Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bNrH3CLO9DCK8VUOx1xZq_qbXzY.roa
File:                     bNrH3CLO9DCK8VUOx1xZq_qbXzY.roa (raw, json)
Hash identifier:          BBWc4dcRvclIkl9brSLfErhejvLfc4hWGeMVCUYtE6c=
Subject key identifier:   6C:DA:C7:DC:22:CE:F4:30:8A:F1:55:0E:C7:5C:59:AB:FA:9B:5F:36
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       08F3AE43
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bNrH3CLO9DCK8VUOx1xZq_qbXzY.roa
Signing time:             Tue 07 Jun 2022 10:05:02 +0000
ROA not before:           Tue 07 Jun 2022 10:05:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        212.115.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150187587 (0x8f3ae43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jun  7 10:05:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6cdac7dc22cef4308af1550ec75c59abfa9b5f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:59:a0:a6:b2:b8:2c:79:cf:d1:e6:ad:19:
                    be:68:a0:0a:c8:ff:68:d1:5e:a4:f0:c6:8f:3a:82:
                    8c:7c:43:78:86:0c:c4:e6:92:c4:69:ab:d1:5e:82:
                    c7:bb:a8:a8:3d:80:0d:be:8d:9e:c6:0b:a4:ec:83:
                    71:26:af:55:0b:4b:44:f2:79:98:70:ae:12:07:e3:
                    18:ed:87:26:de:ff:35:f9:6a:7f:fd:15:29:9f:7c:
                    5a:a7:c6:46:53:64:47:05:ec:a7:4a:01:53:81:c4:
                    37:09:1d:e9:3d:f2:aa:6f:a9:b4:ef:ef:49:cb:67:
                    ea:cc:be:63:8e:c3:fe:46:24:95:04:e1:68:6f:3d:
                    d2:db:92:6a:b0:59:90:ec:52:68:31:ac:5b:0a:c2:
                    90:28:0b:4c:f5:1e:d0:97:b1:89:ab:74:3f:29:ae:
                    d2:0e:59:46:82:65:3d:42:ac:a8:29:5d:ee:8a:05:
                    ab:26:6c:ae:a3:83:75:9d:1f:87:16:fb:7d:d4:9f:
                    11:f7:2a:25:75:7c:72:0d:82:26:18:12:a8:34:fe:
                    00:bb:b6:73:0f:f5:d3:e9:62:fb:03:fc:bd:00:3f:
                    c0:0c:d7:ae:63:98:41:51:d0:a1:4c:80:a5:6f:df:
                    38:af:d8:1c:c8:b7:ef:45:6a:35:67:03:a7:27:99:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:C7:DC:22:CE:F4:30:8A:F1:55:0E:C7:5C:59:AB:FA:9B:5F:36
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bNrH3CLO9DCK8VUOx1xZq_qbXzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:00:f5:44:1c:68:98:1a:7b:1d:a8:cc:22:eb:12:95:34:
         9a:cf:1c:6a:7f:df:34:c7:87:65:c7:75:fa:a2:43:11:af:b9:
         6c:fe:b2:9c:fe:84:f2:6e:5c:86:24:0c:ec:40:9e:c0:5b:69:
         9c:9f:10:db:22:38:79:98:39:ec:00:ad:47:ed:e8:d3:b2:1a:
         63:10:1f:54:b2:62:81:ef:a9:9f:57:70:83:6d:c5:e1:40:45:
         c5:3c:22:c9:da:b4:62:7a:d8:27:3e:0f:04:eb:e0:45:37:dd:
         95:8f:a8:3e:d9:a6:f1:e5:57:18:6f:f9:32:e5:ad:df:9a:07:
         93:c1:2f:b6:79:68:f7:57:f3:b7:a1:c8:20:48:59:1c:a2:ad:
         9c:0a:80:cc:4c:10:d8:34:cd:ae:57:d3:61:73:fa:99:ea:75:
         f9:b5:99:10:c9:cf:65:6e:c4:e3:b1:0d:77:39:ca:22:e4:82:
         b0:09:15:45:35:fb:05:c8:df:de:59:35:ce:3b:74:1d:fd:a2:
         08:a4:4e:fe:c7:9a:d2:cd:c3:98:91:4f:c4:45:b6:0e:d8:88:
         24:75:59:20:e0:3a:4d:d6:9d:cb:65:c6:3f:66:53:29:a9:74:
         8f:bf:c0:ab:fd:78:54:35:d3:3a:f7:15:aa:82:2e:70:3c:a4:
         6e:fb:75:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECPOuQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjBjMGQwNDIyNTU2NmRiOTVlOWFkM2IyZWY2MDUwMTQ5NzVhYWEyMB4XDTIyMDYw
NzEwMDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmNkYWM3ZGMyMmNl
ZjQzMDhhZjE1NTBlYzc1YzU5YWJmYTliNWYzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKj6WaCmsrgsec/R5q0ZvmigCsj/aNFepPDGjzqCjHxDeIYM
xOaSxGmr0V6Cx7uoqD2ADb6NnsYLpOyDcSavVQtLRPJ5mHCuEgfjGO2HJt7/Nflq
f/0VKZ98WqfGRlNkRwXsp0oBU4HENwkd6T3yqm+ptO/vSctn6sy+Y47D/kYklQTh
aG890tuSarBZkOxSaDGsWwrCkCgLTPUe0Jexiat0Pymu0g5ZRoJlPUKsqCld7ooF
qyZsrqODdZ0fhxb7fdSfEfcqJXV8cg2CJhgSqDT+ALu2cw/10+li+wP8vQA/wAzX
rmOYQVHQoUyApW/fOK/YHMi370VqNWcDpyeZ3pMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRs2sfcIs70MIrxVQ7HXFmr+ptfNjAfBgNVHSMEGDAWgBSbDA0EIlVm25Xp
rTsu9gUBSXWqojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L213d05CQ0pWWnR1VjZhMDdMdllGQVVsMXFxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvMGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8x
L2JOckgzQ0xPOURDSzhWVU94MXhacV9xYlh6WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
MGVjNmQyLWYxZDctNGIwYS1hZDMzLWU4ZWYyZjA5NTk4ZS8xL213d05CQ0pWWnR1
VjZhMDdMdllGQVVsMXFxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdRzfjANBgkqhkiG9w0BAQsFAAOC
AQEAT1QA9UQcaJgaex2ozCLrEpU0ms8can/fNMeHZcd1+qJDEa+5bP6ynP6E8m5c
hiQM7ECewFtpnJ8Q2yI4eZg57ACtR+3o07IaYxAfVLJige+pn1dwg23F4UBFxTwi
ydq0YnrYJz4PBOvgRTfdlY+oPtmm8eVXGG/5MuWt35oHk8Evtnlo91fzt6HIIEhZ
HKKtnAqAzEwQ2DTNrlfTYXP6mep1+bWZEMnPZW7E47ENdznKIuSCsAkVRTX7Bcjf
3lk1zjt0Hf2iCKRO/sea0s3DmJFPxEW2DtiIJHVZIOA6Tdady2XGP2ZTKal0j7/A
q/14VDXTOvcVqoIucDykbvt1KQ==
-----END CERTIFICATE-----