:9d:c6:b4:78:2b:27:84:ff:71:ca:33:67:54:c6:c4:
         e6:af:28:b2:cd:03:ac:a0:5f:76:c0:01:89:54:38:e1:b6:36:
         da:1d:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org