Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/gAZVDoOfwbtt7gS35LH-udjYq0s.roa
File:                     gAZVDoOfwbtt7gS35LH-udjYq0s.roa (raw, json)
Hash identifier:          iqp8JA5PgNDbDUhMZ4t6iIUcdjuNLTKNBmkeJ8drT74=
Subject key identifier:   80:06:55:0E:83:9F:C1:BB:6D:EE:04:B7:E4:B1:FE:B9:D8:D8:AB:4B
Certificate issuer:       /CN=bbda9a35ccb296448e8b5656861314ada525b666
Certificate serial:       BB94EC
Authority key identifier: BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9qaNcyylkSOi1ZWhhMUraUltmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/gAZVDoOfwbtt7gS35LH-udjYq0s.roa
Signing time:             Sat 01 Jan 2022 01:58:52 +0000
ROA not before:           Sat 01 Jan 2022 01:58:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        62.204.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12293356 (0xbb94ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbda9a35ccb296448e8b5656861314ada525b666
        Validity
            Not Before: Jan  1 01:58:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8006550e839fc1bb6dee04b7e4b1feb9d8d8ab4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:8c:7c:92:e5:f7:ee:eb:16:0b:a7:6f:4a:
                    48:36:54:9d:20:3a:66:49:02:80:94:64:a6:3e:bf:
                    60:97:af:50:83:66:5f:db:af:50:01:46:7d:04:63:
                    c0:e4:54:ae:a9:02:b1:e6:24:04:e7:d0:fc:26:7a:
                    cb:01:ac:51:5b:25:9a:9d:be:29:95:69:93:01:38:
                    c4:4d:a2:68:2a:fd:26:6c:88:29:5f:04:31:a5:90:
                    34:85:b6:8d:9c:3b:61:9d:b1:1c:82:88:f8:6b:0c:
                    42:57:4f:a4:99:ba:49:9c:f3:c9:84:16:db:6c:58:
                    b0:fc:de:b5:4b:06:66:28:41:e8:80:88:0a:fd:2e:
                    32:ca:8b:2f:23:84:4d:04:d1:08:6a:30:8a:0b:ab:
                    23:09:71:01:e2:b9:c4:95:43:07:14:1d:48:35:85:
                    41:ac:b5:04:e6:c8:48:5b:1a:3f:37:59:fd:bd:00:
                    58:12:8c:4f:15:93:6d:8d:c0:f3:f2:fa:a6:22:0b:
                    ff:11:1a:78:69:7d:47:00:ed:cc:5f:08:9c:af:0e:
                    df:00:2d:aa:80:b3:7d:83:56:83:83:42:a3:7a:fb:
                    e5:f0:ef:b2:91:75:e0:ff:47:e8:5f:04:be:84:89:
                    5c:55:df:49:98:8c:bc:30:cb:cf:15:3f:9c:72:4b:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:55:0E:83:9F:C1:BB:6D:EE:04:B7:E4:B1:FE:B9:D8:D8:AB:4B
            X509v3 Authority Key Identifier:
                keyid:BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9qaNcyylkSOi1ZWhhMUraUltmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/gAZVDoOfwbtt7gS35LH-udjYq0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:12:a0:11:55:e4:6e:33:a8:a4:31:74:6d:ec:f8:eb:d1:73:
         03:0e:db:30:1f:cc:26:51:b9:e4:db:35:b6:c4:c5:07:44:b7:
         30:01:02:4f:60:ab:5b:c3:7a:10:eb:ed:77:6a:3c:91:ea:d4:
         f9:a0:4b:38:ee:18:e3:2e:5e:9e:8e:30:80:5b:18:40:5e:9f:
         50:c1:4a:97:a1:b0:c2:94:ce:da:28:35:e4:c9:9c:c7:18:62:
         c3:4c:02:8c:05:50:51:f4:82:90:ad:49:80:4d:4f:73:c5:52:
         3c:58:12:60:e3:41:70:19:1a:60:65:64:b0:b9:9a:b8:bc:8e:
         39:57:75:20:91:89:ac:b8:a5:9c:d2:33:6a:e0:08:f2:89:24:
         d1:01:e1:75:18:dd:89:9c:db:82:f7:7d:f4:49:d7:88:e8:c0:
         13:65:dc:e6:13:d2:72:7a:eb:24:b1:b5:ef:2f:44:c1:50:ed:
         17:c8:11:d0:ab:76:57:5a:27:79:a6:57:88:a3:9a:ea:a9:11:
         8e:8b:3c:9f:cf:4b:32:67:6f:78:b4:3f:6f:70:ef:f0:f5:da:
         d9:60:ff:e2:c2:5d:bd:1b:7c:19:bd:7b:88:01:74:63:aa:f7:
         f7:a3:49:c5:da:ca:fc:07:df:71:35:80:7f:80:00:fd:43:34:
         c6:64:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:51 2023 by rpki-client on console-fra.rpki-client.org