Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0sQMko6aw48vnaK8GKE8fz2QAy0.roa
File:                     0sQMko6aw48vnaK8GKE8fz2QAy0.roa (raw, json)
Hash identifier:          pazPuKF4Ny4NRvqEGhkOp+ltFFk5kfJgGU2Su5cPxL0=
Subject key identifier:   D2:C4:0C:92:8E:9A:C3:8F:2F:9D:A2:BC:18:A1:3C:7F:3D:90:03:2D
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       026AEA1C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0sQMko6aw48vnaK8GKE8fz2QAy0.roa
Signing time:             Wed 16 Mar 2022 07:10:19 +0000
ROA not before:           Wed 16 Mar 2022 07:10:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        62.72.184.0/22 maxlen: 24
                          176.57.52.0/22 maxlen: 24
                          176.57.60.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40561180 (0x26aea1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Mar 16 07:10:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2c40c928e9ac38f2f9da2bc18a13c7f3d90032d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:55:74:36:63:ee:c8:37:5c:41:21:b2:3b:
                    e6:23:f3:eb:82:52:1d:4c:97:25:f9:a4:3f:d0:02:
                    42:db:c4:86:dc:09:58:56:03:52:3a:fb:d1:a3:a1:
                    ca:ee:54:1d:52:d4:cb:7f:65:76:1e:32:89:3b:a3:
                    d3:48:5a:34:ee:c7:81:d1:2b:1f:86:a1:4e:8c:d0:
                    b5:c7:4f:7c:96:9c:c7:e3:2b:92:5b:4d:b6:86:46:
                    dd:b4:c5:3a:f1:87:43:3b:cb:b6:b7:da:3c:83:69:
                    de:25:79:d9:ed:c7:9d:c9:5a:df:cf:8a:ce:ba:79:
                    6a:10:ad:b9:6b:7a:8c:a1:fc:5f:74:4a:80:9e:13:
                    e9:4e:21:88:6f:ff:83:a0:62:5c:a1:6b:27:47:a9:
                    fa:d1:8a:53:b8:80:e5:ac:3f:e0:2a:76:5b:b9:9a:
                    f2:31:47:01:dd:80:0b:40:ff:1c:43:37:cc:ea:25:
                    6a:f0:b2:01:48:46:73:03:50:9e:9f:c6:fe:f3:01:
                    aa:f2:7d:6b:95:c4:8d:d8:6b:5d:93:22:a8:9e:f7:
                    78:8c:0d:e7:c6:7e:88:5e:8a:d8:96:3a:14:2c:e6:
                    e3:b5:58:e6:58:a8:be:59:b8:a6:e2:44:bf:4b:98:
                    a7:30:39:43:fa:b6:62:eb:38:e4:d2:85:27:b8:ec:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C4:0C:92:8E:9A:C3:8F:2F:9D:A2:BC:18:A1:3C:7F:3D:90:03:2D
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0sQMko6aw48vnaK8GKE8fz2QAy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.184.0/22
                  176.57.52.0/22
                  176.57.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:44:12:1b:91:d8:0f:0b:ac:d6:f9:8f:d9:5b:d5:56:ca:07:
         b9:fb:53:1c:d3:a3:ef:50:1a:b6:98:31:44:d7:11:fb:f5:c6:
         0b:a2:24:23:a9:f5:97:5d:58:0d:d3:24:7d:b1:5f:6e:f2:e6:
         3d:77:2d:ab:ab:42:a0:5d:99:32:3f:10:36:b6:e3:7c:5b:fe:
         c5:ba:f2:cb:ee:ea:e1:21:0f:49:87:0b:3c:c9:27:fd:0a:82:
         4a:d6:f6:8f:b7:fb:a0:31:3c:c8:3d:6a:77:71:b7:dd:12:9f:
         80:87:c4:65:07:b4:7f:56:b0:50:f8:ec:62:d0:1d:0c:5c:dd:
         74:03:58:8e:a3:37:8d:3a:3b:43:fc:1f:66:9b:22:95:ae:b6:
         b6:a1:41:f5:e1:f1:8d:e2:bd:2a:e1:17:2e:53:a8:c3:6e:32:
         87:22:30:41:c0:3f:6b:1d:a1:03:03:07:3a:b2:0f:e1:09:c9:
         b4:0c:fa:01:b4:7d:68:27:39:1e:b5:d1:b6:43:6b:af:6a:99:
         c2:1a:68:67:cd:68:03:26:fb:7e:e1:49:a6:1c:7b:d4:c2:fa:
         40:73:6c:af:2d:18:af:7a:7e:d4:7f:63:82:e4:3e:de:a4:ad:
         d1:fc:1d:10:4e:e9:8a:2d:58:b7:ac:e8:e1:1d:7a:85:20:c4:
         2f:0f:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org