Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/oH-TGeSAyRrCR_ON06zfW58xYfk.roa
File:                     oH-TGeSAyRrCR_ON06zfW58xYfk.roa (raw, json)
Hash identifier:          /MwlxhdefpbVWu6fYgLhFbLUEV3sfqya8jqrTI1mHj4=
Subject key identifier:   A0:7F:93:19:E4:80:C9:1A:C2:47:F3:8D:D3:AC:DF:5B:9F:31:61:F9
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       01828F48FE9871921590BBADA9495081EDDC
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/oH-TGeSAyRrCR_ON06zfW58xYfk.roa
Signing time:             Thu 11 Aug 2022 23:41:41 +0000
ROA not before:           Thu 11 Aug 2022 23:41:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        171.22.60.0/23 maxlen: 23
                          5.183.240.0/23 maxlen: 23
                          92.119.24.0/23 maxlen: 23
                          171.22.62.0/23 maxlen: 23
                          5.183.242.0/23 maxlen: 23
                          92.119.26.0/23 maxlen: 23
                          45.14.80.0/24 maxlen: 24
                          45.14.81.0/24 maxlen: 24
                          45.86.24.0/22 maxlen: 22
                          185.45.94.0/24 maxlen: 24
                          185.45.95.0/24 maxlen: 24
                          185.45.92.0/23 maxlen: 23
                          45.158.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8f:48:fe:98:71:92:15:90:bb:ad:a9:49:50:81:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Aug 11 23:41:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a07f9319e480c91ac247f38dd3acdf5b9f3161f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:f7:e6:de:69:f9:13:5e:99:d9:92:f2:3c:
                    a8:89:c6:94:30:90:20:e5:ea:47:6e:a7:f7:a5:26:
                    20:37:18:f3:2b:ae:2a:35:8d:31:ef:bd:aa:c8:e7:
                    1a:1d:5f:3b:90:4c:7e:d5:84:2c:e6:09:39:1a:1f:
                    f8:d5:3e:51:87:cb:0c:e4:61:34:73:aa:49:8a:a8:
                    f9:35:ef:20:3a:af:2a:b8:f8:f3:dc:eb:d2:d9:8a:
                    83:b3:fb:1f:88:28:c4:1c:d5:98:53:24:8e:dc:39:
                    48:85:19:aa:a5:67:f5:9f:f0:38:01:73:02:a3:32:
                    32:f1:f3:3e:45:94:a7:ec:7c:b8:71:21:b3:37:b9:
                    0c:c4:14:89:64:ba:eb:88:44:04:d8:2e:01:6d:cc:
                    50:dc:83:d7:5c:a7:ff:4d:38:8d:d7:33:a7:cb:97:
                    c3:bd:f7:90:15:4e:b3:55:f1:c2:77:84:7c:a4:b9:
                    fb:80:81:e2:ad:a1:30:31:d9:92:6e:a2:3b:29:ba:
                    70:a4:fe:f1:4b:41:7d:66:f7:bd:6c:d5:42:b8:28:
                    ab:cd:c4:f6:ec:30:09:1d:a6:80:1f:b2:ce:07:7e:
                    8d:95:69:00:dc:a1:37:a1:09:2b:d2:ae:0b:7b:1e:
                    1a:9c:f5:4e:01:f9:af:2f:ca:a5:df:2e:8d:fa:62:
                    07:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7F:93:19:E4:80:C9:1A:C2:47:F3:8D:D3:AC:DF:5B:9F:31:61:F9
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/oH-TGeSAyRrCR_ON06zfW58xYfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.240.0/22
                  45.14.80.0/23
                  45.86.24.0/22
                  45.158.192.0/22
                  92.119.24.0/22
                  171.22.60.0/22
                  185.45.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:4d:8b:3b:00:15:04:66:36:80:d4:3f:b3:3f:56:c8:19:8d:
         08:af:4c:12:21:dc:64:80:6c:14:01:8d:b5:e9:c3:7d:17:db:
         b8:6e:e7:af:f5:55:83:c1:5e:10:1c:f7:f5:6f:bb:ce:ab:9b:
         e5:36:81:6e:53:4d:6b:5d:53:fc:cb:95:f4:5b:94:6e:64:d7:
         ce:24:6b:d7:77:0d:72:21:86:32:ae:c8:a4:93:95:0b:4a:be:
         3f:35:b8:4c:1b:40:9f:5f:dd:96:ad:ed:33:0e:6f:d5:74:aa:
         2a:29:bc:dc:b9:b1:7a:7a:e0:85:7d:09:4b:12:40:21:d4:73:
         38:e6:5f:f0:5b:53:8a:5c:dd:ab:79:1c:da:cf:dc:f3:03:ab:
         94:cb:d1:fb:ba:70:91:ea:0c:07:35:d4:c2:8c:b3:e4:e8:a6:
         34:f9:72:9f:7a:f5:95:da:8f:63:26:24:79:4b:0b:2c:90:34:
         53:90:35:60:32:ab:5c:75:a0:9d:53:a6:a8:36:da:d5:45:ec:
         11:c9:3e:a2:32:cc:14:bb:75:5a:23:8d:75:ad:b3:53:ec:16:
         56:f7:54:64:a4:8f:63:98:a1:db:41:36:c9:3d:12:12:33:ea:
         4d:3e:c3:0c:ae:1f:ab:30:ff:c4:03:4f:fd:93:4c:1a:15:04:
         35:cf:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:52 2023 by rpki-client on console-fra.rpki-client.org