Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/E6Ye5enojcmSB4tS3d8vjq5BAsM.roa
File:                     E6Ye5enojcmSB4tS3d8vjq5BAsM.roa (raw, json)
Hash identifier:          NcXmUuS39Lh9c4sI/gYchmWYCtu1JgVqK6Sle0CRHu8=
Subject key identifier:   13:A6:1E:E5:E9:E8:8D:C9:92:07:8B:52:DD:DF:2F:8E:AE:41:02:C3
Certificate issuer:       /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial:       061F05D6
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/E6Ye5enojcmSB4tS3d8vjq5BAsM.roa
Signing time:             Sat 01 Jan 2022 10:05:37 +0000
ROA not before:           Sat 01 Jan 2022 10:05:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24753
IP address blocks:        62.145.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102696406 (0x61f05d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
        Validity
            Not Before: Jan  1 10:05:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13a61ee5e9e88dc992078b52dddf2f8eae4102c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:d8:e1:7b:27:2b:f2:13:92:00:9f:eb:2a:
                    cb:51:dd:a4:9d:d5:c4:b8:56:eb:fd:bd:97:cf:b0:
                    2e:0d:9a:83:bb:76:0e:f0:01:f9:08:fc:ad:51:ad:
                    f2:87:60:ad:6b:b4:17:9d:f8:bf:31:a1:79:3c:c8:
                    23:54:b6:96:a4:38:68:20:5c:61:3c:af:57:2e:1c:
                    df:17:5d:3f:69:5e:b0:5f:ee:9b:88:f9:e3:70:5f:
                    d0:ce:5d:4b:82:1f:bb:36:8b:a1:27:f7:8d:27:af:
                    f7:65:91:c3:a4:44:58:7b:72:62:a3:b5:01:c9:43:
                    8d:67:24:4b:4c:ba:d9:85:e8:1c:f0:99:69:12:38:
                    e8:7b:5e:ae:0f:68:72:21:b5:3d:84:3a:62:0a:11:
                    55:27:a8:ee:57:4c:1a:e3:b2:78:2a:f5:8d:58:88:
                    9f:c5:75:01:73:71:3e:51:be:cc:f2:a9:c5:80:dd:
                    89:9b:bc:d9:ee:95:0d:05:b1:cb:73:58:89:76:89:
                    53:93:d1:e6:39:04:f0:56:61:92:66:3f:2e:9e:2a:
                    fd:ba:f3:0b:a2:18:cb:4e:ac:65:88:74:16:8f:de:
                    4c:45:9e:ff:b0:16:a1:02:d1:3d:cc:94:d4:2d:ee:
                    3c:9c:8b:7c:97:81:65:24:1f:c2:e7:51:fc:7f:33:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:1E:E5:E9:E8:8D:C9:92:07:8B:52:DD:DF:2F:8E:AE:41:02:C3
            X509v3 Authority Key Identifier:
                keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/E6Ye5enojcmSB4tS3d8vjq5BAsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.145.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7c:cf:78:05:db:5d:2e:a9:fc:d9:43:2c:81:7f:fe:a0:ef:
         28:ad:ce:9b:59:5c:f6:af:4d:a7:b5:52:34:b8:96:de:61:bc:
         45:d4:e9:86:8d:7f:6f:c6:d7:bf:03:f0:a0:84:64:78:d7:89:
         cd:68:55:33:d8:e2:76:d7:34:df:9e:fb:66:d2:f4:3c:9f:22:
         9f:9d:da:0c:30:45:d3:79:4a:5f:8b:1a:28:ca:cd:30:4a:fb:
         a6:e1:75:b1:2a:86:48:13:06:73:93:c7:37:f5:5e:d9:c2:22:
         da:73:dc:92:cd:53:8a:7b:cb:26:a5:b2:1d:d8:b3:d3:6d:76:
         3e:83:22:06:81:9e:d7:90:ee:23:f3:28:2e:65:28:3f:2f:49:
         07:93:1e:7d:02:c1:27:7c:89:c5:57:25:17:ce:0c:92:2d:94:
         ac:cc:ee:96:ec:4b:09:c9:56:dc:90:6b:ff:b1:20:2b:b5:4d:
         69:c0:a8:bb:88:a7:3e:53:4e:5d:32:14:70:42:0c:7c:5c:fa:
         8e:ed:2f:d2:e9:af:0c:b8:20:d4:b8:62:29:e5:71:53:ff:ad:
         48:41:46:ed:8b:7d:ad:85:b5:e6:ee:01:36:3e:35:4b:01:4d:
         cd:96:60:b2:b2:7a:ff:3a:6e:33:8f:6a:1a:26:28:ba:f0:18:
         8c:57:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:49 2023 by rpki-client on console-ams.rpki-client.org