Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zOVsUFpbvbhAFeUEoLC7AwfPmU0.roa
File:                     zOVsUFpbvbhAFeUEoLC7AwfPmU0.roa (raw, json)
Hash identifier:          85Z/kAa1menvTnvROR0jElTJmc/vpACszLMsz5LlVt8=
Subject key identifier:   CC:E5:6C:50:5A:5B:BD:B8:40:15:E5:04:A0:B0:BB:03:07:CF:99:4D
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01822C6DB3B684678DD11F13190CAF25A186
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zOVsUFpbvbhAFeUEoLC7AwfPmU0.roa
Signing time:             Sat 23 Jul 2022 18:59:23 +0000
ROA not before:           Sat 23 Jul 2022 18:59:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7118
IP address blocks:        45.133.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2c:6d:b3:b6:84:67:8d:d1:1f:13:19:0c:af:25:a1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jul 23 18:59:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cce56c505a5bbdb84015e504a0b0bb0307cf994d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:f4:cc:23:10:8b:13:26:d1:fd:16:06:64:
                    f3:f3:11:e9:05:e7:ff:f2:24:9a:4b:b3:72:08:63:
                    0a:59:f0:62:2c:32:8b:c7:f4:a2:5c:a9:94:e8:16:
                    f7:64:ea:a2:be:56:53:dc:2b:f9:97:3e:79:61:7a:
                    f2:6d:94:c2:2b:da:1c:5b:4b:c1:0f:db:e1:a4:c0:
                    35:c4:2d:5a:07:fa:1f:08:56:f7:9e:61:99:91:f3:
                    93:02:0b:96:bf:fd:29:f3:fe:d4:97:ac:65:d5:f2:
                    92:37:8a:22:6d:0b:4f:ab:7a:e6:2e:23:0d:03:b7:
                    42:4d:8e:48:cd:de:ec:68:1a:07:dd:31:b8:bc:f1:
                    12:30:7b:6c:ab:27:8f:ca:18:fb:89:c6:fa:62:d4:
                    70:e6:64:5a:d3:bc:1a:96:cd:60:94:99:f2:31:ee:
                    6a:e9:8c:bd:54:de:2f:05:b5:89:d3:4d:72:11:94:
                    40:bd:1d:9b:c6:63:68:a5:d4:73:8d:b5:f8:b8:d9:
                    e7:52:5e:a0:e1:89:16:93:ba:6e:ca:53:b1:f2:c2:
                    3d:a8:2f:60:53:d7:2b:b3:fb:fe:34:a3:6e:9a:49:
                    78:79:64:02:bf:48:51:0a:8f:12:9c:c8:db:ea:ee:
                    c1:21:49:60:66:b0:99:f8:59:cb:47:ad:e6:ee:c8:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E5:6C:50:5A:5B:BD:B8:40:15:E5:04:A0:B0:BB:03:07:CF:99:4D
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zOVsUFpbvbhAFeUEoLC7AwfPmU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:5d:d4:fb:ec:5d:6c:36:db:44:a9:49:16:7b:ad:4c:bf:
         a9:12:a6:6c:f8:8a:ee:d1:9f:67:20:77:e0:1c:23:fb:30:60:
         6c:4f:08:e7:f7:7b:f1:44:28:67:7a:d5:9c:ca:dd:07:0e:af:
         14:eb:c6:33:e3:bb:b3:49:e2:60:a3:8a:63:f9:cf:e6:7c:6c:
         83:4f:79:84:87:56:74:3b:1d:28:21:f8:28:53:ac:f7:3e:41:
         34:34:fb:3e:57:0a:5b:c9:6f:81:87:7f:85:34:31:e8:56:0a:
         71:9c:bf:ab:e7:e2:38:ce:4d:01:6c:23:fe:f0:8a:f9:b5:ba:
         98:d8:b9:bb:ca:62:0b:ec:25:b4:55:a0:34:3b:3c:25:1b:0f:
         d8:a9:99:5e:9d:9b:10:af:9e:79:5c:b7:55:45:bc:a2:6e:85:
         19:86:05:77:bc:8d:16:ce:4e:43:68:a3:06:d0:5d:a8:4a:e6:
         84:e5:5f:fe:35:12:bd:a7:77:bb:02:77:db:a4:e5:f5:19:51:
         01:95:31:0a:e9:03:d9:71:c0:dc:6e:c8:3c:d4:1a:e4:d2:4f:
         65:b8:7b:97:2d:e9:b5:98:5a:71:e7:00:5c:58:d4:82:50:dd:
         0e:27:15:91:5a:36:de:04:00:96:9a:6a:59:f4:a2:e6:58:53:
         9d:5d:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----