Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/pVsghOuXshYZJk3ThSlZX0wlSxU.roa
File:                     pVsghOuXshYZJk3ThSlZX0wlSxU.roa (raw, json)
Hash identifier:          scPAMkdyfCx8bYBz4XfuThV2FEaRuY5LZveUTqaUPqE=
Subject key identifier:   A5:5B:20:84:EB:97:B2:16:19:26:4D:D3:85:29:59:5F:4C:25:4B:15
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       05162D81
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/pVsghOuXshYZJk3ThSlZX0wlSxU.roa
Signing time:             Thu 19 May 2022 10:53:29 +0000
ROA not before:           Thu 19 May 2022 10:53:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18046
IP address blocks:        212.30.40.0/22 maxlen: 22
                          45.94.52.0/22 maxlen: 22
                          212.30.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85339521 (0x5162d81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: May 19 10:53:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a55b2084eb97b21619264dd38529595f4c254b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:dd:40:5d:12:53:90:cd:86:34:0c:6c:d5:
                    72:72:fd:cc:4e:71:a4:46:ea:62:1f:43:d4:bf:80:
                    08:72:a9:3a:d1:cb:24:48:95:4a:08:e1:8f:39:0b:
                    f3:33:9c:ec:74:fa:4f:63:ae:fb:1f:6b:82:ba:28:
                    f0:21:85:b9:2a:e0:e5:da:01:a5:e6:53:cc:93:07:
                    4a:08:59:42:89:c4:f1:0e:2d:f1:ad:3f:b3:66:b7:
                    80:7a:9b:21:7e:9f:63:2c:0b:75:3e:18:31:1b:e4:
                    22:0f:94:f7:ca:14:d9:e9:37:9b:be:54:84:bc:d2:
                    cc:db:29:58:d9:c4:bb:2b:1b:f8:25:21:75:91:f0:
                    00:f9:32:0a:f8:58:8d:2c:1a:76:07:f1:98:f1:db:
                    8e:84:20:a7:81:25:61:0b:79:39:25:11:58:9e:62:
                    34:ad:7f:9d:1f:d0:92:88:d6:dd:9b:c3:1b:81:06:
                    21:71:21:cb:7f:7f:e9:04:8e:a2:23:54:8f:3a:2d:
                    f2:b8:0e:35:23:09:6c:1a:8d:5e:c3:f2:fc:fe:61:
                    84:28:30:f9:06:cb:1f:9f:d7:72:4c:b5:97:82:ad:
                    a7:4c:97:e2:e5:d9:ab:2f:0b:fa:df:1c:6a:f4:67:
                    4c:12:c4:3e:1b:36:17:fa:3a:d2:7d:76:2d:2d:8a:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5B:20:84:EB:97:B2:16:19:26:4D:D3:85:29:59:5F:4C:25:4B:15
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/pVsghOuXshYZJk3ThSlZX0wlSxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.52.0/22
                  212.30.40.0/22
                  212.30.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:45:fb:fd:f6:2e:f4:9a:26:1c:ed:e2:fe:13:d7:b9:3a:
         1d:2f:af:de:a5:9c:6f:ad:47:18:8d:c7:18:00:e6:8c:4a:12:
         34:ad:11:e2:18:c7:8e:29:f7:23:80:94:7c:9f:a2:be:b7:6b:
         10:c5:50:39:79:02:70:13:96:69:dd:dc:56:4b:80:2b:1b:c4:
         52:d6:09:5d:1c:1b:4a:0a:f5:2f:ac:78:6a:87:f9:c7:94:32:
         a7:1e:84:7e:49:1f:cf:7a:76:c3:f8:d5:96:c6:e6:1f:c4:01:
         42:36:7e:2b:27:d4:e2:fa:6d:6a:35:8f:6c:3a:9c:f8:82:63:
         eb:25:d0:ea:d9:09:f4:e9:1b:9a:cd:fe:62:a0:a3:1b:a0:1f:
         08:ea:2a:26:70:9c:5e:f9:21:f1:f1:c4:41:2d:d0:df:04:81:
         6b:63:83:4a:c9:2c:54:1a:92:04:3b:e4:48:0c:a7:8c:dd:2b:
         2d:94:dd:a5:1b:45:6d:a3:99:bc:58:65:d5:b0:ad:d9:0c:a3:
         9f:6e:3e:5c:35:e5:ea:66:3b:37:7f:e6:90:4e:2f:f7:a4:a1:
         b1:1b:ad:6c:d9:e2:0f:e3:fa:43:b6:0c:fb:d3:12:8e:9f:40:
         d3:b4:f1:0d:6d:95:34:54:25:f2:c5:55:f0:29:20:1a:1b:4a:
         ff:fa:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org