Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa
File:                     dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa (raw, json)
Hash identifier:          lBw2lnvzrCNohL2bCSlUm6I7f/meTmdQTlRjL3nPmbs=
Subject key identifier:   76:3F:69:A9:D0:9C:4D:4F:0E:1B:18:1C:08:4C:6A:AE:95:7B:56:AE
Certificate issuer:       /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial:       05785130
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa
Signing time:             Sat 01 Jan 2022 07:56:54 +0000
ROA not before:           Sat 01 Jan 2022 07:56:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8218
IP address blocks:        45.85.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91771184 (0x5785130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
        Validity
            Not Before: Jan  1 07:56:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=763f69a9d09c4d4f0e1b181c084c6aae957b56ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:54:2c:fa:bd:e5:ad:2d:32:3d:78:4f:47:
                    e0:21:43:30:df:0f:2a:ef:cc:69:cb:3e:b8:fb:15:
                    3e:16:61:e0:fb:cf:b4:fc:3d:2b:9d:af:2d:21:3d:
                    84:f3:ba:68:5d:06:88:53:9f:7b:a7:d9:f0:c4:34:
                    2d:d8:17:cd:3b:ee:89:4a:4e:1b:43:ed:da:03:69:
                    73:c8:45:cc:48:c1:61:4c:f6:66:47:13:ca:cb:e2:
                    97:b7:d5:5d:f3:9c:07:c7:1c:1d:6e:cd:c7:a0:04:
                    e2:8c:0a:24:bf:0e:b0:47:6d:90:f9:c1:7b:c9:58:
                    5f:9d:bb:24:41:80:33:51:39:9b:cc:29:96:44:f4:
                    da:17:64:71:b0:4c:89:3a:51:fd:97:99:7a:2a:83:
                    fc:77:68:e5:84:d6:06:6c:4d:24:c7:2e:f1:1e:71:
                    52:78:5f:b3:01:76:b6:e0:0b:e5:4d:96:41:95:38:
                    91:30:e9:f4:b1:6e:7f:15:04:63:40:b5:ce:41:4d:
                    ac:60:84:0d:7f:bb:a3:04:fc:dd:d3:95:45:d0:03:
                    62:bf:f4:b0:e5:42:91:f5:14:bf:6f:a4:c3:55:dd:
                    b6:a5:61:9a:b0:41:78:0c:0c:db:07:7d:a2:3e:3f:
                    48:9b:f9:17:da:c5:51:ba:f0:b5:7f:8a:5a:a3:65:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:69:A9:D0:9C:4D:4F:0E:1B:18:1C:08:4C:6A:AE:95:7B:56:AE
            X509v3 Authority Key Identifier:
                keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/dj9pqdCcTU8OGxgcCExqrpV7Vq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:16:09:da:bf:73:3a:54:d2:a8:14:d8:84:71:ad:ea:4e:
         84:37:f4:a3:a3:a7:3f:cd:e2:52:8c:7d:a8:9e:b1:49:aa:30:
         67:2e:4b:5d:db:2a:cb:ba:af:ef:8b:23:29:76:a5:f4:a7:4b:
         9a:ac:5e:32:e9:e8:1f:9f:82:fe:8b:8a:13:1b:2d:9f:29:0b:
         23:02:d8:8c:c0:da:de:09:cf:20:9e:e8:0d:d9:1e:bb:a3:31:
         ab:a9:26:01:61:87:70:26:68:bf:8b:90:46:54:78:5a:30:1c:
         dd:2e:58:18:d8:f8:d4:88:01:54:45:13:ea:2a:48:81:78:52:
         74:d7:84:ba:d1:3a:e6:68:c7:e6:9a:a9:10:f2:a1:44:88:00:
         7f:53:52:24:15:f5:7e:1d:87:e5:45:ca:00:9a:5d:14:83:62:
         13:63:ae:3a:60:fa:69:ef:59:12:a8:21:eb:62:77:72:f0:f0:
         8f:d1:a4:d6:00:b7:0e:7f:70:f7:90:38:38:27:5c:37:59:8b:
         92:4f:3f:1d:a0:d7:af:f4:68:4f:34:2d:5e:45:59:8b:69:4b:
         51:79:1a:b5:58:2a:ed:80:e3:19:f0:df:56:12:bd:75:01:0d:
         1f:a6:36:fb:ee:07:62:81:6c:74:d2:df:af:a7:b2:d6:38:20:
         79:d8:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:56 2023 by rpki-client on console-ams.rpki-client.org