Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EyMSuODNOFrq-Ecjef_nnvqHR0k.roa
File:                     EyMSuODNOFrq-Ecjef_nnvqHR0k.roa (raw, json)
Hash identifier:          7LME+7DeN/dcuQsuf2AGDpF2Yqz3xw+QCHpG7bAbOEM=
Subject key identifier:   13:23:12:B8:E0:CD:38:5A:EA:F8:47:23:79:FF:E7:9E:FA:87:47:49
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       07FFF034
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EyMSuODNOFrq-Ecjef_nnvqHR0k.roa
Signing time:             Wed 02 Mar 2022 16:37:10 +0000
ROA not before:           Wed 02 Mar 2022 16:37:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     27630
IP address blocks:        91.239.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134213684 (0x7fff034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Mar  2 16:37:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=132312b8e0cd385aeaf8472379ffe79efa874749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:81:e6:4f:90:e7:a7:6f:b3:08:48:ca:08:
                    57:1f:24:c9:95:80:db:f4:80:a8:d6:b2:1f:39:be:
                    b1:62:a9:e6:e9:11:8e:39:28:87:bb:a0:cd:5a:a9:
                    fd:31:20:b3:4d:f9:e4:20:6d:31:c7:55:4b:9c:5f:
                    3c:74:c9:9c:68:a5:38:2b:61:2b:12:b3:29:82:85:
                    e2:b8:b5:84:cc:7e:c3:58:ed:f9:e4:eb:b5:50:10:
                    38:58:d0:c2:df:c5:d5:72:80:a5:8f:db:a6:6f:ba:
                    54:81:85:5a:f2:88:50:61:44:7d:dc:9e:98:9a:99:
                    a0:14:fb:e8:49:5d:7f:d3:ef:9b:fb:2a:62:2a:35:
                    0d:4c:45:18:c0:a4:7d:07:3c:40:72:8c:8d:2d:83:
                    75:73:73:4f:e6:d4:58:22:bf:bc:02:2b:0a:46:1d:
                    3c:d4:6a:55:9f:bc:c4:2f:8f:42:26:8f:b3:9d:40:
                    21:69:38:8a:7f:f4:b4:31:57:0d:a7:23:71:ba:f7:
                    e5:5e:24:a7:00:e0:7d:d6:19:32:fe:3c:e8:46:6f:
                    08:8d:b7:58:0e:4c:c6:26:08:e8:1e:4e:51:42:11:
                    b0:ce:50:6c:c2:fa:ec:c7:78:32:fe:6f:6d:0d:f6:
                    74:95:0d:a2:da:91:5b:2c:ff:58:a2:dd:72:40:4f:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:23:12:B8:E0:CD:38:5A:EA:F8:47:23:79:FF:E7:9E:FA:87:47:49
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EyMSuODNOFrq-Ecjef_nnvqHR0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:e5:f5:dc:93:8c:ad:b8:32:3a:f8:a0:8c:e6:55:0f:c7:
         e9:d6:99:4d:2a:ba:08:19:4b:a1:6d:59:3f:ef:8d:fe:8c:ee:
         c1:7a:49:ec:8a:2d:f6:46:36:3d:ef:9a:d9:5d:d6:d4:82:33:
         1a:83:1a:82:7e:cd:1f:52:06:ed:f5:23:e3:e9:ee:6c:f1:1e:
         c8:b7:ab:5a:d8:a8:97:20:a6:45:ae:4a:f7:b2:fa:69:0d:96:
         b2:c5:f8:43:b9:ce:7e:5a:bf:2c:fa:a2:b2:48:c4:af:a2:e1:
         04:b6:99:5a:8a:82:81:21:1b:eb:9e:7b:ac:10:0c:f3:2b:0d:
         c1:eb:f5:92:36:60:df:26:28:69:7e:eb:d0:31:c2:43:26:9e:
         76:f5:33:b5:15:3b:42:18:2b:ca:3c:de:36:bf:62:b4:e6:d7:
         3c:b3:72:56:fe:7d:60:a4:17:9c:f8:cc:e9:80:f0:d6:e1:22:
         38:10:fd:4a:9e:6b:de:76:4d:89:ae:2e:9c:2c:06:31:14:93:
         a5:c7:53:c2:97:53:75:d3:59:ad:6a:de:22:b9:1b:4f:c5:64:
         d4:37:36:57:3d:90:64:fc:16:3b:95:31:e6:94:ad:98:08:9c:
         2d:d1:72:b4:ae:ee:31:5f:e0:d8:47:85:f1:48:6e:a5:c5:b8:
         73:dd:45:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB//wNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjBjMGQwNDIyNTU2NmRiOTVlOWFkM2IyZWY2MDUwMTQ5NzVhYWEyMB4XDTIyMDMw
MjE2MzcxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTMyMzEyYjhlMGNk
Mzg1YWVhZjg0NzIzNzlmZmU3OWVmYTg3NDc0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPRgeZPkOenb7MISMoIVx8kyZWA2/SAqNayHzm+sWKp5ukR
jjkoh7ugzVqp/TEgs0355CBtMcdVS5xfPHTJnGilOCthKxKzKYKF4ri1hMx+w1jt
+eTrtVAQOFjQwt/F1XKApY/bpm+6VIGFWvKIUGFEfdyemJqZoBT76Eldf9Pvm/sq
Yio1DUxFGMCkfQc8QHKMjS2DdXNzT+bUWCK/vAIrCkYdPNRqVZ+8xC+PQiaPs51A
IWk4in/0tDFXDacjcbr35V4kpwDgfdYZMv486EZvCI23WA5MxiYI6B5OUUIRsM5Q
bML67Md4Mv5vbQ32dJUNotqRWyz/WKLdckBP23sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQTIxK44M04Wur4RyN5/+ee+odHSTAfBgNVHSMEGDAWgBSbDA0EIlVm25Xp
rTsu9gUBSXWqojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L213d05CQ0pWWnR1VjZhMDdMdllGQVVsMXFxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvMGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8x
L0V5TVN1T0ROT0ZycS1FY2plZl9ubnZxSFIway5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
MGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8xL213d05CQ0pWWnR1
VjZhMDdMdllGQVVsMXFxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvvlDANBgkqhkiG9w0BAQsFAAOC
AQEAZ8fl9dyTjK24Mjr4oIzmVQ/H6daZTSq6CBlLoW1ZP++N/ozuwXpJ7Iot9kY2
Pe+a2V3W1IIzGoMagn7NH1IG7fUj4+nubPEeyLerWtiolyCmRa5K97L6aQ2WssX4
Q7nOflq/LPqiskjEr6LhBLaZWoqCgSEb6557rBAM8ysNwev1kjZg3yYoaX7r0DHC
QyaedvUztRU7QhgryjzeNr9itObXPLNyVv59YKQXnPjM6YDw1uEiOBD9Sp5r3nZN
ia4unCwGMRSTpcdTwpdTddNZrWreIrkbT8Vk1Dc2Vz2QZPwWO5Ux5pStmAicLdFy
tK7uMV/g2EeF8UhupcW4c91FwQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org