Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/5Kze2NidhPJ4iN17XYXz03YCDzg.roa
File:                     5Kze2NidhPJ4iN17XYXz03YCDzg.roa (raw, json)
Hash identifier:          NZ7ng60iG0x2hYj21U/ddpUW/UqQgZWlgrc6JvBIcU8=
Subject key identifier:   E4:AC:DE:D8:D8:9D:84:F2:78:88:DD:7B:5D:85:F3:D3:76:02:0F:38
Certificate issuer:       /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial:       094511AF
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/5Kze2NidhPJ4iN17XYXz03YCDzg.roa
Signing time:             Sat 01 Jan 2022 11:53:43 +0000
ROA not before:           Sat 01 Jan 2022 11:53:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54600
IP address blocks:        85.209.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155521455 (0x94511af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
        Validity
            Not Before: Jan  1 11:53:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e4acded8d89d84f27888dd7b5d85f3d376020f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:6b:b9:16:5e:ef:5d:db:05:73:d2:62:8b:
                    27:22:5b:a1:b1:46:c6:b9:b7:1b:74:a5:b1:e1:2c:
                    6a:71:df:80:cb:19:96:8d:95:a4:cf:90:38:fc:fc:
                    25:b6:7f:a5:cf:05:fa:72:fb:09:a8:55:4d:83:c5:
                    d1:47:0d:9a:81:8b:b9:8a:be:89:6e:d7:fd:86:38:
                    ec:d2:bb:4b:0c:fa:3d:50:14:30:42:a0:c9:9f:cc:
                    82:f2:fc:52:a3:5e:b2:a4:00:81:80:41:81:7e:9a:
                    f2:de:f2:0e:d3:12:1b:9e:d4:d9:bf:7b:94:ff:9a:
                    0e:d0:29:8d:29:08:8f:98:ff:75:c7:89:c4:3c:26:
                    ae:e4:36:40:cd:3d:5b:64:2b:60:64:95:0e:3d:2a:
                    2c:84:07:b5:bb:40:9b:d5:90:6b:4e:d4:8d:a3:19:
                    61:11:cd:84:60:bc:56:82:1b:4d:8e:49:d7:94:01:
                    35:03:52:58:51:b8:4f:6b:15:44:5b:65:f3:c9:ba:
                    e2:88:33:d3:df:8c:b1:e6:f2:f6:69:96:3c:eb:27:
                    05:7a:f5:5a:70:0c:f7:52:e7:ae:6c:48:9b:b4:79:
                    17:6b:c0:2c:af:78:cf:32:bd:bd:08:cd:11:0c:4c:
                    7c:57:d3:0a:ab:d6:a6:64:37:97:73:ba:02:61:b9:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AC:DE:D8:D8:9D:84:F2:78:88:DD:7B:5D:85:F3:D3:76:02:0F:38
            X509v3 Authority Key Identifier:
                keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/5Kze2NidhPJ4iN17XYXz03YCDzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:bb:33:a2:44:b5:e1:43:c2:81:7c:69:73:87:bd:f9:5c:
         1d:13:7f:1d:69:56:37:f1:1e:a5:b5:27:83:1c:90:9a:3a:87:
         06:bd:14:43:37:41:28:21:70:4e:6f:e0:1d:eb:e1:b0:25:8b:
         42:e3:75:4c:65:4e:5c:0a:be:22:c0:fa:76:32:ff:f9:a7:83:
         18:9f:21:75:7d:26:30:ed:f0:45:dc:50:1b:51:91:f5:0b:ca:
         26:92:63:e2:94:64:b0:66:55:88:c2:c5:5d:24:3c:60:20:a9:
         34:a5:e5:70:91:f7:11:75:a2:40:4a:b6:f7:08:c4:d2:bb:03:
         d8:f9:ce:c4:23:c6:ce:a9:72:37:c9:49:80:4e:7b:32:b4:cd:
         28:46:a5:65:ad:8c:60:ef:ff:47:75:7d:3d:70:84:6d:e6:83:
         4c:b1:fe:5b:84:a3:03:ab:b0:2c:d9:18:4f:0d:50:b0:2f:d4:
         e5:a6:0f:d7:4d:af:9c:60:2e:b2:0b:73:0b:4c:0d:5b:88:49:
         55:9c:86:78:d5:61:1c:ce:6d:47:fe:4b:8d:0f:2d:72:49:c1:
         c6:8e:92:76:fe:46:37:43:9f:9e:c1:8e:48:d9:a9:f8:f6:66:
         65:d5:3f:29:5f:cb:64:4f:02:af:26:5e:57:a9:b9:af:ee:82:
         82:11:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:09 2023 by rpki-client on console-ams.rpki-client.org