Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DoDzEJ79Xg-3dgPNpOjCj61I5kk.roa
File:                     DoDzEJ79Xg-3dgPNpOjCj61I5kk.roa (raw, json)
Hash identifier:          zDRdiLYi15LUt0hyv7UoLQN8pC4fNMs95NnyLIhKwvU=
Subject key identifier:   0E:80:F3:10:9E:FD:5E:0F:B7:76:03:CD:A4:E8:C2:8F:AD:48:E6:49
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       04EA0D8A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DoDzEJ79Xg-3dgPNpOjCj61I5kk.roa
Signing time:             Sun 03 Jul 2022 07:52:25 +0000
ROA not before:           Sun 03 Jul 2022 07:52:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        83.147.48.0/22 maxlen: 24
                          45.156.58.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82447754 (0x4ea0d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jul  3 07:52:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e80f3109efd5e0fb77603cda4e8c28fad48e649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cd:7a:33:2a:47:98:a1:65:8f:ea:85:9c:a6:
                    5f:82:cc:8e:3c:8d:d4:5d:2d:72:25:9f:b4:a0:e7:
                    2c:cd:ee:ae:8d:ea:ba:70:7f:b2:10:6d:3e:10:69:
                    ae:9c:49:dc:0f:0f:7b:cc:93:75:bb:86:98:e2:7c:
                    48:71:b4:04:27:98:3f:17:07:93:9a:89:80:8e:12:
                    37:2a:5a:84:8f:db:20:a0:2c:28:da:9e:ce:34:60:
                    a7:d5:bb:9a:ea:68:e8:8d:e5:4e:04:bf:b8:64:50:
                    2f:a4:b9:04:40:15:a9:50:d3:bd:e6:03:3c:ce:16:
                    0b:04:65:42:46:07:66:66:97:9d:68:88:1f:f6:40:
                    35:1f:7f:87:61:9d:a7:4b:17:c3:de:a2:74:11:43:
                    f0:87:44:33:ae:2e:70:76:ce:0d:c1:30:73:99:b1:
                    16:55:ea:ee:92:be:5e:e1:7e:15:e0:c1:e2:88:b8:
                    5a:73:b7:bb:fe:77:88:bf:30:b9:d8:79:94:ea:af:
                    f4:4e:29:c1:c1:ab:b8:a8:ce:db:f0:33:dd:d4:5f:
                    c1:42:10:23:5e:9b:54:22:17:81:c1:45:e8:b3:03:
                    e3:e2:b7:b5:dd:4c:e2:5a:7d:15:79:ab:5f:38:2f:
                    7f:b5:5b:c6:6c:5e:8c:59:c1:38:14:a2:ee:38:5a:
                    fd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:80:F3:10:9E:FD:5E:0F:B7:76:03:CD:A4:E8:C2:8F:AD:48:E6:49
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DoDzEJ79Xg-3dgPNpOjCj61I5kk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.58.0/23
                  83.147.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:34:c9:88:f2:27:28:7f:fa:11:e3:69:52:2c:a4:d5:65:
         62:02:2c:7f:71:d2:d3:d0:21:65:98:7e:54:29:8f:b2:b7:34:
         c5:a5:81:a9:fe:49:78:b2:da:f4:32:6c:e2:4e:9a:fc:08:8c:
         34:c8:69:5b:93:6c:6f:ac:44:b4:df:34:2a:67:05:26:d5:09:
         f3:12:96:12:7a:b8:66:c9:8f:89:e8:d4:52:b0:21:37:e3:57:
         c0:86:3c:c0:83:5c:50:b6:40:c0:d7:43:7c:e9:6c:46:fa:da:
         62:4d:8e:db:a5:9b:56:77:37:b6:a3:ae:20:f7:bd:25:d2:85:
         50:6a:ae:01:2e:c5:5b:6b:ce:ca:27:76:9b:dc:db:72:41:78:
         5a:9a:df:39:17:6f:98:39:3c:b3:93:70:a7:b2:77:0e:b3:6f:
         cc:b5:d1:37:51:46:d7:e2:f6:d8:79:b6:fc:11:d9:d3:c8:0e:
         f9:6c:74:a1:34:18:ab:51:b6:b2:88:20:48:c5:c9:59:0a:31:
         f2:88:f8:7e:14:6c:65:5d:77:ab:3d:fc:84:c6:64:1e:e2:3f:
         8a:69:71:13:c2:5d:eb:d3:1d:eb:5d:a1:f7:76:93:07:5a:2d:
         1a:96:88:0c:87:6c:d6:af:5c:2a:7c:b3:76:cd:f0:e4:85:13:
         af:9b:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org