Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0Wn-V15pOi17h7BCe5eYrv4JhDw.roa
File:                     0Wn-V15pOi17h7BCe5eYrv4JhDw.roa (raw, json)
Hash identifier:          XJOlRt5EnV3glFtHAw4Fi8jg+BOeepzzjU8wHiMjCDA=
Subject key identifier:   D1:69:FE:57:5E:69:3A:2D:7B:87:B0:42:7B:97:98:AE:FE:09:84:3C
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0787AF42
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0Wn-V15pOi17h7BCe5eYrv4JhDw.roa
Signing time:             Thu 13 Jan 2022 13:00:45 +0000
ROA not before:           Thu 13 Jan 2022 13:00:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212416
IP address blocks:        91.239.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126332738 (0x787af42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan 13 13:00:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d169fe575e693a2d7b87b0427b9798aefe09843c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:b7:0b:af:43:35:cd:4c:81:12:9a:4c:7c:
                    e8:fd:03:87:b4:d0:c6:ae:a8:09:ba:b0:4a:42:49:
                    cf:6f:af:08:08:8c:fc:89:cf:0f:86:ca:c6:9a:a7:
                    b6:29:37:6c:0d:2a:66:00:18:49:b9:fc:04:97:27:
                    d5:8c:86:4d:4b:42:7e:76:70:a8:1e:9c:11:98:f4:
                    8d:4e:2b:b0:32:83:8b:21:81:7a:65:ab:c1:bf:98:
                    40:70:52:42:41:a7:bb:fe:8b:b8:d8:12:1a:00:f3:
                    b4:2f:e1:f7:96:88:ce:46:96:26:6e:97:46:ca:58:
                    02:84:f0:cf:ae:db:de:61:17:ae:7e:16:20:07:ba:
                    78:99:5f:13:20:4c:10:4d:78:45:e0:8c:cc:e5:80:
                    ee:da:be:63:00:56:76:20:98:34:95:5c:d5:d4:75:
                    e2:11:7d:51:c5:ae:f1:34:8b:82:15:3b:a5:ce:69:
                    66:a5:2b:73:d3:3d:1e:db:39:8d:1f:d0:a6:f9:71:
                    32:01:b7:3b:ea:13:3e:bd:29:cd:0a:c2:93:07:3b:
                    98:ea:99:d0:1b:e9:c4:a7:e6:3f:75:c5:26:e8:42:
                    3c:f5:4d:2a:ab:16:6d:c1:43:91:cf:76:69:f7:56:
                    2f:d4:03:33:c7:69:5f:5f:8f:e1:eb:d6:1c:99:05:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:69:FE:57:5E:69:3A:2D:7B:87:B0:42:7B:97:98:AE:FE:09:84:3C
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/0Wn-V15pOi17h7BCe5eYrv4JhDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:17:21:fc:d5:c8:31:fc:f8:ad:58:de:5b:20:c3:05:35:63:
         5f:17:84:76:f2:42:5a:56:40:4d:b5:9c:00:4d:56:94:0b:59:
         32:a6:e4:e9:90:f2:be:4e:a6:31:71:dc:51:f1:4d:47:b4:45:
         4e:ed:8a:0d:44:14:71:1a:cd:23:76:19:29:89:20:df:ea:09:
         7b:2a:ac:61:87:d8:6d:1f:c5:0d:ad:2c:60:10:fa:71:26:8a:
         72:b3:88:57:70:62:e8:8b:5c:ce:0d:23:f9:0f:29:7a:0f:74:
         81:9d:57:c0:48:20:8a:e7:27:b0:d2:19:75:85:5d:9f:1a:45:
         8b:ee:46:01:71:9e:7c:84:d2:5e:a1:5c:b4:eb:6e:e3:9c:08:
         86:87:46:cf:33:27:63:d1:e3:87:fe:66:4e:5a:f1:4b:b5:c9:
         47:2f:4e:53:8a:9f:43:93:2d:c2:1e:e2:76:48:8d:a5:56:73:
         06:85:a2:99:77:ba:2e:a6:7b:ee:80:27:c9:15:a3:48:e5:34:
         34:81:d7:ef:94:a5:9e:c0:af:d6:3e:11:ba:2e:2d:3a:70:70:
         2e:7d:33:c3:17:5c:49:85:5a:35:33:b7:d7:98:b9:83:ab:3d:
         96:5d:d4:2e:73:ab:5d:b9:2c:dc:f5:28:7a:e4:b3:09:ce:09:
         27:fd:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-fra.rpki-client.org