Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JzuJsNzfQxGTMIc6WYgZrtLaBDw.roa
File:                     JzuJsNzfQxGTMIc6WYgZrtLaBDw.roa (raw, json)
Hash identifier:          hRejvcB7O70PNepa5Vf0UeTTLksGh5Gxz/SCffiKuuw=
Subject key identifier:   27:3B:89:B0:DC:DF:43:11:93:30:87:3A:59:88:19:AE:D2:DA:04:3C
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       46B9
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JzuJsNzfQxGTMIc6WYgZrtLaBDw.roa
Signing time:             Tue 15 Feb 2022 12:19:26 +0000
ROA not before:           Tue 15 Feb 2022 12:19:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        194.110.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18105 (0x46b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Feb 15 12:19:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=273b89b0dcdf43119330873a598819aed2da043c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:5f:d8:92:02:92:f7:66:fb:36:69:a4:b9:
                    8a:57:c9:80:14:a8:5d:89:b1:ce:58:5a:2c:dc:d3:
                    dd:b1:a0:b4:4e:9b:74:ac:8d:96:09:02:49:a9:f8:
                    38:8e:8f:2e:7d:c0:77:05:5b:56:7b:6e:ad:88:c9:
                    15:25:07:16:c4:5f:4e:12:77:95:ba:5c:b7:aa:31:
                    18:3a:c6:6c:54:4f:34:b4:dc:62:58:87:53:43:b0:
                    8d:13:99:2c:ad:38:2a:09:ce:06:dd:19:b6:5e:97:
                    b6:5f:f3:23:19:f2:28:55:51:4a:1a:b8:81:17:2e:
                    3f:ad:f5:c0:ef:7d:a3:9f:e0:40:3a:d8:e2:e3:a1:
                    56:45:2c:b6:e3:85:71:56:8d:30:05:f7:26:3a:bd:
                    4e:db:70:47:f5:bf:ce:25:39:fa:4d:c3:a4:90:58:
                    ee:b1:dc:bb:84:ab:a5:da:37:d0:f2:3e:00:a0:58:
                    f1:80:8d:7a:33:0e:32:bb:44:6e:f1:b6:95:d4:1a:
                    62:a3:0f:11:19:ad:aa:0e:ff:23:fd:b4:35:b4:2c:
                    53:54:59:40:60:7b:5f:85:3d:ce:5f:31:06:4b:54:
                    be:9a:c9:4b:69:25:12:3c:79:74:bf:d0:ce:9f:b1:
                    d3:32:b4:67:7d:98:b1:a7:c5:92:f1:97:76:c6:3f:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3B:89:B0:DC:DF:43:11:93:30:87:3A:59:88:19:AE:D2:DA:04:3C
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JzuJsNzfQxGTMIc6WYgZrtLaBDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:00:88:16:c8:70:1e:60:38:e5:71:61:46:ae:6d:3f:3e:1a:
         3c:67:11:8d:aa:ec:f0:7f:ae:f0:d9:bf:4f:04:76:17:70:1d:
         d6:7e:b8:be:ed:f7:b3:52:f0:cd:67:6a:93:5f:19:e3:f0:44:
         3c:e7:7f:10:02:dd:17:c9:26:60:73:83:14:dc:71:3c:f6:5b:
         a6:2d:b2:e0:a9:57:ae:a4:07:a5:f8:22:16:b8:e6:0c:9c:4b:
         1a:b6:7d:51:ba:e3:df:34:b9:9b:76:92:52:43:c2:10:eb:26:
         12:3e:67:1a:5d:8b:cd:1f:c1:29:84:f7:5f:07:20:f9:60:22:
         1d:25:f8:72:c3:89:f3:62:83:46:c3:24:ad:de:a1:7f:5c:b6:
         c4:e7:4e:5b:e6:6a:44:1d:97:c0:d8:17:42:47:bd:01:d9:1a:
         96:77:66:c8:db:81:ad:1b:e7:05:32:ab:2b:f9:01:91:d5:7a:
         e9:26:eb:7b:cb:dd:b7:a0:25:50:5f:39:a6:05:a9:ce:61:cd:
         c7:3d:62:3f:d7:2f:a6:49:a8:74:f7:08:37:89:1b:d9:aa:a2:
         cb:0f:36:79:9a:f4:67:40:c4:d9:f9:3e:06:e2:db:41:ef:07:
         1b:59:7f:ba:90:50:70:89:e7:e8:23:b5:78:a1:e8:c3:5a:ab:
         10:4b:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org