Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/pj-tsUZbeKooLNWFRoBEk2WXyzs.roa
File:                     pj-tsUZbeKooLNWFRoBEk2WXyzs.roa (raw, json)
Hash identifier:          RDeYAhMEz+zAmQj5i1d+OVQ8/uZ3PN5dmzRDwWOqnKs=
Subject key identifier:   A6:3F:AD:B1:46:5B:78:AA:28:2C:D5:85:46:80:44:93:65:97:CB:3B
Certificate issuer:       /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial:       081E677B
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/pj-tsUZbeKooLNWFRoBEk2WXyzs.roa
Signing time:             Sat 01 Jan 2022 14:58:17 +0000
ROA not before:           Sat 01 Jan 2022 14:58:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208609
IP address blocks:        45.92.68.0/23 maxlen: 23
                          45.92.69.0/24 maxlen: 24
                          45.92.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136210299 (0x81e677b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
        Validity
            Not Before: Jan  1 14:58:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a63fadb1465b78aa282cd585468044936597cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:05:2f:88:85:42:67:05:20:2a:9e:15:4f:
                    4e:2c:66:7b:68:1d:70:fe:45:28:e6:c0:bd:82:de:
                    d4:74:08:7b:63:57:92:78:f6:2f:28:b7:2b:f9:0a:
                    d4:5a:1f:ae:e1:81:1f:0f:2a:88:bd:8c:e5:f1:b4:
                    e5:6f:53:87:8c:7d:1e:c2:ee:0c:36:95:d5:f5:db:
                    44:ea:99:2f:84:70:50:3b:a6:80:2d:e6:d4:cb:e2:
                    06:f0:2d:2e:0e:ee:56:f5:75:0b:ec:3a:0f:fb:5a:
                    da:5c:b8:63:a4:50:d0:0b:40:6f:9a:93:25:54:f4:
                    63:80:76:f7:28:3a:1c:28:6d:31:4f:e5:ff:07:c6:
                    a0:da:dd:75:68:93:64:b9:ae:5a:6a:89:76:d7:06:
                    3f:15:7e:7c:87:da:b3:ee:23:e5:37:07:3c:a5:86:
                    e1:68:8b:a3:0a:06:e3:3a:fe:fc:33:1c:52:ac:00:
                    e6:02:63:3c:b1:f6:71:d2:e2:27:eb:55:17:9d:c7:
                    45:93:6e:ad:8f:a5:43:94:42:04:af:32:40:b8:97:
                    48:ec:85:39:76:f3:94:53:d7:bd:74:d8:2a:d4:f4:
                    6d:63:e8:99:8d:e6:e8:9d:c2:76:1e:bb:2f:02:30:
                    47:a3:e3:3c:87:1e:12:e4:73:3e:ae:fd:c7:a1:cc:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:AD:B1:46:5B:78:AA:28:2C:D5:85:46:80:44:93:65:97:CB:3B
            X509v3 Authority Key Identifier:
                keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/pj-tsUZbeKooLNWFRoBEk2WXyzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:47:1f:e9:04:f1:56:98:20:3b:34:71:1d:6d:80:4d:e9:
         7c:4a:07:e4:8a:d4:b1:34:1b:d7:6c:2c:d5:4a:b9:ea:ff:f4:
         86:2f:3e:37:63:73:6a:a8:f4:cd:e6:c5:c8:f4:bf:76:73:5a:
         8c:f1:59:0d:37:b1:d7:e6:1c:88:48:26:6f:14:2b:2a:32:13:
         a4:6d:74:53:ed:2b:91:9b:10:0f:82:75:9c:e1:18:09:61:6a:
         db:04:51:a9:6c:75:64:b1:59:19:34:8b:12:b8:67:00:cb:4e:
         51:aa:ab:aa:aa:fd:5d:e0:4f:0e:22:39:ce:e7:80:db:32:a0:
         58:1b:5e:7c:aa:b5:f5:fd:7a:44:fe:ad:22:a1:3e:53:79:4b:
         0a:31:9d:28:27:61:90:77:a0:9d:aa:07:97:9f:7a:a1:37:12:
         59:18:94:4d:cd:04:a1:6b:0e:49:ab:d8:25:2b:f2:52:ac:61:
         b5:ca:3c:ca:f4:a1:b9:4d:d3:dc:b8:b8:6b:8d:73:66:81:55:
         ee:6e:cb:69:5d:8c:d4:9c:ab:91:48:8c:5d:bc:74:80:59:27:
         67:7f:3d:95:fe:31:57:77:b4:43:74:43:df:c1:98:a5:88:17:
         ad:1d:e2:60:12:e0:c5:45:5c:ef:78:ed:ee:f1:84:e0:84:55:
         61:85:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:41 2023 by rpki-client on console-fra.rpki-client.org