Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/DjY_jJJUYJU27VJcW5jQByy6BjI.roa
File:                     DjY_jJJUYJU27VJcW5jQByy6BjI.roa (raw, json)
Hash identifier:          jeaHuxVcTO/3GLcGzPC1katv2K6JJS1TGDmFcQVBswI=
Subject key identifier:   0E:36:3F:8C:92:54:60:95:36:ED:52:5C:5B:98:D0:07:2C:BA:06:32
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       01831BCC1794E0ED567C6E2AE1E45D668E6B
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/DjY_jJJUYJU27VJcW5jQByy6BjI.roa
Signing time:             Thu 08 Sep 2022 06:31:43 +0000
ROA not before:           Thu 08 Sep 2022 06:31:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40123
IP address blocks:        83.126.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1b:cc:17:94:e0:ed:56:7c:6e:2a:e1:e4:5d:66:8e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Sep  8 06:31:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e363f8c9254609536ed525c5b98d0072cba0632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:f0:47:30:70:22:9c:14:f8:13:75:9e:aa:
                    e8:b6:62:5c:69:68:5c:d4:36:47:a9:d4:fd:01:27:
                    cd:cb:36:06:e8:f9:4e:3b:ed:24:65:e6:b4:a2:c3:
                    b1:0a:9a:0a:f4:85:ea:f4:0c:c4:0e:91:bc:fa:53:
                    49:4c:b2:5c:a3:92:1b:f4:95:17:40:14:3d:55:d5:
                    6b:2a:f4:b8:90:13:58:e4:cf:7b:52:49:ca:d9:77:
                    a8:8c:b1:ea:cb:c5:37:b7:87:86:54:8e:c8:f3:73:
                    a5:0e:7a:08:f0:82:14:58:7a:35:13:f7:e8:0f:ea:
                    78:02:75:eb:1f:d1:8d:ef:32:d1:5c:51:0f:85:6f:
                    6b:75:00:5f:d0:31:df:ec:1e:17:b8:b9:3d:2b:ca:
                    a4:09:0c:03:86:6b:12:b3:54:2c:e7:38:b2:fe:69:
                    a8:eb:07:c8:01:b5:be:c3:90:eb:69:24:08:91:1a:
                    a7:6a:5e:a0:35:51:48:75:bb:42:50:fb:4c:43:fc:
                    3d:f5:54:24:27:d1:e3:f8:05:20:2e:c3:42:d8:74:
                    e8:78:9d:0f:ac:bc:42:46:68:0d:9a:0b:1a:42:a1:
                    03:c9:b1:fe:e2:fe:20:51:14:34:43:db:c9:38:55:
                    70:36:f8:a4:48:37:ac:08:39:1c:20:de:65:bf:fb:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:36:3F:8C:92:54:60:95:36:ED:52:5C:5B:98:D0:07:2C:BA:06:32
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/DjY_jJJUYJU27VJcW5jQByy6BjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.126.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:97:f8:8f:30:d4:cf:e9:9a:4d:ae:79:53:35:c3:48:25:2b:
         ce:2f:07:28:ba:d0:a9:a7:cb:ab:c7:1a:52:e5:fe:b0:1b:81:
         12:c7:60:16:90:f1:9d:c5:21:f3:59:f0:94:d3:42:1e:9a:7e:
         73:a1:9a:ea:7b:ed:51:b9:c3:4c:4b:bc:02:ab:7f:f0:59:6e:
         76:43:e7:ee:fe:78:37:21:30:3f:c7:94:1d:2a:0f:75:2e:12:
         5d:ba:fa:4c:9d:6f:c6:17:49:54:72:22:58:7f:77:32:60:73:
         72:f7:3c:53:c0:28:12:3d:ed:53:06:6f:c8:d0:91:6c:5e:17:
         d2:c9:5a:4a:2c:4c:98:08:80:b2:c3:d9:ce:d9:91:ba:d2:d9:
         d2:24:bb:1d:31:f8:3a:8f:01:b2:46:5a:32:f9:d0:1a:9d:7a:
         26:bc:9d:4e:ec:56:61:e7:49:cd:d6:e5:13:b2:7f:6a:42:56:
         4f:72:eb:6a:1b:f8:2a:a7:87:55:f1:c7:71:42:1c:9e:6f:2c:
         23:17:e0:32:1d:4b:2d:e8:7b:d4:30:32:f8:44:99:e8:14:44:
         4e:ed:3c:d5:2f:a1:f3:a9:be:4e:6f:41:41:8d:d4:c4:2e:26:
         7c:bf:8c:8c:f2:1c:54:f2:26:da:9d:33:cb:95:8e:94:29:a7:
         dd:eb:01:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMbzBeU4O1WfG4q4eRdZo5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjIwOTA4MDYzMTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTM2M2Y4YzkyNTQ2MDk1MzZlZDUyNWM1Yjk4ZDAwNzJjYmEwNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofTwRzBwIpwU+BN1nqrotmJcaWhc
1DZHqdT9ASfNyzYG6PlOO+0kZea0osOxCpoK9IXq9AzEDpG8+lNJTLJco5Ib9JUX
QBQ9VdVrKvS4kBNY5M97UknK2XeojLHqy8U3t4eGVI7I83OlDnoI8IIUWHo1E/fo
D+p4AnXrH9GN7zLRXFEPhW9rdQBf0DHf7B4XuLk9K8qkCQwDhmsSs1Qs5ziy/mmo
6wfIAbW+w5DraSQIkRqnal6gNVFIdbtCUPtMQ/w99VQkJ9Hj+AUgLsNC2HToeJ0P
rLxCRmgNmgsaQqEDybH+4v4gURQ0Q9vJOFVwNvikSDesCDkcIN5lv/sLwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA42P4ySVGCVNu1SXFuY0AcsugYyMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvRGpZX2pKSlVZSlUyN1ZKY1c1alFCeXk2QmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU34RMA0G
CSqGSIb3DQEBCwUAA4IBAQCCl/iPMNTP6ZpNrnlTNcNIJSvOLwcoutCpp8urxxpS
5f6wG4ESx2AWkPGdxSHzWfCU00Iemn5zoZrqe+1RucNMS7wCq3/wWW52Q+fu/ng3
ITA/x5QdKg91LhJduvpMnW/GF0lUciJYf3cyYHNy9zxTwCgSPe1TBm/I0JFsXhfS
yVpKLEyYCICyw9nO2ZG60tnSJLsdMfg6jwGyRloy+dAanXomvJ1O7FZh50nN1uUT
sn9qQlZPcutqG/gqp4dV8cdxQhyebywjF+AyHUst6HvUMDL4RJnoFERO7TzVL6Hz
qb5Ob0FBjdTELiZ8v4yM8hxU8ibanTPLlY6UKafd6wH6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org