Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/wQcILVwb9PvBAjdJJ9Y_YOymSH0.roa
File:                     wQcILVwb9PvBAjdJJ9Y_YOymSH0.roa (raw, json)
Hash identifier:          MbLL5+8G2XmV2iWcE966LDMqQ0297lN4adY7Ii60Yxc=
Subject key identifier:   C1:07:08:2D:5C:1B:F4:FB:C1:02:37:49:27:D6:3F:60:EC:A6:48:7D
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       08F2A602
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/wQcILVwb9PvBAjdJJ9Y_YOymSH0.roa
Signing time:             Sat 01 Jan 2022 08:05:23 +0000
ROA not before:           Sat 01 Jan 2022 08:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198127
IP address blocks:        2a00:e200:104::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150119938 (0x8f2a602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 08:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c107082d5c1bf4fbc102374927d63f60eca6487d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:db:03:47:56:cc:9b:2b:ef:6a:84:a4:c2:
                    60:4e:ff:32:e0:8d:46:63:c8:3a:44:b1:1c:06:b3:
                    b3:41:73:4c:85:30:7d:40:01:ec:0b:db:0a:f5:2d:
                    9b:2c:4c:61:af:d4:72:49:ef:9e:6f:62:b0:ed:c0:
                    54:c3:16:1f:96:95:0f:6b:59:bf:59:71:cd:b9:5c:
                    74:69:d3:4a:3e:2c:c2:62:ae:0e:79:d8:bf:5b:d7:
                    80:ea:e7:18:d4:62:02:2e:09:25:dc:75:f6:ee:e5:
                    46:f2:18:2c:b5:e2:7b:a8:6d:ea:b1:08:07:51:8e:
                    27:b6:13:e2:53:c0:8d:a3:4c:e8:1c:5f:be:be:58:
                    a9:39:bf:53:5c:f2:76:de:4e:38:96:c5:05:87:4f:
                    c8:40:1f:b8:f9:f7:ad:6a:b2:13:5c:d6:c3:01:40:
                    e5:8b:e5:e3:4f:f5:33:c2:c9:63:27:5b:a7:7c:11:
                    a2:cd:c6:82:e1:29:9f:11:30:81:96:c7:38:66:f4:
                    59:d0:4d:fe:39:eb:de:6e:4f:1b:ba:72:cf:0c:55:
                    37:34:1b:11:22:5f:51:96:81:b1:d2:8b:bb:87:51:
                    e1:79:ac:e3:1a:0c:4c:8c:4e:ca:37:72:1c:c3:fe:
                    c9:1d:43:47:33:d9:03:fc:19:a2:07:cf:91:70:f4:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:07:08:2D:5C:1B:F4:FB:C1:02:37:49:27:D6:3F:60:EC:A6:48:7D
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/wQcILVwb9PvBAjdJJ9Y_YOymSH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:e200:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:28:2f:34:c2:df:19:e6:bb:08:6e:f5:82:25:f9:c1:b4:
         88:e7:17:af:d0:78:7e:60:61:ac:92:89:ed:3a:42:aa:bb:73:
         ab:a7:90:0f:eb:3e:ed:2d:87:42:d0:70:8c:89:10:15:80:07:
         70:c2:e1:5d:57:ea:a2:20:38:c5:da:58:f4:70:38:63:a8:5a:
         2d:a2:0f:4b:43:6a:35:c7:53:55:58:6d:2f:34:d0:01:16:94:
         ec:0c:fe:62:c0:9d:27:e8:e0:9e:a1:45:e6:7e:86:e5:c3:18:
         30:b0:9e:03:6a:7e:77:8c:6e:9f:4e:10:69:12:13:6a:4b:cc:
         93:a1:6b:8b:7c:01:7a:50:22:d1:97:d6:a6:a4:23:ad:7c:00:
         85:d4:7f:b3:4f:8e:c1:24:8b:d7:1c:6b:5f:48:00:4a:7c:d3:
         a0:ec:84:a8:8c:63:2b:ee:61:b3:f9:05:3b:53:80:a1:17:f4:
         8d:3a:aa:52:1d:b8:c4:10:d8:e9:7b:e8:ac:83:44:47:06:98:
         3a:94:0a:7f:e3:2f:e5:96:fc:25:27:df:ce:5d:d9:78:d4:83:
         e8:7b:bf:1d:6a:18:82:9d:ac:b7:0b:09:0f:58:54:c6:eb:56:
         bc:fa:3e:91:02:dc:3e:9b:a9:5a:21:41:ab:5f:0b:3b:a5:92:
         bb:a5:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org