Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/uXMw6bBlPULKm2FQNsJfXdoinkI.roa
File:                     uXMw6bBlPULKm2FQNsJfXdoinkI.roa (raw, json)
Hash identifier:          DiutMNAfiIqoJi7SCKYas7vbcOSnweAiKcQND3MViXE=
Subject key identifier:   B9:73:30:E9:B0:65:3D:42:CA:9B:61:50:36:C2:5F:5D:DA:22:9E:42
Certificate issuer:       /CN=45afe0d73419f8aade65d2c7115c01420472ba5c
Certificate serial:       014453
Authority key identifier: 45:AF:E0:D7:34:19:F8:AA:DE:65:D2:C7:11:5C:01:42:04:72:BA:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ra_g1zQZ-KreZdLHEVwBQgRyulw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/uXMw6bBlPULKm2FQNsJfXdoinkI.roa
Signing time:             Tue 25 Jan 2022 18:23:05 +0000
ROA not before:           Tue 25 Jan 2022 18:23:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        80.91.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83027 (0x14453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45afe0d73419f8aade65d2c7115c01420472ba5c
        Validity
            Not Before: Jan 25 18:23:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b97330e9b0653d42ca9b615036c25f5dda229e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:b8:3e:1b:5a:99:26:42:71:5e:cb:c4:12:
                    89:b9:a3:d7:ca:29:b6:0f:a9:29:a4:d1:2e:2e:a7:
                    81:0b:7d:e6:3c:6b:2c:a6:ec:5e:d9:c0:21:00:a1:
                    8d:c8:44:dc:9c:ce:01:2f:d6:0f:cb:3f:50:b9:87:
                    19:2d:27:33:4a:91:31:c8:4e:8d:c8:d0:1f:cd:95:
                    d6:be:36:bc:cc:69:56:9c:e5:70:72:99:f8:6a:7b:
                    0f:30:a5:fe:58:0d:c7:18:30:02:bc:16:dc:d5:9c:
                    97:e4:1c:f4:d0:e7:00:b9:cb:b0:1e:52:25:fe:0a:
                    6e:0e:65:6c:b2:0a:f3:a6:ee:d3:ea:8e:af:7c:56:
                    d1:24:1a:d5:01:7c:2e:c1:15:63:b8:bf:18:45:03:
                    b5:96:0c:a6:f7:b3:f3:99:b7:0a:c9:d2:70:14:52:
                    88:75:b6:71:fa:4f:59:a8:98:6d:e0:9e:b3:f5:26:
                    e7:7b:f3:bd:09:b6:da:7b:3c:77:72:dc:74:c3:01:
                    e4:67:10:b0:39:52:59:dc:8f:36:df:94:3c:f4:48:
                    85:52:63:d6:0b:24:bc:99:31:93:e8:86:95:4c:25:
                    50:ae:14:76:69:91:f8:4d:a8:b2:0e:3f:e4:06:1b:
                    ca:59:8d:16:34:78:d5:2b:09:50:b5:a7:5a:21:f3:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:73:30:E9:B0:65:3D:42:CA:9B:61:50:36:C2:5F:5D:DA:22:9E:42
            X509v3 Authority Key Identifier:
                keyid:45:AF:E0:D7:34:19:F8:AA:DE:65:D2:C7:11:5C:01:42:04:72:BA:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra_g1zQZ-KreZdLHEVwBQgRyulw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/uXMw6bBlPULKm2FQNsJfXdoinkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/Ra_g1zQZ-KreZdLHEVwBQgRyulw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:58:cd:55:38:1e:d2:bf:31:2a:de:36:ce:16:14:b5:4d:e4:
         9e:4b:e4:ea:1e:e5:da:5b:dd:82:52:60:ae:f9:0c:1f:4e:69:
         90:80:81:62:83:56:32:c6:1b:fa:71:55:af:e9:b3:af:10:d4:
         fe:03:03:9c:4a:41:20:48:e3:03:25:d4:06:10:1e:e3:6d:f9:
         68:07:81:d7:8f:2a:7d:35:0e:93:77:0e:f8:17:dc:19:88:67:
         2e:3c:94:d6:8e:41:b0:d1:f5:7a:be:b7:be:11:2c:20:88:9e:
         05:6d:66:d4:a3:83:9c:e0:41:e7:61:43:53:78:d3:51:b4:5c:
         46:89:96:f7:7a:75:e3:22:35:75:86:88:97:57:49:67:07:f2:
         f6:ed:d7:2e:fa:33:cb:40:a3:26:93:4e:b5:da:0b:17:ab:f0:
         5d:23:52:79:38:42:9c:0e:48:a8:25:2e:69:ae:5d:c7:7d:a8:
         7f:ab:a5:d4:9f:84:75:91:3b:a9:e0:db:96:9e:7f:96:49:4b:
         2a:76:c6:a5:4d:ed:85:c5:fa:3a:88:64:9f:b0:2f:d7:24:07:
         eb:6e:1d:10:50:b2:73:05:2a:9e:0a:70:cf:93:9e:45:26:92:
         91:a1:64:a6:7f:45:ab:2a:e9:16:70:a8:cc:c7:bf:1f:4b:6b:
         fe:ac:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net