Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Lu_JNoNRoadEdZRlyf9fs73hh1Y.roa
File:                     Lu_JNoNRoadEdZRlyf9fs73hh1Y.roa (raw, json)
Hash identifier:          EDikD6f6OHvOX743RmP0flfFlV0DtZicATAVQns7C2Y=
Subject key identifier:   2E:EF:C9:36:83:51:A1:A7:44:75:94:65:C9:FF:5F:B3:BD:E1:87:56
Certificate issuer:       /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial:       0554DCCF
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Lu_JNoNRoadEdZRlyf9fs73hh1Y.roa
Signing time:             Sat 01 Jan 2022 06:56:05 +0000
ROA not before:           Sat 01 Jan 2022 06:56:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138195
IP address blocks:        45.94.68.0/22 maxlen: 24
                          45.154.12.0/22 maxlen: 24
                          45.141.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89447631 (0x554dccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
        Validity
            Not Before: Jan  1 06:56:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2eefc9368351a1a744759465c9ff5fb3bde18756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:e7:5e:d0:0e:0d:4f:4b:3c:e9:85:e7:ff:
                    86:a0:94:46:39:f9:09:7c:8f:bf:a9:de:ee:6b:61:
                    a4:b2:41:bc:45:94:27:44:6c:c2:20:97:9f:02:31:
                    08:f1:2c:16:e3:f0:2e:79:25:8a:bc:69:18:a4:0b:
                    d0:da:6d:24:3b:e9:e4:33:26:f3:c1:7b:8d:a6:78:
                    e7:c6:ef:0a:e1:e9:cf:dc:35:4c:24:bc:be:0c:5e:
                    17:23:ef:07:8f:a3:fd:3a:59:01:c4:7a:77:9b:a7:
                    ca:96:e2:18:d8:74:7b:fd:d2:bd:2a:9d:7a:96:5d:
                    18:23:fc:33:7d:a0:78:de:42:dc:c4:79:ba:aa:25:
                    09:78:35:7b:4d:11:68:67:bf:c0:7f:15:b9:52:49:
                    26:fe:07:e5:c9:17:94:2d:e0:84:0c:f0:69:a9:09:
                    f2:12:c3:e3:98:30:52:d8:24:9d:e7:21:4e:96:19:
                    c4:49:78:95:45:a3:d2:36:20:91:71:42:01:ee:84:
                    c5:e2:27:6d:f2:58:b5:5f:6d:8d:ad:37:05:db:0c:
                    6a:69:a3:e5:82:94:73:7c:d7:2a:c9:a4:4f:9b:9b:
                    70:59:88:0c:35:74:19:89:07:06:51:c5:57:c2:06:
                    05:4b:64:39:b6:ef:42:c1:9f:be:e7:eb:e4:46:13:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:C9:36:83:51:A1:A7:44:75:94:65:C9:FF:5F:B3:BD:E1:87:56
            X509v3 Authority Key Identifier:
                keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Lu_JNoNRoadEdZRlyf9fs73hh1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.68.0/22
                  45.141.136.0/22
                  45.154.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:0c:e1:48:ce:56:59:e3:ba:08:83:84:24:5c:c5:93:fb:
         a6:d7:65:5b:48:ff:9d:6f:be:e5:69:02:21:6f:83:00:7b:98:
         2f:79:0b:b6:41:d6:c3:60:b0:6e:82:58:bc:1c:dd:ec:f5:97:
         6b:cc:fc:92:fc:42:b1:a3:aa:66:89:ea:c6:6c:46:c1:2d:53:
         36:b8:9e:a3:f6:b2:63:b1:6a:7b:be:02:bf:f6:b0:58:92:a4:
         1e:b3:38:8e:ce:b1:46:93:52:4c:9f:12:29:50:e7:74:8e:f3:
         9f:95:cb:75:db:41:bc:cc:7e:28:40:30:0b:05:76:f0:87:44:
         37:cd:dd:dc:c3:42:0f:90:db:52:37:c9:36:ae:03:63:09:27:
         6c:3e:92:fc:79:5a:65:8a:a1:61:3c:a5:bd:d6:f0:78:a5:29:
         d6:23:76:4e:c6:a9:83:65:62:fb:c3:66:75:f7:01:d1:c6:96:
         e7:33:85:62:87:e4:31:6b:fe:8b:ac:5a:b2:e3:ae:33:0d:95:
         4b:91:d8:94:c1:a0:3a:f3:98:6a:5c:15:a0:89:be:d4:9d:09:
         48:30:59:82:a9:4c:55:c4:a0:ed:ae:4f:55:c1:e9:43:b5:ea:
         e2:85:72:15:9b:6b:a0:2e:14:80:c5:9f:08:91:9c:03:ff:7f:
         31:9b:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:57 2023 by rpki-client on console-ams.rpki-client.org