Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/GObexGfgeGo-Uf5kQjRfP7M5Z-A.roa
File:                     GObexGfgeGo-Uf5kQjRfP7M5Z-A.roa (raw, json)
Hash identifier:          ytpTJoaDg12BV8i1GA7vtMhJ8LAS1Z49+7P7xpMZdUs=
Subject key identifier:   18:E6:DE:C4:67:E0:78:6A:3E:51:FE:64:42:34:5F:3F:B3:39:67:E0
Certificate issuer:       /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Certificate serial:       02595F
Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/GObexGfgeGo-Uf5kQjRfP7M5Z-A.roa
Signing time:             Thu 03 Mar 2022 22:01:38 +0000
ROA not before:           Thu 03 Mar 2022 22:01:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209743
IP address blocks:        62.3.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153951 (0x2595f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
        Validity
            Not Before: Mar  3 22:01:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18e6dec467e0786a3e51fe6442345f3fb33967e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:0f:a7:e7:37:5b:fd:e8:0f:af:8d:af:c3:
                    ae:07:82:4b:b0:90:1a:0d:ea:89:28:28:a0:bb:13:
                    d8:85:ad:fd:9b:50:cd:7f:91:38:52:16:3b:d9:f0:
                    32:5c:16:58:ee:f9:53:20:52:30:77:9f:1d:3f:c2:
                    fd:21:4c:0b:27:9d:ee:95:b7:0a:5e:ec:56:34:63:
                    4f:0b:4b:dc:10:2b:f3:8f:ae:c8:8f:30:7a:2a:f0:
                    d8:b7:59:ca:b7:fb:6d:4c:cb:7d:d3:e3:38:1a:a4:
                    4d:d2:e9:ad:78:a7:1d:8f:a0:ad:01:5b:fb:0a:cf:
                    1f:40:9e:b2:4f:a7:a8:fb:0d:57:5e:98:04:9c:17:
                    4e:ca:a5:19:e8:12:53:ce:cc:2b:d5:34:91:0c:cd:
                    96:c2:66:fb:6a:9b:96:f1:ef:1b:b8:0d:15:f3:e2:
                    5f:85:52:10:50:3c:4a:30:f9:c8:1c:f1:82:2d:32:
                    d6:c1:4e:15:cd:07:d2:4e:64:80:75:ca:7e:a7:b2:
                    bb:e8:4a:33:f0:5c:d0:82:79:eb:40:33:16:ec:e0:
                    d8:8f:9a:1f:b5:bb:38:57:cd:12:d5:c5:18:ff:c4:
                    60:5f:11:5a:ee:12:61:bf:82:31:ad:7f:d8:b7:fe:
                    21:4e:38:e8:5d:7a:c9:36:b5:71:2b:95:78:88:65:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:DE:C4:67:E0:78:6A:3E:51:FE:64:42:34:5F:3F:B3:39:67:E0
            X509v3 Authority Key Identifier:
                keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/GObexGfgeGo-Uf5kQjRfP7M5Z-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:9f:95:62:1c:17:4a:e9:9f:ff:f6:e7:f7:11:e4:dd:c5:
         c4:5e:71:5b:ba:e2:9f:05:b1:ba:43:b8:f2:05:16:21:74:6e:
         b8:95:da:e8:08:56:27:6e:0a:af:d2:6f:98:f6:5a:ac:44:cc:
         40:fb:b2:84:64:1f:91:7d:17:5c:ce:67:30:ec:c2:73:cd:8a:
         0f:c8:85:13:11:ae:9c:c8:ce:63:8a:41:d9:09:82:58:75:8b:
         dc:47:a0:9f:da:70:67:11:17:e6:56:2d:34:08:a3:eb:a0:e6:
         44:ef:9c:63:a2:d3:36:7a:c4:b6:68:7f:c7:68:a7:6f:21:f4:
         1b:2d:0b:10:e6:41:d5:aa:e3:83:d5:c2:96:64:59:d8:97:fc:
         fc:4d:3b:a0:d1:75:f4:03:87:d2:38:59:88:c1:be:07:df:41:
         8b:1c:f8:48:5a:09:7c:46:15:07:18:12:27:a5:9d:78:5e:19:
         c8:96:a5:c2:4e:9d:15:65:9b:41:21:d6:62:09:76:68:0a:03:
         c1:28:cb:8f:20:f4:0b:f9:ff:b6:b4:00:03:ae:36:c3:6d:25:
         f1:02:eb:03:4b:37:20:e6:d5:a0:7b:b9:de:b6:58:0b:f0:2e:
         1d:2e:eb:f7:8c:57:1d:37:c1:ec:42:b5:fe:c9:f0:4f:9d:79:
         29:fc:31:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org