Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/6-MhCRCfZ_cV1nC8gU8Ftzcg0aQ.roa
File:                     6-MhCRCfZ_cV1nC8gU8Ftzcg0aQ.roa (raw, json)
Hash identifier:          Adj+xAZaqqWWewO49R+Qiq3ME4xZfSb176vIaWKmJ7Y=
Subject key identifier:   EB:E3:21:09:10:9F:67:F7:15:D6:70:BC:81:4F:05:B7:37:20:D1:A4
Certificate issuer:       /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial:       41F90667
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/6-MhCRCfZ_cV1nC8gU8Ftzcg0aQ.roa
Signing time:             Thu 23 Jun 2022 13:59:50 +0000
ROA not before:           Thu 23 Jun 2022 13:59:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        195.105.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106839143 (0x41f90667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
        Validity
            Not Before: Jun 23 13:59:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebe32109109f67f715d670bc814f05b73720d1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:87:21:a8:7c:31:ff:6c:7e:0e:24:76:df:
                    58:bf:fb:5e:a5:cf:29:97:20:1c:93:3f:ee:76:31:
                    e6:d0:c3:2e:76:fa:14:95:da:b7:6c:22:0d:9d:95:
                    c1:a9:65:45:22:42:71:9e:e8:0a:7d:d5:c5:da:82:
                    93:e3:68:f6:1c:a6:22:72:a5:97:75:4f:63:1f:a9:
                    f3:37:6f:af:87:8d:f3:e0:a7:c7:6d:ac:b3:5a:34:
                    93:bc:a3:7b:28:9f:81:6b:08:6b:e4:c4:fd:c4:5b:
                    1e:27:de:a3:c5:e8:ff:85:1f:ca:a4:c8:db:0d:84:
                    77:ec:79:22:0a:7d:db:ab:16:a9:c5:17:de:2b:38:
                    76:ec:a8:b4:d1:e6:99:4f:c3:bc:cb:4f:18:4b:3c:
                    01:cb:b9:15:5a:2d:72:18:b2:86:2e:bc:62:4d:b6:
                    49:71:00:27:17:f2:36:51:1a:76:d8:08:ea:de:77:
                    23:9c:d0:b4:2d:cb:47:36:12:bf:45:92:92:38:30:
                    9b:e4:76:2d:c0:6c:07:d1:4f:f9:1b:fb:3d:92:9f:
                    75:97:ac:c4:0b:95:2f:94:b4:02:96:31:3d:d2:84:
                    03:83:93:64:7a:37:56:61:b1:62:98:f3:cc:87:0d:
                    a3:7e:df:ea:45:55:a9:c2:3c:98:3e:5b:de:4c:89:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E3:21:09:10:9F:67:F7:15:D6:70:BC:81:4F:05:B7:37:20:D1:A4
            X509v3 Authority Key Identifier:
                keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/6-MhCRCfZ_cV1nC8gU8Ftzcg0aQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.105.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:d7:fd:e8:8e:a5:9d:72:37:f8:8e:12:d1:a4:06:20:ca:
         75:71:13:10:1a:af:a4:54:bc:9e:ea:2b:a3:f5:c4:61:0c:c9:
         d9:4a:3b:ce:e6:4f:1c:b7:3c:5b:90:e0:50:6d:37:ab:26:bf:
         bb:ee:63:e2:df:9f:e0:4e:6e:34:50:c4:05:d0:a8:d6:79:35:
         1f:63:c7:3b:63:c1:46:cb:9b:12:de:fb:fd:6c:5a:b4:83:d8:
         fe:f8:d8:f5:ac:dd:50:06:57:5a:8f:28:49:e0:da:17:6b:94:
         1e:31:cd:1f:71:fb:7a:2d:bd:77:b9:f0:d3:6e:ea:1b:d7:d6:
         04:45:a4:40:07:44:f9:37:16:6e:e6:c8:a2:7a:eb:48:de:a4:
         c7:e5:d9:15:74:7c:26:eb:29:5a:0b:c8:c1:d1:aa:db:28:17:
         09:0d:7a:e2:8d:b1:35:b5:5e:39:97:1a:52:da:22:36:17:bc:
         1f:12:71:12:cb:fc:f8:a4:95:04:e9:3f:0f:ca:d6:c1:e9:1f:
         7d:85:ea:48:3d:d8:5d:97:5f:6a:bf:91:ce:4a:e7:51:65:52:
         41:f6:74:c3:ff:39:6e:fc:7d:b9:90:fb:81:c0:5a:9e:7e:73:
         11:76:7a:35:9e:37:15:1a:8e:48:cc:e8:54:72:2d:74:13:f8:
         86:f8:4b:be
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQfkGZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjFlYzE5NDEwNzg0Mzg0OGNkMzYzMzAyMzJiNWY2YTQzNzkxZGI0MB4XDTIyMDYy
MzEzNTk1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWJlMzIxMDkxMDlm
NjdmNzE1ZDY3MGJjODE0ZjA1YjczNzIwZDFhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALTPhyGofDH/bH4OJHbfWL/7XqXPKZcgHJM/7nYx5tDDLnb6
FJXat2wiDZ2VwallRSJCcZ7oCn3VxdqCk+No9hymInKll3VPYx+p8zdvr4eN8+Cn
x22ss1o0k7yjeyifgWsIa+TE/cRbHifeo8Xo/4UfyqTI2w2Ed+x5Igp926sWqcUX
3is4duyotNHmmU/DvMtPGEs8Acu5FVotchiyhi68Yk22SXEAJxfyNlEadtgI6t53
I5zQtC3LRzYSv0WSkjgwm+R2LcBsB9FP+Rv7PZKfdZesxAuVL5S0ApYxPdKEA4OT
ZHo3VmGxYpjzzIcNo37f6kVVqcI8mD5b3kyJUukCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTr4yEJEJ9n9xXWcLyBTwW3NyDRpDAfBgNVHSMEGDAWgBQyHsGUEHhDhIzT
YzAjK19qQ3kdtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01oN0JsQkI0UTRTTTAyTXdJeXRmYWtONUhiUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvZjE0NThmLWJkYzMtNGU0Yi05ZjY4LTNhNjExYzA5M2EyYy8x
LzYtTWhDUkNmWl9jVjFuQzhnVThGdHpjZzBhUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
ZjE0NThmLWJkYzMtNGU0Yi05ZjY4LTNhNjExYzA5M2EyYy8xL01oN0JsQkI0UTRT
TTAyTXdJeXRmYWtONUhiUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNpGjANBgkqhkiG9w0BAQsFAAOC
AQEAg9PX/eiOpZ1yN/iOEtGkBiDKdXETEBqvpFS8nuoro/XEYQzJ2Uo7zuZPHLc8
W5DgUG03qya/u+5j4t+f4E5uNFDEBdCo1nk1H2PHO2PBRsubEt77/WxatIPY/vjY
9azdUAZXWo8oSeDaF2uUHjHNH3H7ei29d7nw027qG9fWBEWkQAdE+TcWbubIonrr
SN6kx+XZFXR8JuspWgvIwdGq2ygXCQ164o2xNbVeOZcaUtoiNhe8HxJxEsv8+KSV
BOk/D8rWwekffYXqSD3YXZdfar+RzkrnUWVSQfZ0w/85bvx9uZD7gcBann5zEXZ6
NZ43FRqOSMzoVHItdBP4hvhLvg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-ams.rpki-client.org