Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/DjsElpELsKqwL7Khkp7IuVlOSKQ.roa
File:                     DjsElpELsKqwL7Khkp7IuVlOSKQ.roa (raw, json)
Hash identifier:          hGndwAQfO+Rw1yhhw0AvjSvun8ofdVCGfFMJ+WbH7D4=
Subject key identifier:   0E:3B:04:96:91:0B:B0:AA:B0:2F:B2:A1:92:9E:C8:B9:59:4E:48:A4
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       0864F9C1
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/DjsElpELsKqwL7Khkp7IuVlOSKQ.roa
Signing time:             Fri 03 Jun 2022 07:22:20 +0000
ROA not before:           Fri 03 Jun 2022 07:22:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        5.134.84.0/22 maxlen: 22
                          217.113.11.0/24 maxlen: 24
                          217.113.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140835265 (0x864f9c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jun  3 07:22:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e3b0496910bb0aab02fb2a1929ec8b9594e48a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:88:ed:95:07:e3:ac:37:29:c8:fd:b3:54:
                    22:53:e4:87:6e:49:aa:8c:aa:19:e6:4b:de:ef:c7:
                    08:16:ae:83:77:c7:9d:90:ae:a2:96:a7:14:28:9d:
                    a5:61:8a:81:65:d1:9c:53:03:cb:09:fe:5c:52:0b:
                    be:d9:4d:40:79:9f:82:c7:9e:7c:df:4d:83:68:cb:
                    84:59:3d:84:d8:07:4a:32:d6:3c:e6:25:77:b7:a9:
                    10:66:22:f0:cd:1e:33:e0:0e:86:cd:92:81:33:03:
                    b4:11:d8:7f:47:c1:c9:31:36:fd:b5:d0:50:6f:4b:
                    82:1b:31:90:47:7e:9c:9c:48:35:5d:91:60:7f:5a:
                    e3:5c:34:54:01:b1:2f:26:b2:f1:03:fc:2d:68:78:
                    e9:5e:3c:2b:32:36:84:9e:d8:f3:75:12:6d:ee:b3:
                    dc:e9:fb:f4:13:7c:7b:43:17:97:f5:b3:b1:56:70:
                    29:de:2f:eb:b6:bf:5f:f9:6b:20:0a:f6:80:64:2a:
                    32:3e:a1:8f:be:dc:02:0a:43:af:d1:1d:fc:1d:1e:
                    5a:47:6b:cd:f8:38:03:f9:43:95:bb:7c:84:48:ca:
                    f3:b9:78:10:af:9e:c0:d6:6f:c4:ea:5a:63:18:38:
                    2c:e5:84:e2:74:e7:96:96:c8:c2:b8:65:e6:3a:9e:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:04:96:91:0B:B0:AA:B0:2F:B2:A1:92:9E:C8:B9:59:4E:48:A4
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/DjsElpELsKqwL7Khkp7IuVlOSKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.84.0/22
                  217.113.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:8a:6f:9f:b7:28:c0:a8:c4:10:e5:0c:4c:c3:af:62:bb:6b:
         eb:16:47:f7:5f:35:e6:8a:9e:3e:6a:d0:c2:71:15:b4:37:8b:
         9d:9a:79:77:2d:48:62:d3:23:99:95:34:68:f9:a5:eb:d0:f3:
         22:66:bb:2e:db:de:ab:eb:93:a6:a9:8f:5f:35:0e:aa:16:37:
         37:40:b0:8b:16:f5:35:90:d4:5f:c8:28:6d:8d:88:85:3c:c7:
         4f:bc:ac:b0:45:7f:68:71:ae:e8:4c:5f:4c:79:02:ae:cd:fe:
         3c:7e:9b:64:5b:af:ce:1f:ee:59:a3:4f:f2:b2:97:b8:64:a3:
         c2:8b:0d:4b:b0:5d:2e:e9:f1:86:f4:68:dc:f1:88:f8:1b:da:
         fc:4e:0f:e4:1a:1f:55:0c:93:39:3a:5a:2f:38:b2:ed:fb:34:
         e0:72:26:38:bc:43:5c:80:96:8b:fd:c4:20:25:41:0b:18:77:
         71:66:97:6b:9c:4e:22:ba:45:b4:4a:a0:1d:9d:89:67:77:ca:
         d1:8a:fa:89:4f:ae:f9:64:6a:67:fb:a9:7a:a8:02:0a:94:45:
         6e:2b:3f:e4:78:1e:65:5a:0b:df:00:c7:50:18:c0:63:05:3e:
         81:f9:55:f5:29:e6:9e:1c:58:58:00:5c:da:f8:a3:85:07:83:
         d1:f8:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:23 2023 by rpki-client on console-ams.rpki-client.org