Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/j9M6kGzwYgxifez_wp_Uk3wPFoU.roa
File:                     j9M6kGzwYgxifez_wp_Uk3wPFoU.roa (raw, json)
Hash identifier:          eU/xi7dg/5tt00nZskxRJkqS3mRlm2E2U4YhTHDsUBk=
Subject key identifier:   8F:D3:3A:90:6C:F0:62:0C:62:7D:EC:FF:C2:9F:D4:93:7C:0F:16:85
Certificate issuer:       /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial:       080870B4
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/j9M6kGzwYgxifez_wp_Uk3wPFoU.roa
Signing time:             Wed 23 Feb 2022 09:39:45 +0000
ROA not before:           Wed 23 Feb 2022 09:39:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62579
IP address blocks:        45.150.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134770868 (0x80870b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
        Validity
            Not Before: Feb 23 09:39:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fd33a906cf0620c627decffc29fd4937c0f1685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:bd:82:27:bb:07:4c:0a:be:d5:d4:27:2f:
                    20:a0:f6:38:f4:56:41:49:f5:58:e2:55:da:1d:a4:
                    69:b8:cb:d8:bf:79:f2:dd:a4:07:25:50:e6:e9:97:
                    ec:b9:95:9f:cc:94:a4:2d:af:ef:01:7f:cd:c1:a6:
                    b5:3a:1f:ab:f0:33:43:c9:6e:3d:51:12:3a:69:40:
                    0c:d0:fb:8d:b8:0d:dc:32:96:f2:40:4a:47:06:6f:
                    11:88:ea:bd:1d:f0:fe:b3:b1:14:f4:05:42:6e:f7:
                    71:69:11:b9:ce:6a:b6:17:1d:56:78:6b:27:93:4d:
                    9c:fb:f7:18:44:59:67:49:ae:ed:f5:e6:c3:40:10:
                    af:f6:7d:af:c5:37:68:59:b1:7d:98:d6:20:29:08:
                    67:ea:a5:23:90:56:ae:16:cc:f3:cc:90:cb:8e:16:
                    1e:b8:0f:3e:03:71:5d:f1:a2:0a:51:a8:71:fa:51:
                    8c:2f:a0:d8:fc:80:54:03:de:c5:8b:a6:e8:32:12:
                    88:24:21:a3:c2:40:fe:aa:71:ec:1e:58:19:13:5b:
                    66:36:6f:63:82:c1:fa:b1:a7:f9:ba:71:d5:60:2b:
                    a4:cc:c5:c4:a0:55:a8:11:7b:28:62:9b:d5:89:5a:
                    00:88:fe:f0:70:89:52:15:3f:c2:9f:39:46:98:9e:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D3:3A:90:6C:F0:62:0C:62:7D:EC:FF:C2:9F:D4:93:7C:0F:16:85
            X509v3 Authority Key Identifier:
                keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/j9M6kGzwYgxifez_wp_Uk3wPFoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:91:86:56:23:be:d2:1a:cd:a1:75:24:ce:89:a2:0f:d1:
         70:ab:d6:d0:f1:44:2a:3d:38:86:55:00:72:d8:24:22:37:2e:
         a3:a2:9d:2e:3c:19:0b:11:da:10:95:86:75:9a:d4:01:9a:e0:
         24:3d:3b:9b:0a:a2:38:8e:b7:83:68:1c:9a:25:85:30:09:0f:
         e0:1e:41:3f:d0:5f:7c:39:f7:82:f6:68:43:95:fa:30:04:eb:
         03:50:09:58:e3:dd:e8:87:b9:5b:7e:8e:ca:f9:4c:64:f2:b1:
         b5:d8:f5:61:59:de:1a:dd:a4:21:1c:e7:bd:66:0f:fc:39:ad:
         37:ad:b0:5f:59:47:61:6a:26:f5:a8:9f:38:fa:50:c0:36:a4:
         89:6f:93:a1:b6:50:f2:3d:e6:ee:f3:4c:be:f4:e7:d3:4e:95:
         19:35:d3:76:8d:2a:f2:55:ad:1a:dc:2e:a6:24:1a:25:0a:27:
         97:f8:95:f8:c4:52:8d:47:a3:c6:d7:29:ea:ad:a9:be:56:0a:
         9f:4d:20:ff:d1:74:b7:84:64:7c:2e:f1:ea:b2:29:2a:6b:3e:
         23:c8:2e:51:15:41:f2:ec:d8:7e:82:5f:c4:e3:19:7d:af:ae:
         c2:81:70:78:48:f6:83:a7:d4:43:82:c2:7d:f9:1f:f9:62:b3:
         31:b1:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org