Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/H6M-PW2KALcGICb1PnQzi3BRMYM.roa
File:                     H6M-PW2KALcGICb1PnQzi3BRMYM.roa (raw, json)
Hash identifier:          70YKWd58pa0KWB5eSWYvzD12xugjt3I5AueJE/31UVs=
Subject key identifier:   1F:A3:3E:3D:6D:8A:00:B7:06:20:26:F5:3E:74:33:8B:70:51:31:83
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       08506793
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/H6M-PW2KALcGICb1PnQzi3BRMYM.roa
Signing time:             Mon 04 Apr 2022 18:55:47 +0000
ROA not before:           Mon 04 Apr 2022 18:55:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        212.115.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139487123 (0x8506793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Apr  4 18:55:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1fa33e3d6d8a00b7062026f53e74338b70513183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:84:ce:f3:54:5d:6c:92:bd:6a:e7:79:5c:fd:
                    37:62:96:4b:1f:9a:b5:9c:01:47:6f:21:34:3b:85:
                    d2:2d:3b:ee:49:33:ba:11:b3:01:bf:83:75:5d:83:
                    9d:c0:bd:aa:6c:c9:ba:90:9d:2b:18:30:c7:73:c3:
                    a2:02:69:fb:a8:ef:55:97:37:b5:6c:e0:33:4a:65:
                    bd:8b:84:5c:15:70:35:2f:b8:f7:85:93:60:6f:01:
                    45:27:67:54:c7:14:6a:82:c4:a3:4f:8b:da:57:30:
                    f5:b0:a2:e4:b0:83:3c:3b:0c:f2:14:24:ab:4d:b1:
                    0f:7b:0e:ed:2f:21:ec:d4:19:35:d5:c2:87:fe:35:
                    66:e7:14:bf:d3:88:77:c0:6f:7d:6d:4a:40:6a:c2:
                    d3:5b:37:8f:81:56:5a:33:e0:ea:1e:61:fe:25:89:
                    9b:45:10:15:2e:5f:63:6a:23:37:da:ce:84:8d:44:
                    f0:a8:d5:c0:45:05:cc:42:ac:0d:1d:be:ab:74:ac:
                    68:7b:48:1b:2d:7a:12:5a:f6:91:86:01:12:99:48:
                    85:f8:b9:94:29:37:fb:2a:61:a9:50:bb:08:c6:40:
                    cd:ef:d1:3f:34:e2:99:21:34:af:05:dd:ec:5c:32:
                    fb:ea:4b:e1:83:c2:25:cf:04:05:60:65:43:91:99:
                    18:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:3E:3D:6D:8A:00:B7:06:20:26:F5:3E:74:33:8B:70:51:31:83
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/H6M-PW2KALcGICb1PnQzi3BRMYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:3f:62:91:cd:29:01:67:fe:ff:a6:82:5a:0e:67:d5:67:70:
         21:2b:04:93:5c:bf:8a:33:d3:7b:6e:18:65:8a:c1:6b:48:5f:
         f8:f5:fa:63:2f:0f:8f:a6:34:72:1f:86:8c:18:46:bc:8d:d2:
         32:4d:10:de:1e:91:22:fb:e9:46:97:39:ec:14:3a:72:63:16:
         3b:4a:c2:45:46:ea:61:87:ff:d6:e0:92:4b:ca:f8:e9:e9:23:
         b2:43:1a:0b:54:6f:8f:2b:f8:bb:28:19:e7:57:b9:c0:ce:9a:
         d7:73:ac:3f:3d:e6:4a:42:b1:b4:68:e8:8c:35:84:03:dd:b8:
         38:f6:cd:e9:57:af:b0:93:69:19:08:20:a5:f0:77:6f:62:3c:
         c2:5b:03:bd:5a:e7:31:a0:48:21:8c:92:dd:74:a3:fe:a2:79:
         6a:6f:e7:9e:6b:27:a4:74:35:e0:93:10:17:dc:7a:f0:7f:05:
         b8:07:5b:f3:66:aa:4e:a7:22:d9:30:a6:1a:5e:19:b2:51:55:
         0c:ec:3e:e4:6f:65:ef:b3:08:48:c4:9f:2b:d3:b4:26:7a:64:
         04:76:d5:a2:3b:ee:e0:72:70:ad:85:91:08:96:2a:e3:4a:df:
         f2:80:5f:35:5d:22:80:76:a4:0b:e9:4f:51:34:ab:1e:30:f3:
         35:57:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:12 2023 by rpki-client on console-ams.rpki-client.org