Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ayp4UOTDpCccjfAzMztNUsUNYic.roa
File:                     ayp4UOTDpCccjfAzMztNUsUNYic.roa (raw, json)
Hash identifier:          AgiQrWLWe2qaX77tk/wAqIJBrCTmobfABQvzaWyhuOM=
Subject key identifier:   6B:2A:78:50:E4:C3:A4:27:1C:8D:F0:33:33:3B:4D:52:C5:0D:62:27
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0760A651
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ayp4UOTDpCccjfAzMztNUsUNYic.roa
Signing time:             Sat 01 Jan 2022 03:51:30 +0000
ROA not before:           Sat 01 Jan 2022 03:51:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206446
IP address blocks:        212.115.124.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123774545 (0x760a651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan  1 03:51:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b2a7850e4c3a4271c8df033333b4d52c50d6227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:db:b9:01:b2:76:84:f2:4d:fa:20:3c:a8:
                    b8:e0:23:22:35:8a:ae:5d:0c:17:22:e6:a2:52:0d:
                    e8:a6:0e:22:f1:4a:b6:29:80:c5:c9:39:2e:03:36:
                    ba:bf:af:51:3f:68:24:11:6b:e8:fc:61:b3:e7:28:
                    e9:2a:28:fa:c5:47:c7:7c:2b:bc:9b:16:0b:e7:63:
                    08:b1:28:c9:bd:52:e5:df:d8:83:e8:70:b7:f2:88:
                    69:54:fe:36:62:37:1b:0f:08:83:15:51:84:57:6d:
                    fb:95:93:ea:5e:86:fe:9c:8a:e4:25:1a:3e:26:6f:
                    8a:e8:7d:6b:9d:6e:5d:d4:53:b4:4e:02:79:09:85:
                    08:39:62:6e:69:4d:31:b3:ec:ce:c8:fd:91:69:ae:
                    7f:43:cf:71:28:25:ce:e6:14:27:2e:3f:6d:a8:82:
                    57:4d:1c:46:84:3c:0f:ba:8a:32:92:12:9e:49:3b:
                    1f:83:11:f6:cc:f9:3f:71:8a:c7:30:e2:26:af:d8:
                    ce:8b:e2:ce:0b:75:3b:61:4f:9f:b4:e5:f3:e3:e5:
                    ad:c6:3b:bc:d8:b7:02:a7:73:66:09:a5:18:e4:9a:
                    38:57:fc:3c:c4:60:ee:46:70:cd:9a:c6:01:43:79:
                    65:0d:a8:cc:49:b9:f0:18:a8:14:ea:7b:da:50:3e:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2A:78:50:E4:C3:A4:27:1C:8D:F0:33:33:3B:4D:52:C5:0D:62:27
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ayp4UOTDpCccjfAzMztNUsUNYic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:70:7e:5c:83:fe:b8:4b:53:e3:ff:dd:27:66:c1:37:84:1e:
         b6:3a:d9:24:97:ca:a1:c9:b2:95:b6:7a:a5:1c:33:f6:a4:ff:
         38:6a:95:c1:7a:fa:fe:f3:9d:53:5a:c9:b3:53:60:10:4e:50:
         6a:65:2c:fa:af:1e:d3:f5:04:84:09:b2:80:37:32:1e:4e:07:
         1d:e9:8a:59:bc:25:df:b4:69:cf:f6:1c:b6:e8:e8:ec:2c:3e:
         63:6c:92:a9:4b:11:e5:24:cc:42:e0:c4:7f:9b:32:f3:13:be:
         76:df:fd:58:4b:d0:22:16:c0:51:67:d0:c8:14:47:3c:9d:f0:
         17:9d:43:e1:bc:a3:8f:4f:43:8f:2c:df:f1:a2:b1:6d:dc:ad:
         17:95:15:9a:8d:5d:40:dd:34:b8:60:ea:e6:d3:9f:f4:ec:b6:
         d1:41:7d:b9:10:f3:6b:4b:85:9d:e4:57:2b:6a:25:3d:3f:80:
         9d:2c:58:96:2d:f0:8b:a3:98:e6:57:67:df:5f:53:62:bf:61:
         9a:7c:ec:51:a3:5a:df:8a:57:dd:2c:1a:1c:2a:9f:27:e0:77:
         c5:fc:04:91:72:de:d7:5c:19:c0:b3:ba:de:0c:3b:c1:0c:b2:
         b1:89:df:4f:67:04:cc:9b:eb:cd:23:68:ba:dc:7e:c6:e8:9e:
         ca:f8:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org