Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa
File:                     iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa (raw, json)
Hash identifier:          clvQGyl5YFq79o/IEFj0kf4BCPaaMx+5cQYbC5LYz6g=
Subject key identifier:   8A:26:FB:08:25:0F:0F:C9:A1:F8:90:ED:0B:75:63:12:A4:0A:1A:74
Certificate issuer:       /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial:       075E1B6B
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa
Signing time:             Sat 01 Jan 2022 02:00:38 +0000
ROA not before:           Sat 01 Jan 2022 02:00:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.89.28.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123607915 (0x75e1b6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
        Validity
            Not Before: Jan  1 02:00:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a26fb08250f0fc9a1f890ed0b756312a40a1a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:c9:a8:ae:b3:64:6b:0e:ae:86:63:f8:06:
                    f6:49:d0:09:20:81:99:18:90:23:24:38:ee:da:f0:
                    a4:82:36:31:17:82:f2:6c:55:10:2b:6b:2a:47:60:
                    63:49:cc:79:f8:c8:6e:c2:8e:12:7e:ce:26:95:2c:
                    58:45:5a:6b:a2:bc:70:48:97:13:df:3c:7c:f3:29:
                    5a:29:67:51:e5:0f:91:4d:9e:e0:5a:e8:ce:20:0f:
                    62:28:b3:b4:d8:ab:a1:b0:9c:6d:28:25:05:31:60:
                    61:ab:5c:35:8b:10:34:c5:5b:86:7a:ff:62:da:2f:
                    73:4c:ed:97:5c:4c:40:c5:76:8c:98:fe:06:c7:19:
                    28:58:0f:d3:61:de:f1:ca:4c:a4:a7:ba:c2:52:67:
                    f3:90:83:bc:69:41:7b:fb:a3:2d:80:c0:5b:e8:db:
                    a7:9e:f2:db:a6:ad:a6:97:14:d4:d9:2c:76:e7:63:
                    b2:16:8e:34:9c:f8:e5:b4:82:99:75:7c:ed:af:ef:
                    4e:97:f8:78:34:14:c4:06:a5:aa:eb:b3:50:8e:8d:
                    d1:a7:d4:e5:fb:7f:d0:bc:a1:10:e8:03:a5:1a:4c:
                    ed:05:ae:28:a3:e1:48:b1:b0:ce:6e:13:98:02:01:
                    a5:d8:b8:46:a6:d1:79:c5:6c:c8:0a:ee:28:dd:3a:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:26:FB:08:25:0F:0F:C9:A1:F8:90:ED:0B:75:63:12:A4:0A:1A:74
            X509v3 Authority Key Identifier:
                keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/iib7CCUPD8mh-JDtC3VjEqQKGnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:91:94:05:18:f3:c5:53:d0:b8:28:89:6c:49:58:e6:b5:
         e9:fc:db:f8:01:4a:d7:6c:ad:77:94:bf:3f:ba:04:92:fd:64:
         0f:03:12:19:de:3c:b1:0e:ab:4e:3b:70:08:30:e1:c4:50:69:
         0a:2d:b3:a0:66:21:a8:a3:58:26:5e:21:52:20:5e:e2:0f:8e:
         ca:5f:f5:f8:8a:f0:4b:c9:cf:2c:27:59:37:e1:a3:b5:ef:cd:
         e6:e6:d9:d6:e2:26:39:df:24:bf:f9:f6:fe:39:f5:cb:20:76:
         5f:ae:4e:ba:7c:9a:47:5f:d9:70:d6:6e:48:2b:56:ea:29:ad:
         34:70:cf:2c:2a:a3:c3:79:17:82:fc:b8:ea:1a:48:d1:ab:6b:
         14:79:00:be:bb:54:bd:f2:75:d4:19:d4:3f:39:55:5d:ac:ad:
         52:57:00:5f:1c:e9:04:30:7b:f6:52:c4:cf:97:3d:07:02:0a:
         2e:40:d7:42:5f:aa:60:82:12:16:a9:f5:ef:71:a3:ed:17:80:
         1e:15:d1:71:5d:a7:a4:f4:e0:22:8d:63:aa:6d:da:a1:4e:8e:
         b8:e9:3e:3c:4e:3c:f5:87:15:6e:b5:b9:39:fd:ba:76:ef:0c:
         1b:dd:24:f2:c5:9f:d0:13:89:06:4d:1b:16:27:7f:39:77:92:
         79:78:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org