Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NZ3oue4C2GY-g-A-cauli02_sek.roa
File:                     NZ3oue4C2GY-g-A-cauli02_sek.roa (raw, json)
Hash identifier:          89fiGDABEU5qCUcjSZVqGkTtJCjw68/H7Fp7bIZkAm8=
Subject key identifier:   35:9D:E8:B9:EE:02:D8:66:3E:83:E0:3E:71:AB:A5:8B:4D:BF:B1:E9
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       0B691A15
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NZ3oue4C2GY-g-A-cauli02_sek.roa
Signing time:             Sat 01 Jan 2022 08:58:43 +0000
ROA not before:           Sat 01 Jan 2022 08:58:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62077
IP address blocks:        62.244.233.0/24 maxlen: 24
                          62.244.246.0/24 maxlen: 24
                          62.244.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191437333 (0xb691a15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  1 08:58:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=359de8b9ee02d8663e83e03e71aba58b4dbfb1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:ae:7a:e3:54:0b:6f:fe:c8:eb:d0:da:00:
                    15:90:41:83:b1:ac:d5:7b:cb:ba:bf:0d:34:67:12:
                    c3:cc:92:96:c7:38:82:64:2d:14:f8:31:25:6b:84:
                    98:48:c2:9b:68:70:a0:3b:6d:d9:c9:b1:93:00:c4:
                    49:84:82:a2:c3:e5:2d:de:b4:67:57:15:8b:47:5a:
                    68:f8:84:65:1b:fe:2e:06:43:a6:4a:fa:16:ce:50:
                    94:44:51:48:16:4a:17:a2:76:a5:10:71:54:e2:46:
                    4a:14:2f:c0:f8:31:04:ec:8b:f5:8b:d5:58:ba:51:
                    94:fc:3b:97:47:a1:d3:f9:76:31:b2:41:62:79:c1:
                    62:45:05:49:cf:aa:c2:5c:0d:8c:54:67:93:86:a2:
                    48:81:73:a0:38:6a:24:fc:22:ca:8b:72:53:8c:b9:
                    2a:cd:3a:66:71:62:72:5d:1e:f9:cd:eb:9e:c3:d6:
                    18:61:da:8c:d1:85:08:ba:d8:a9:7f:51:eb:ba:da:
                    07:a0:ed:be:0e:7d:3b:a6:b1:42:47:8b:ff:29:09:
                    40:52:da:ad:21:19:23:20:61:81:bc:fe:fe:61:78:
                    2c:f4:63:f1:c6:b6:a5:a7:62:1e:50:bc:b3:35:49:
                    67:0c:be:28:b6:4f:58:31:a0:d4:46:7a:e7:c7:c3:
                    bc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:E8:B9:EE:02:D8:66:3E:83:E0:3E:71:AB:A5:8B:4D:BF:B1:E9
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NZ3oue4C2GY-g-A-cauli02_sek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.244.233.0/24
                  62.244.246.0/24
                  62.244.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:0f:08:56:a2:a4:d8:10:d2:a5:8c:7a:63:6b:0d:ed:99:
         4f:ff:c5:77:f7:ed:60:32:0b:8a:fc:5e:81:ce:86:f4:b5:74:
         06:99:0e:6b:3f:76:5e:b8:97:8d:e1:d5:c5:3f:e6:c8:a8:e1:
         47:c1:92:21:25:b2:e0:4a:8a:e7:05:5d:d3:5c:4d:c9:b9:2f:
         8d:11:10:81:09:85:ae:61:6b:f3:d4:44:20:15:9c:a7:19:fb:
         a9:e0:2f:0f:35:cd:78:d1:25:c8:53:81:3d:dc:7d:a6:14:d6:
         12:58:28:7f:45:12:4e:32:07:0b:69:70:27:a4:4b:35:99:b1:
         07:88:38:33:da:e4:5c:c5:06:c0:5f:27:de:4b:7a:6f:14:b1:
         04:94:1b:73:c2:4b:ad:09:9a:45:bd:bc:53:5a:a3:9d:9c:cb:
         4b:2f:8b:69:57:6b:a3:7f:1e:fb:69:8c:60:3e:49:37:b2:26:
         33:54:91:a3:57:90:a2:b8:81:38:a7:fe:a1:b8:23:09:be:7f:
         a8:46:61:bb:09:58:4f:75:bb:fd:9b:d6:9a:62:7c:8f:5c:ad:
         ec:b9:36:2e:c9:93:77:61:af:d0:b7:0b:ac:1d:6d:cb:40:8b:
         f3:d5:cb:42:9e:61:a9:16:d8:ce:69:31:ef:c7:52:7c:ce:93:
         7a:80:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org