Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/JjNEyX7EuONRfLFpoheJpJIX46M.roa
File:                     JjNEyX7EuONRfLFpoheJpJIX46M.roa (raw, json)
Hash identifier:          jgxK/9nZO9qGNaOXOPK4hysV0o6kPhfdARAoiAbHO2Y=
Subject key identifier:   26:33:44:C9:7E:C4:B8:E3:51:7C:B1:69:A2:17:89:A4:92:17:E3:A3
Certificate issuer:       /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial:       020EE385
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/JjNEyX7EuONRfLFpoheJpJIX46M.roa
Signing time:             Sat 11 Jun 2022 07:24:03 +0000
ROA not before:           Sat 11 Jun 2022 07:24:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48418
IP address blocks:        185.254.32.0/24 maxlen: 24
                          185.254.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34530181 (0x20ee385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
        Validity
            Not Before: Jun 11 07:24:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=263344c97ec4b8e3517cb169a21789a49217e3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:46:8a:31:bc:a5:cc:b3:c3:92:6a:30:56:
                    9d:64:71:64:09:8e:c1:7c:ee:03:b6:4e:58:30:0c:
                    b4:ed:84:ed:fb:63:90:0e:30:ba:35:47:a5:64:79:
                    3a:f2:9c:18:25:20:b8:98:6f:73:f3:52:e0:51:27:
                    00:26:bf:bb:fb:8c:51:fc:3a:6f:1c:43:ba:55:46:
                    ad:de:56:8a:31:68:5d:c3:8e:2b:fe:b5:db:7e:7a:
                    84:7d:0f:43:47:f4:85:95:0b:46:e3:57:26:1f:11:
                    09:78:e5:37:76:13:b2:63:da:f3:a0:ad:96:e5:4c:
                    b8:32:57:50:04:91:55:7f:2b:2c:62:50:e7:49:07:
                    37:db:02:d6:38:e2:3c:75:a4:61:79:17:d5:ab:c5:
                    bb:ad:52:51:e0:43:95:12:a6:ce:89:f7:0d:85:89:
                    ff:ee:47:03:11:68:39:f7:f5:00:be:9d:bb:24:22:
                    e9:a7:6d:09:5f:ab:0b:4b:27:98:86:c9:85:c2:e0:
                    31:47:e9:e8:ec:1f:b5:44:86:c5:68:dc:8f:ad:c1:
                    86:02:87:31:1e:61:92:bd:92:ad:b7:9e:8c:93:e1:
                    98:bc:46:8d:fe:3a:89:2a:bc:cf:5a:5f:a6:8c:da:
                    18:31:40:35:ec:94:fb:bc:b5:62:fe:9a:77:4c:54:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:44:C9:7E:C4:B8:E3:51:7C:B1:69:A2:17:89:A4:92:17:E3:A3
            X509v3 Authority Key Identifier:
                keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/JjNEyX7EuONRfLFpoheJpJIX46M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:62:0e:44:7b:d1:bd:c4:27:f7:6c:d8:af:f8:5a:05:c1:
         2d:ec:21:6b:7d:e3:95:07:d3:90:f2:65:b2:a3:32:fc:2a:b0:
         4d:b1:fa:57:ff:ff:a3:69:af:dc:18:d9:be:c7:80:50:29:e4:
         43:4a:a0:86:c9:cf:8e:67:26:92:68:56:be:d7:15:73:3d:2e:
         ab:f5:f6:9a:87:a3:35:a3:74:bf:e2:bb:0b:af:d4:42:db:a4:
         0d:65:6b:f2:44:54:d5:16:93:87:0b:c5:e5:33:d2:21:ea:44:
         0b:04:06:07:7f:5b:80:51:22:9f:bb:0c:31:48:64:7a:03:59:
         8d:66:e5:77:b5:a8:be:7f:a7:69:d3:65:e7:88:28:7d:2e:40:
         40:b4:d5:ea:74:67:76:ea:00:94:db:7d:49:a6:d6:2a:75:9e:
         05:52:01:6f:09:1a:cd:07:54:81:de:97:d8:15:8b:30:a8:c7:
         7b:70:3f:2b:ae:e4:c6:e5:72:94:d7:77:4f:67:d0:5c:b0:be:
         d5:8c:4a:92:ef:92:75:c8:c0:83:e7:08:3d:33:4e:c5:27:dd:
         53:b8:38:7a:46:a2:29:85:a5:cd:a7:55:ca:5f:4f:43:64:3e:
         3a:14:6a:c6:78:c6:99:fd:83:5a:a2:aa:7b:70:d1:68:09:bc:
         4c:bd:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net