Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/k-px5ts7b9IP0EEqNJ0NIPi97jQ.roa
File:                     k-px5ts7b9IP0EEqNJ0NIPi97jQ.roa (raw, json)
Hash identifier:          HHoyiP4zFsattwMSyBBSXJ60ptvoKBWPd/RP4Y8CCF8=
Subject key identifier:   93:EA:71:E6:DB:3B:6F:D2:0F:D0:41:2A:34:9D:0D:20:F8:BD:EE:34
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       09F55115
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/k-px5ts7b9IP0EEqNJ0NIPi97jQ.roa
Signing time:             Sat 01 Jan 2022 03:01:14 +0000
ROA not before:           Sat 01 Jan 2022 03:01:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35372
IP address blocks:        62.60.143.0/24 maxlen: 24
                          62.60.144.0/24 maxlen: 24
                          62.60.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167072021 (0x9f55115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  1 03:01:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93ea71e6db3b6fd20fd0412a349d0d20f8bdee34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:e1:94:37:c3:16:1c:0b:96:f4:f2:b0:97:
                    ae:d2:90:3a:38:41:0f:45:f5:46:05:bd:19:c8:93:
                    02:3f:aa:b9:c8:f8:29:d6:6d:8f:83:3d:c5:92:fe:
                    6d:43:77:ce:cd:86:90:dc:17:ff:2a:ff:10:cb:a3:
                    86:74:fe:49:65:98:8f:28:ae:e8:15:de:c1:72:97:
                    9b:e0:ae:ba:78:ed:45:55:3c:4a:6d:c7:f7:0d:31:
                    ca:88:f1:2f:6b:6a:48:fd:26:4b:16:64:69:13:54:
                    be:17:5f:bd:02:ab:45:5c:17:52:26:f6:f6:50:c8:
                    85:c3:30:cf:00:dc:56:fe:9d:8f:7d:74:28:ea:8e:
                    25:b9:b5:f1:e2:78:e8:ce:d8:8a:fd:4a:e0:26:2a:
                    26:ee:d5:d5:ec:33:d4:3b:d2:fc:eb:ec:48:c4:31:
                    39:19:0b:4f:42:76:96:ab:44:fa:61:32:b4:bc:a1:
                    68:12:6a:bf:2d:af:7a:34:8d:9b:f9:df:48:ab:d3:
                    7f:47:27:e5:e3:18:2d:56:32:b1:bb:ce:d0:c2:d2:
                    e0:c1:fd:61:80:b1:dd:f1:ec:60:5b:f3:94:d7:41:
                    46:9b:18:9c:f0:f0:2a:d5:d1:cc:65:37:c5:8b:7e:
                    07:3d:0e:e6:9c:50:40:f8:1c:32:b3:7f:a6:f7:6a:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EA:71:E6:DB:3B:6F:D2:0F:D0:41:2A:34:9D:0D:20:F8:BD:EE:34
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/k-px5ts7b9IP0EEqNJ0NIPi97jQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.143.0-62.60.144.255
                  62.60.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:a8:af:95:42:dc:33:15:14:44:40:59:f5:e5:13:cc:8d:3d:
         24:95:92:eb:d0:66:9c:30:be:c7:c5:88:8b:d6:dc:46:aa:0c:
         c0:74:b5:3c:9f:87:e7:72:6b:f5:74:06:29:e4:b4:1b:9d:76:
         9e:e2:99:df:de:ac:57:79:4e:ed:8f:bc:4b:56:06:2a:d4:fb:
         d5:f2:a5:77:81:22:13:fb:3e:b4:46:00:f3:fa:d9:dd:f2:76:
         dc:47:24:b8:d6:05:d3:0f:4d:7a:b9:fe:dc:95:40:c9:04:e6:
         87:3f:89:77:52:30:72:41:6a:24:28:b1:68:7a:03:fe:19:6e:
         ad:60:61:3e:b0:e6:a3:70:9f:11:ab:37:25:bb:8d:c3:68:d9:
         ec:6a:24:7d:b5:90:f3:c9:29:e4:34:f6:66:9a:19:c4:2b:bf:
         c8:39:7f:83:8f:e9:a0:29:07:86:9f:48:ac:6b:0d:e5:c4:b7:
         25:d3:19:0b:eb:d9:bc:fc:03:18:ad:9e:31:77:1e:a2:00:ec:
         21:5b:dc:9d:95:36:7b:6f:ba:fb:48:36:39:7d:c2:ec:80:a4:
         08:fa:79:1b:6d:f2:e3:f4:a8:73:e1:44:7b:49:ad:44:57:7b:
         1d:a2:33:49:0f:52:ab:88:38:0a:09:76:af:9b:b9:c1:65:66:
         53:24:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org