Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/JUTUuxrptThBBgfaaIMckQj1fEQ.roa
File:                     JUTUuxrptThBBgfaaIMckQj1fEQ.roa (raw, json)
Hash identifier:          bDm1KMjaYeujMZimV63GDw5g+Y6ShxufPYx6J/GFGys=
Subject key identifier:   25:44:D4:BB:1A:E9:B5:38:41:06:07:DA:68:83:1C:91:08:F5:7C:44
Certificate issuer:       /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial:       0183304F8F9366CFDE4182065F62A86B9350
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/JUTUuxrptThBBgfaaIMckQj1fEQ.roa
Signing time:             Mon 12 Sep 2022 06:07:43 +0000
ROA not before:           Mon 12 Sep 2022 06:07:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50606
IP address blocks:        31.6.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:30:4f:8f:93:66:cf:de:41:82:06:5f:62:a8:6b:93:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
        Validity
            Not Before: Sep 12 06:07:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2544d4bb1ae9b538410607da68831c9108f57c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:22:94:6b:81:b8:55:b2:aa:af:6a:1c:6b:
                    1f:ea:2c:c7:30:48:12:66:b2:ad:64:0c:d5:42:2a:
                    42:19:d1:42:f4:6b:89:81:05:20:3b:84:ff:fb:19:
                    22:16:f2:66:0f:60:dc:cd:a7:fb:0d:bf:b6:04:25:
                    a2:d2:d8:19:c8:4e:e9:65:98:fe:9b:99:66:07:da:
                    3a:05:5b:0f:9c:f6:8d:b9:12:11:08:a2:8a:01:cc:
                    c2:0d:b2:f4:be:77:8b:55:22:de:38:c5:93:28:66:
                    e3:7a:ba:b5:b3:64:1e:b1:31:98:26:6d:45:c3:d9:
                    de:93:61:e7:24:e3:e2:6c:c9:20:57:80:69:44:fa:
                    82:38:11:9a:94:55:63:6c:c5:0f:14:85:f5:d4:e2:
                    42:8d:34:4a:c7:9c:2f:44:f1:ee:30:66:53:e5:4b:
                    3b:ec:8f:26:d6:8a:b7:6d:4f:80:c5:25:51:cc:73:
                    25:2b:36:99:7b:7f:d7:c9:2e:eb:83:e1:8a:4c:59:
                    be:1f:99:1e:fa:be:84:17:d6:0a:2d:9f:d5:32:0d:
                    9b:47:77:4f:d4:28:e5:3b:ac:e2:ac:6a:64:55:a6:
                    61:63:62:db:5f:90:71:6c:b8:72:a5:ac:2f:2c:95:
                    08:88:c8:62:db:60:1e:42:f8:6a:64:fc:95:7c:c5:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:44:D4:BB:1A:E9:B5:38:41:06:07:DA:68:83:1C:91:08:F5:7C:44
            X509v3 Authority Key Identifier:
                keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/JUTUuxrptThBBgfaaIMckQj1fEQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:1c:0e:71:a8:da:96:1b:cc:9f:3d:67:bd:6b:8d:5e:7c:
         2c:59:fe:31:8f:29:12:0d:75:80:a0:1d:26:2f:20:f2:e4:40:
         30:67:42:72:bd:50:fe:b9:8f:50:57:d1:04:76:48:8d:8f:3d:
         be:56:23:9f:14:1b:1f:77:9f:4e:db:df:5d:1e:4a:2f:df:95:
         77:ca:18:1a:a3:8b:46:8a:7b:1f:7c:dd:58:5b:c3:08:70:e6:
         1a:c8:64:1c:91:17:9f:49:ef:be:43:e3:4d:4f:8e:22:e4:65:
         06:2a:13:6f:07:62:c0:e7:e5:38:99:43:f2:d1:68:98:68:08:
         76:14:f8:7c:36:19:89:e3:2c:b8:37:06:d4:81:bf:bc:15:8b:
         90:6d:0a:8a:1a:63:1f:1a:99:04:3a:5f:51:5a:99:a0:ce:a9:
         63:5c:0f:04:6c:8d:cc:10:d0:fb:1b:11:c3:72:99:8b:67:f9:
         f1:12:32:10:96:96:1a:ad:86:87:67:a4:49:70:18:0d:06:22:
         41:e1:68:77:6e:7e:14:10:2e:25:56:49:bd:e9:f7:ef:fa:58:
         44:21:15:cc:36:0f:8c:de:0d:51:ba:df:ad:f7:97:73:6d:bb:
         e5:bb:b6:df:73:b5:95:86:47:cf:0d:2d:0a:09:6d:25:35:21:
         ad:95:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org