Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/DT9ceceTxDkIMzgWenfcTaebZ5Y.roa
File:                     DT9ceceTxDkIMzgWenfcTaebZ5Y.roa (raw, json)
Hash identifier:          v5prsLFISqp3P3/Qi8RbD4E6jZbgebj87/jzAw8dsEI=
Subject key identifier:   0D:3F:5C:79:C7:93:C4:39:08:33:38:16:7A:77:DC:4D:A7:9B:67:96
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       036A9D75
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/DT9ceceTxDkIMzgWenfcTaebZ5Y.roa
Signing time:             Sat 01 Jan 2022 05:06:07 +0000
ROA not before:           Sat 01 Jan 2022 05:06:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34360
IP address blocks:        93.157.96.0/21 maxlen: 21
                          213.108.56.0/21 maxlen: 21
                          2a01:4660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57318773 (0x36a9d75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: Jan  1 05:06:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d3f5c79c793c439083338167a77dc4da79b6796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:b3:ee:72:2b:ad:92:7c:c0:ee:23:d7:e8:
                    ff:9a:6c:9b:a0:4e:05:a8:1b:c5:2b:ec:c9:a5:67:
                    c8:7b:b6:c0:48:56:5b:89:b2:2d:0e:be:a5:94:c0:
                    07:cd:eb:1a:bd:4b:24:d3:a6:28:b4:7b:ec:c5:a2:
                    11:08:e4:a2:69:64:f1:28:c0:b5:da:be:42:78:38:
                    ee:b4:81:ee:89:ab:df:58:9a:3a:d1:8c:84:cc:23:
                    93:4c:b7:31:0b:0b:8c:ea:e4:0a:a9:4e:1f:b1:23:
                    fc:bf:00:a6:77:2b:80:d9:d9:8a:dc:36:54:29:6f:
                    d9:a8:93:4c:1b:8a:7b:bd:5a:51:24:6c:ba:f7:81:
                    6d:24:56:fb:e2:a7:93:c7:05:49:f5:2f:64:b3:f6:
                    aa:8a:76:11:7a:96:2a:96:ba:25:c3:d6:39:8d:8c:
                    69:53:8f:98:f4:fe:32:01:2f:65:44:50:33:c3:b3:
                    9c:f9:84:99:07:cf:61:28:4a:58:0d:08:37:ee:71:
                    d6:6e:f8:07:07:66:8d:ad:43:3c:71:ee:66:83:92:
                    5e:70:17:9c:d7:87:da:1e:7b:bc:e1:a5:a2:6a:29:
                    78:b5:6a:8d:4a:70:83:d1:9c:36:21:5a:3b:f0:ad:
                    98:be:26:c4:07:22:7b:af:31:42:a0:8a:b4:7b:1f:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:5C:79:C7:93:C4:39:08:33:38:16:7A:77:DC:4D:A7:9B:67:96
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/DT9ceceTxDkIMzgWenfcTaebZ5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.96.0/21
                  213.108.56.0/21
                IPv6:
                  2a01:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:6b:4d:aa:2c:d0:8c:7d:9b:dc:47:6f:4d:6e:18:f5:0e:
         50:fb:86:dc:23:2a:5f:b0:ef:2a:eb:8c:e4:a3:78:b9:9f:b1:
         6a:fd:29:1b:e9:c3:90:47:63:01:2f:d3:93:4a:6e:67:99:3d:
         08:cf:1e:ab:b1:66:eb:d8:02:7d:82:2b:dd:9b:38:4a:5a:23:
         ad:b1:1e:7e:7c:09:fc:e4:1d:27:86:86:7f:27:ca:38:8a:4a:
         ca:d2:fe:27:ed:d3:5b:53:46:9e:b8:42:86:91:a9:a0:ec:59:
         bb:4b:bc:3e:69:bf:06:0b:55:68:69:fb:b3:e1:16:ed:4e:29:
         95:9f:35:5f:e8:35:68:6e:c1:92:2e:66:b1:91:f9:d2:b1:a3:
         7b:1a:ee:ad:c5:94:9b:3a:f2:cb:04:b3:db:ef:2a:4c:62:e8:
         67:af:ff:53:9a:b0:15:46:b9:ec:f0:9b:87:f3:06:3e:df:66:
         79:2d:53:c8:1b:7a:8b:69:a0:ec:34:72:0b:62:7e:22:1b:ed:
         0a:18:e0:b3:c8:40:fb:26:aa:4b:91:a3:e6:60:96:b1:f8:11:
         62:bf:b8:ef:66:4c:7e:8d:51:12:44:62:e9:69:d3:f4:c5:4f:
         24:2f:18:8b:2c:61:ae:4a:9d:3f:41:12:e8:81:17:a5:2d:54:
         b9:6b:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:03 2023 by rpki-client on console-fra.rpki-client.org