Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/qwjwpHVlQqYA7BV8XQRdKE_FHL8.roa
File:                     qwjwpHVlQqYA7BV8XQRdKE_FHL8.roa (raw, json)
Hash identifier:          0tJ/AipKX7/WA1LpBZSJKVMfoblHZpRlCIqUE5MmXwg=
Subject key identifier:   AB:08:F0:A4:75:65:42:A6:00:EC:15:7C:5D:04:5D:28:4F:C5:1C:BF
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       08EC1841
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/qwjwpHVlQqYA7BV8XQRdKE_FHL8.roa
Signing time:             Sat 04 Jun 2022 15:06:20 +0000
ROA not before:           Sat 04 Jun 2022 15:06:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134176
IP address blocks:        176.105.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149690433 (0x8ec1841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jun  4 15:06:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab08f0a4756542a600ec157c5d045d284fc51cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:d3:fc:d2:1a:c0:d6:87:0c:5b:41:50:60:
                    bb:ce:94:a4:41:87:2c:60:2d:46:68:7e:6e:4b:a6:
                    e8:1b:1a:e3:5f:74:b7:bf:ac:3b:40:53:1e:62:3e:
                    3f:9d:d1:c5:64:c6:39:9b:1c:0e:6f:47:90:6d:2a:
                    26:3b:8d:4e:a6:2a:cb:a1:7f:f9:3e:2f:b6:df:0e:
                    0a:11:6b:e4:fd:b8:ee:28:68:1d:3a:31:33:55:6e:
                    ab:54:64:43:21:10:40:10:ed:17:d2:14:a6:a7:ef:
                    ca:d9:0e:45:b4:8e:fb:4c:7a:c2:1a:e1:09:92:b6:
                    d0:12:bf:d5:c0:2e:87:1d:7d:e5:27:14:74:98:a6:
                    54:05:84:37:bd:a5:0b:4f:42:c1:78:50:e6:b8:a3:
                    39:5b:13:18:a0:68:b9:f8:c0:3c:9c:3d:f3:f4:1a:
                    9e:3d:1d:66:37:28:80:c3:68:e0:6d:d7:0a:8c:53:
                    ec:fb:06:04:49:8f:a2:69:45:5d:16:b5:12:e6:33:
                    b7:0d:f1:cf:b0:27:d6:64:58:1c:60:e7:31:65:c4:
                    11:14:cf:0b:0e:03:87:fa:ec:4b:ee:50:3d:6a:d5:
                    8d:80:f7:3e:5b:90:17:c1:7e:61:e0:7f:81:bd:90:
                    46:72:3b:f6:92:2d:55:c6:e9:17:89:da:0d:ec:16:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:08:F0:A4:75:65:42:A6:00:EC:15:7C:5D:04:5D:28:4F:C5:1C:BF
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/qwjwpHVlQqYA7BV8XQRdKE_FHL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:c4:52:f3:89:7e:c5:4e:85:4d:f4:24:19:6f:9c:44:f2:
         b1:55:1d:9b:f6:1e:96:ea:94:f0:16:ea:83:19:e7:b0:48:35:
         90:e9:44:25:16:eb:88:34:1a:6d:4f:60:05:11:a7:aa:1a:8c:
         b9:09:a7:32:14:11:c3:2b:60:15:57:d8:5d:97:8b:30:8a:e1:
         0b:78:1e:82:46:70:ca:d7:e2:ff:0e:7d:2a:2d:d5:02:31:7f:
         2c:df:b8:ad:d7:d4:cb:65:03:0d:8a:5c:6f:b2:ca:95:f5:e6:
         62:d0:1b:21:78:50:21:db:75:d0:e3:c3:ee:1d:b5:5c:72:b5:
         4e:02:a0:dc:15:b1:3a:eb:e2:25:fa:aa:e3:1f:50:d9:cc:7c:
         90:94:a9:97:6f:75:27:27:ba:37:b0:a0:05:c4:1f:0a:ce:08:
         81:84:37:bc:ff:da:a1:68:e0:52:55:67:0b:2d:5a:8a:e8:bc:
         07:d6:49:96:5e:0c:40:d0:07:ae:9a:65:4b:c1:4f:fc:29:dd:
         75:c3:3c:cc:a9:09:20:12:be:6b:67:bc:6b:53:28:ad:3c:6a:
         b7:65:ac:81:fb:19:a1:ba:98:c1:a3:59:11:46:3b:2f:06:29:
         48:dd:ce:2c:2d:64:52:31:42:75:d6:de:16:fc:07:ea:78:fc:
         94:7d:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:12 2023 by rpki-client on console-ams.rpki-client.org