Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/jUnM-ZPSLNMqUacOJygesgkhd8w.roa
File:                     jUnM-ZPSLNMqUacOJygesgkhd8w.roa (raw, json)
Hash identifier:          qCP7oaFwR0bwL+waGsl4NsFzOTuHpCouB7kociQ3cfo=
Subject key identifier:   8D:49:CC:F9:93:D2:2C:D3:2A:51:A7:0E:27:28:1E:B2:09:21:77:CC
Certificate issuer:       /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial:       09794E91
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/jUnM-ZPSLNMqUacOJygesgkhd8w.roa
Signing time:             Sun 26 Jun 2022 16:09:42 +0000
ROA not before:           Sun 26 Jun 2022 16:09:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51519
IP address blocks:        45.132.232.0/22 maxlen: 22
                          45.132.235.0/24 maxlen: 24
                          2a0e:73c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158944913 (0x9794e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
        Validity
            Not Before: Jun 26 16:09:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d49ccf993d22cd32a51a70e27281eb2092177cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:9d:cc:09:3f:2d:35:47:fa:df:6b:7e:79:
                    8f:34:c7:41:68:3f:10:a5:f9:2e:0d:ec:28:4c:d4:
                    8c:ba:bb:fc:2d:c5:c9:b9:55:dc:9e:0c:ec:4c:65:
                    d2:b6:12:d5:c9:b7:5d:21:d2:56:78:a6:3a:99:64:
                    4b:fb:61:f9:e7:1c:63:3a:56:ad:c6:94:ac:05:07:
                    9f:83:01:46:6c:a2:b7:33:be:31:ee:16:eb:24:99:
                    9f:10:f1:a8:96:38:5f:a6:1a:22:59:d4:26:ee:39:
                    e9:0b:6b:25:fd:10:58:14:05:79:2c:23:19:f3:4e:
                    01:73:b5:d9:f5:59:7a:9a:6e:12:1d:27:b0:09:9a:
                    3c:1e:63:45:fa:ec:08:aa:1e:dd:88:15:76:7c:83:
                    8e:b4:23:e0:11:6d:9e:89:0b:0f:83:b9:ea:60:f8:
                    c3:80:13:ab:18:52:ae:5a:89:3d:0f:2e:b0:d6:0e:
                    56:4a:34:f1:83:5c:eb:72:15:10:4d:a5:ad:5d:3d:
                    e8:fa:91:ea:bc:3a:8e:8f:d2:4f:f9:c6:8a:e3:93:
                    70:79:e1:4f:7c:f7:93:b9:36:85:4d:ca:c0:48:45:
                    e2:d0:59:97:41:08:69:f8:8b:5e:71:8d:a7:3e:d5:
                    8a:12:41:1b:5a:10:c3:45:eb:bc:e0:d8:49:2a:02:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:CC:F9:93:D2:2C:D3:2A:51:A7:0E:27:28:1E:B2:09:21:77:CC
            X509v3 Authority Key Identifier:
                keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/jUnM-ZPSLNMqUacOJygesgkhd8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.232.0/22
                IPv6:
                  2a0e:73c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:c4:a2:0d:c8:b5:4f:13:cc:9e:88:fb:9a:33:7e:a8:96:
         64:4d:31:69:02:e2:70:c7:a6:64:c0:e6:a7:6b:c2:77:b1:28:
         dc:87:12:3d:f4:2d:3c:71:7a:3c:56:85:a0:45:bc:60:66:25:
         97:b9:1f:a9:de:b5:14:46:f2:c9:b2:8b:fb:7b:4a:67:2d:de:
         a5:02:38:b8:a6:f9:59:2e:c9:14:5c:7f:ac:c8:6d:18:dc:8c:
         64:3c:b1:72:2e:d3:6f:48:6b:f2:c1:c4:d7:09:a5:3f:72:89:
         ec:c4:63:0c:34:60:a7:1d:a8:ea:c0:9c:c2:74:f2:b8:81:1e:
         32:b5:5d:bf:7a:35:25:75:8c:96:b8:e8:3b:a4:e4:36:a3:93:
         16:68:a7:66:e5:60:79:f3:77:e9:5d:52:fc:d1:1d:14:4a:15:
         f3:6b:f4:f6:44:5d:21:71:bf:cf:88:f8:92:4e:20:04:2a:59:
         1d:00:f4:3b:cc:13:2a:e9:90:fa:10:fe:b1:61:ea:28:92:a2:
         b6:e2:56:ac:2f:29:70:81:e0:91:b1:9c:b9:6f:01:b7:a5:0c:
         20:df:5b:ef:7b:30:bb:8d:ad:10:36:22:44:27:f4:ac:83:48:
         1a:6a:3f:1f:eb:f3:30:41:01:a4:bd:48:75:8e:3c:f6:d8:e5:
         d2:f5:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:58 2024 by rpki-client on console-ams.rpki-client.org