Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/tDXGP34BrKgO8wkoWUgSBbTx1vM.roa
File:                     tDXGP34BrKgO8wkoWUgSBbTx1vM.roa (raw, json)
Hash identifier:          sds1hYvbr+fzNF4hlgXVTHxyXEFEoTXALOAFJzKL54Q=
Subject key identifier:   B4:35:C6:3F:7E:01:AC:A8:0E:F3:09:28:59:48:12:05:B4:F1:D6:F3
Certificate issuer:       /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial:       01F4250A
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/tDXGP34BrKgO8wkoWUgSBbTx1vM.roa
Signing time:             Sat 01 Jan 2022 15:59:40 +0000
ROA not before:           Sat 01 Jan 2022 15:59:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        45.89.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32777482 (0x1f4250a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
        Validity
            Not Before: Jan  1 15:59:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b435c63f7e01aca80ef3092859481205b4f1d6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:35:52:c5:cb:7f:f6:88:f1:2f:9b:40:55:
                    33:c0:ae:4e:a0:0f:a6:93:36:64:2b:1c:34:b9:3b:
                    27:c0:eb:ef:27:02:07:ce:69:cd:39:d6:ab:b4:6d:
                    c4:67:05:3e:55:46:16:73:59:ca:b7:f5:c4:31:0b:
                    2d:ca:7e:17:7c:b4:dd:ac:8d:55:fd:d7:c3:d2:be:
                    40:dd:27:b7:ab:4e:d8:08:11:85:05:22:2d:58:f7:
                    eb:5b:15:ef:1d:9a:b7:17:e8:8b:fd:96:11:13:38:
                    78:97:1c:6a:01:77:0d:8f:22:ca:a6:16:02:f4:d5:
                    ff:d8:39:91:e4:ef:fb:93:c0:20:e5:d7:cb:ad:21:
                    a7:6f:bf:60:6d:74:88:b9:a4:52:17:46:f7:47:be:
                    5d:e7:71:ca:55:48:14:96:3b:68:51:95:31:f9:44:
                    e6:90:0c:cb:68:ab:4b:16:2e:f4:c9:7b:d5:6c:1b:
                    4b:7c:91:9f:af:5a:39:12:cb:4b:c7:39:77:6c:7b:
                    f6:f6:35:0b:79:43:67:be:66:84:0c:99:7d:6a:99:
                    b4:04:af:bd:43:7c:31:11:f0:9f:ef:e1:19:26:1b:
                    11:f9:d9:07:79:4f:14:89:32:8d:02:d1:c4:08:03:
                    09:9c:37:2a:a8:9f:48:2c:ac:2a:14:a9:a8:28:fd:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:35:C6:3F:7E:01:AC:A8:0E:F3:09:28:59:48:12:05:B4:F1:D6:F3
            X509v3 Authority Key Identifier:
                keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/tDXGP34BrKgO8wkoWUgSBbTx1vM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ff:dc:fe:7d:d5:c9:7c:5f:fe:ec:94:0d:fa:68:07:6e:00:
         31:6b:c9:04:e5:ae:5a:3d:50:9f:5e:82:be:83:f2:5d:7a:50:
         c7:11:17:a3:47:37:b7:05:2f:ca:ec:e9:a3:a3:d6:9f:40:90:
         59:5e:a4:2a:b6:a9:cd:ac:8e:ae:a1:6c:78:52:ab:fc:19:f2:
         a3:a5:c2:be:fb:70:c5:66:b8:20:a1:b7:13:f3:1b:f7:47:64:
         80:35:42:8f:37:3c:29:62:48:7d:84:43:93:a2:0d:76:dc:d0:
         87:ca:9f:d2:7d:85:8f:dd:b1:90:ce:ea:4e:67:9e:49:8b:2c:
         5c:96:b9:99:fe:fc:b7:4c:53:00:a3:61:c1:79:85:75:5e:a3:
         8c:aa:11:14:7b:d2:53:35:1a:5a:cf:a4:c0:04:b1:87:eb:9a:
         7f:cb:d9:17:26:0e:f7:17:fe:d1:d4:7a:91:df:18:ba:29:fc:
         a3:18:e3:b7:4b:ef:a5:14:bf:86:cd:c5:d2:45:16:92:37:18:
         1c:2f:b5:b1:cb:cc:b4:fb:b6:8e:00:a8:0b:c8:35:d7:5b:b2:
         f3:d6:c1:84:32:00:ea:91:89:cb:d9:ec:46:eb:c5:e8:a2:25:
         a0:50:29:2c:e2:42:3b:3f:ca:cd:81:2b:8f:bc:20:80:72:b0:
         4f:f8:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-fra.rpki-client.org