Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N5V_roFaHWxy2tl_FPXZUamYB4Q.roa
File:                     N5V_roFaHWxy2tl_FPXZUamYB4Q.roa (raw, json)
Hash identifier:          DlLp1j3mJwFdmcNKrIOMzeASUgYsS2ye7L9ngXUpia0=
Subject key identifier:   37:95:7F:AE:81:5A:1D:6C:72:DA:D9:7F:14:F5:D9:51:A9:98:07:84
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       086DA91B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N5V_roFaHWxy2tl_FPXZUamYB4Q.roa
Signing time:             Sat 16 Apr 2022 11:38:33 +0000
ROA not before:           Sat 16 Apr 2022 11:38:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        176.105.228.0/22 maxlen: 24
                          45.137.16.0/22 maxlen: 24
                          45.150.52.0/23 maxlen: 24
                          95.214.176.0/22 maxlen: 24
                          91.239.148.0/23 maxlen: 24
                          91.238.92.0/23 maxlen: 24
                          212.115.124.0/22 maxlen: 24
                          45.132.80.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141404443 (0x86da91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Apr 16 11:38:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37957fae815a1d6c72dad97f14f5d951a9980784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:49:81:78:a9:63:d6:a8:7a:83:84:bd:e6:
                    87:ab:99:95:90:06:34:58:26:da:a8:df:0e:64:1d:
                    16:70:dc:87:09:ab:08:04:30:1d:1f:a8:6e:1f:a3:
                    da:be:46:a2:34:c7:2a:0a:75:04:e3:60:43:8e:38:
                    99:4a:4b:3c:24:a8:fc:64:e3:6c:61:c0:45:5e:07:
                    47:8c:01:be:a9:4d:c3:39:e8:91:c4:7d:b3:e5:80:
                    8f:fe:c7:e2:8b:81:40:0c:2d:6c:a0:e5:ab:44:45:
                    f8:00:0b:f1:4d:51:ad:52:44:74:bb:6d:00:76:64:
                    f4:b6:e5:59:60:c2:4c:9b:61:0d:c6:64:cd:99:3d:
                    6f:37:d7:82:f2:a0:f1:80:9b:3e:23:09:48:83:81:
                    3a:e4:b7:88:95:97:7b:9c:97:2a:d5:3f:5e:5e:ce:
                    06:6a:62:a8:36:f0:ad:bd:c9:75:fb:c6:9e:e5:6e:
                    77:16:68:10:e9:42:3c:75:d5:65:6a:69:d0:d9:42:
                    d2:c0:a5:b6:9f:bf:e6:8f:da:25:1e:44:6c:1d:9c:
                    36:29:39:c1:99:a6:0a:b9:39:c0:93:63:a7:45:bb:
                    2c:5a:c9:2f:f5:19:7e:3c:96:8c:bd:25:4f:0f:91:
                    14:2f:88:79:4b:f1:3c:44:35:29:63:4f:c9:2a:a5:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:95:7F:AE:81:5A:1D:6C:72:DA:D9:7F:14:F5:D9:51:A9:98:07:84
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N5V_roFaHWxy2tl_FPXZUamYB4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.80.0/22
                  45.137.16.0/22
                  45.150.52.0/23
                  91.238.92.0/23
                  91.239.148.0/23
                  95.214.176.0/22
                  176.105.228.0/22
                  212.115.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:33:3e:7c:bd:bb:4e:73:90:f7:67:ff:0a:05:c0:66:0b:
         d1:19:d9:49:61:74:a9:bd:04:64:30:3e:a8:65:dc:1d:ef:57:
         24:05:39:a7:cb:65:3a:b9:66:5b:1d:f4:56:f3:98:fc:39:3d:
         27:8e:05:d5:6c:40:49:46:4a:5b:d5:92:08:82:72:5a:f6:6d:
         fc:72:2d:fb:fa:4e:f8:d6:81:08:a4:d1:27:ab:3d:c6:3f:06:
         b0:5a:52:45:76:e2:97:5f:03:f1:d4:cd:fa:9a:4d:f4:27:f2:
         1d:9d:ce:c7:34:46:f8:84:17:b6:2d:40:6e:a4:05:ed:19:07:
         3c:40:3e:10:a5:11:0f:97:09:98:49:1c:82:6e:06:e7:8c:29:
         74:18:41:6b:10:fd:1f:3b:cd:73:74:24:75:7f:7a:5d:d3:7a:
         b9:5b:28:22:a0:18:cb:8a:22:49:5a:e6:c8:e4:d7:a5:ff:6b:
         14:52:00:bb:1e:b2:43:6e:b3:60:d0:51:a5:77:99:d8:d4:21:
         96:f5:b1:7b:92:74:14:a8:78:f7:13:57:ee:52:f5:e5:0c:1a:
         6b:80:b8:87:53:25:86:a4:ce:81:6e:b8:10:d2:9e:02:f0:df:
         ea:a8:ea:9e:ab:3d:00:be:97:74:cc:8a:a1:75:ed:bd:22:bc:
         76:ef:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:12 2023 by rpki-client on console-ams.rpki-client.org