Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/JNU_Ul7YhhSlIn2dQxNnCwwz1No.roa
File:                     JNU_Ul7YhhSlIn2dQxNnCwwz1No.roa (raw, json)
Hash identifier:          Ex8gFsIKOWm3g9GWIDDKdd1kRR7ORopbr13+kwXuQhA=
Subject key identifier:   24:D5:3F:52:5E:D8:86:14:A5:22:7D:9D:43:13:67:0B:0C:33:D4:DA
Certificate issuer:       /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial:       087A0C7A
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/JNU_Ul7YhhSlIn2dQxNnCwwz1No.roa
Signing time:             Wed 02 Feb 2022 15:03:48 +0000
ROA not before:           Wed 02 Feb 2022 15:03:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48814
IP address blocks:        45.94.148.0/24 maxlen: 24
                          45.94.151.0/24 maxlen: 24
                          45.94.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142216314 (0x87a0c7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
        Validity
            Not Before: Feb  2 15:03:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24d53f525ed88614a5227d9d4313670b0c33d4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:01:d1:40:c9:0b:28:3d:6c:6b:f4:c0:e5:
                    99:b9:37:8b:f2:68:57:75:c6:77:26:e3:c1:f3:10:
                    a6:89:f1:da:aa:ce:4d:f9:7d:96:8f:9e:78:d1:48:
                    27:f7:2d:e9:d0:ca:01:b4:d7:80:4e:5b:93:c6:ec:
                    55:c9:5f:29:07:28:19:ac:db:ae:f0:4d:b8:6f:1c:
                    ba:3b:12:ff:a6:ea:44:ab:e4:52:0c:29:77:3c:72:
                    84:45:bb:39:28:9d:7e:26:c8:9b:27:3c:36:49:cf:
                    e8:2b:28:db:2c:97:ad:4f:d6:b5:6a:bf:31:03:71:
                    a0:de:22:83:35:47:c7:96:62:be:f2:3b:18:99:cf:
                    3c:06:a5:e0:46:bc:d2:df:1f:49:af:ef:1d:e0:11:
                    2f:ea:a1:e0:6c:5e:59:3a:36:23:ea:91:78:56:0e:
                    4e:d4:09:90:37:0e:e7:00:89:14:2c:9a:5e:3d:ac:
                    e1:41:e4:15:4c:59:4b:4f:fb:4e:18:be:e1:26:09:
                    94:6c:17:75:0d:68:ae:ec:d1:ec:04:e6:dd:6c:85:
                    81:69:31:c4:bf:ca:7c:74:81:0e:3e:1b:c0:f2:cc:
                    47:31:cf:81:ab:0a:a2:c1:18:57:d3:b0:39:a4:b4:
                    77:0d:6f:8e:ec:0d:7e:83:bf:f7:ba:c9:7e:9b:fb:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D5:3F:52:5E:D8:86:14:A5:22:7D:9D:43:13:67:0B:0C:33:D4:DA
            X509v3 Authority Key Identifier:
                keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/JNU_Ul7YhhSlIn2dQxNnCwwz1No.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.148.0/23
                  45.94.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:95:b3:81:b1:38:c8:cb:56:bb:f8:a3:03:46:c6:69:b5:da:
         44:23:5c:cd:e3:c2:66:72:ad:55:28:9f:09:be:e5:39:22:ee:
         5d:e2:46:58:d1:6e:4a:1a:79:ec:0d:f5:71:79:14:53:18:9f:
         f3:fb:89:9b:d3:e4:21:12:72:97:03:39:ae:dd:c4:6e:fe:b1:
         74:d0:85:b0:9e:5f:f8:b3:76:f8:e1:a9:c2:23:7e:3d:9d:2e:
         ee:3d:a5:38:e5:83:d9:cf:eb:b4:bc:19:77:88:f3:81:1a:ea:
         53:b9:f8:8b:99:d0:f9:2e:fa:6a:46:25:08:b4:ab:4f:03:33:
         13:4b:3f:ba:49:7a:9f:3d:10:01:72:56:04:3a:d2:56:cb:c4:
         ee:98:2a:75:e4:c4:b3:1c:29:df:3c:c4:f5:2f:c5:bf:83:dd:
         a1:3a:77:ae:5f:cb:6e:58:76:39:1b:42:1f:70:4d:08:4c:4c:
         44:32:9b:36:34:7a:6c:38:7e:0a:3b:3b:cd:08:5a:63:46:6b:
         1d:f9:cb:b5:87:0c:3d:ca:c6:bd:62:28:a8:57:88:3c:9f:b2:
         1e:84:20:64:e3:79:86:82:a8:c0:d1:03:ec:70:c5:43:2d:d4:
         e6:27:06:e6:4d:9d:a0:84:6b:06:1b:0e:75:19:db:6a:30:32:
         48:e5:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:30 2023 by rpki-client on console-ams.rpki-client.org