Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/z3EKo9WBkN9_JqEI8nejWI5ATNY.roa
File:                     z3EKo9WBkN9_JqEI8nejWI5ATNY.roa (raw, json)
Hash identifier:          2mUyVWel/dMZtpx/BaweW/9Dnhen3DWhVAu1Or7c/xU=
Subject key identifier:   CF:71:0A:A3:D5:81:90:DF:7F:26:A1:08:F2:77:A3:58:8E:40:4C:D6
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       01845328BF71F150974FB09BBFA5ED90CC6B
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/z3EKo9WBkN9_JqEI8nejWI5ATNY.roa
Signing time:             Mon 07 Nov 2022 17:34:50 +0000
ROA not before:           Mon 07 Nov 2022 17:34:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208867
IP address blocks:        45.80.96.0/22 maxlen: 22
                          45.85.128.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:53:28:bf:71:f1:50:97:4f:b0:9b:bf:a5:ed:90:cc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Nov  7 17:34:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf710aa3d58190df7f26a108f277a3588e404cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:0c:77:6a:bd:24:2b:2d:ad:07:6a:b4:cf:
                    b1:0a:be:b8:56:15:2b:2e:74:a4:e3:f8:0f:19:f5:
                    14:e7:a0:57:24:8d:bb:9d:1f:e0:c5:53:d5:37:38:
                    b0:74:5a:7b:e5:6f:f0:36:eb:b2:71:e0:e6:59:6c:
                    45:90:cd:dd:f6:8d:d1:66:b6:fe:6e:c0:99:f5:94:
                    e1:b2:84:11:d3:85:87:6d:2f:0a:d2:9b:85:75:d6:
                    33:2a:16:58:a8:ef:eb:4b:10:29:05:c8:00:0b:25:
                    44:b2:f9:0c:18:67:9f:6b:51:ce:49:e0:e3:69:f9:
                    28:eb:56:03:fb:f5:16:2c:3f:ed:d1:53:4e:5d:a2:
                    aa:26:de:69:7f:fa:e1:91:8c:09:79:d9:68:78:d3:
                    00:aa:ea:11:bf:c6:34:5b:3d:7b:91:4f:96:8c:19:
                    83:e5:d9:0c:25:38:e9:7c:b6:c5:0c:b1:95:e2:3b:
                    72:c7:26:64:5a:69:0e:a1:77:9b:f4:b5:f9:95:34:
                    da:ec:ca:ee:63:95:8f:5b:a0:9f:98:64:f3:75:b8:
                    5f:e2:04:bf:9f:11:83:ed:aa:c2:e0:8b:a4:14:a7:
                    3c:8c:65:2d:79:65:12:7a:ab:80:6c:c6:da:f2:7e:
                    f5:bb:12:9c:5d:9c:7b:75:4d:97:32:d8:cd:3b:88:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:0A:A3:D5:81:90:DF:7F:26:A1:08:F2:77:A3:58:8E:40:4C:D6
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/z3EKo9WBkN9_JqEI8nejWI5ATNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.96.0/22
                  45.85.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:3e:0e:91:5f:af:56:5f:1a:3d:cc:34:e6:b0:b1:69:74:
         c5:bd:09:79:dd:63:ea:1f:53:a3:72:2f:39:7a:18:33:fe:29:
         9d:60:10:25:0b:c3:75:54:86:46:6c:75:57:49:18:32:58:16:
         cc:a3:93:a8:55:ce:c6:14:23:05:d5:e0:75:52:61:f3:bd:78:
         3f:f7:4f:3b:a0:19:54:a9:4f:13:8c:ae:99:db:38:e1:da:d1:
         3a:90:5b:d8:79:76:98:08:a0:f9:7f:4a:bf:fc:d0:70:87:d6:
         33:1e:d0:1b:0d:2d:2f:93:b8:78:21:65:a0:f5:fe:62:9a:c3:
         71:ed:de:02:80:6b:20:e2:7a:83:21:fb:46:61:66:f5:aa:51:
         eb:95:2e:be:b0:71:99:7e:f7:39:58:24:36:cf:09:1d:bd:77:
         af:1d:f1:5b:8b:ed:3a:db:21:9b:e1:c5:aa:ee:4c:38:b7:ce:
         38:20:56:63:13:31:00:cb:67:bf:29:25:16:c4:31:93:b2:d0:
         18:87:2e:02:93:2e:a6:b8:e5:d0:a1:a7:2c:41:0a:91:84:a7:
         1f:40:25:ba:cd:35:63:db:1d:2c:ea:ab:20:7f:27:b6:54:bb:
         8c:8f:75:07:5e:17:40:f3:e3:3f:4d:50:34:8e:b4:1c:13:ff:
         5c:e4:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org