Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6ahebZqNZGujj8lD4m3IDrLnUDs.roa
File:                     6ahebZqNZGujj8lD4m3IDrLnUDs.roa (raw, json)
Hash identifier:          leXOXLMsyUkUiuQi168pI/pepylEVvgpbvOYLcyM/90=
Subject key identifier:   E9:A8:5E:6D:9A:8D:64:6B:A3:8F:C9:43:E2:6D:C8:0E:B2:E7:50:3B
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       03953740
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6ahebZqNZGujj8lD4m3IDrLnUDs.roa
Signing time:             Fri 01 Jul 2022 07:20:01 +0000
ROA not before:           Fri 01 Jul 2022 07:20:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        62.72.177.0/24 maxlen: 24
                          62.72.190.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60110656 (0x3953740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jul  1 07:20:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9a85e6d9a8d646ba38fc943e26dc80eb2e7503b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:09:ce:f3:52:f1:68:c4:13:a3:79:42:08:
                    8e:05:bc:5a:d7:63:71:73:c0:55:fe:7d:e4:cb:a3:
                    3f:43:66:1a:47:fd:64:87:c0:79:7c:7c:94:32:f4:
                    6a:7b:bd:45:49:16:eb:b6:91:96:7b:34:be:c0:b0:
                    57:08:64:47:d9:41:ef:e3:4a:f2:05:33:28:b2:58:
                    43:55:59:8a:b5:e3:0b:13:00:4e:6a:15:8b:a3:b3:
                    c9:b0:63:bc:52:65:21:13:53:48:21:1f:62:30:de:
                    39:ec:ea:ab:6e:72:86:e4:8f:b6:6b:f5:84:96:17:
                    24:9c:68:7f:ca:3c:31:ef:0c:50:a6:c4:4e:c2:13:
                    62:50:22:31:0a:f3:18:21:99:02:eb:5e:15:19:33:
                    15:40:03:1e:42:40:c5:05:cd:74:81:8c:ac:4a:17:
                    8d:4f:db:1f:c4:11:43:d0:7e:5d:83:1e:23:4d:26:
                    f9:2b:85:91:ea:7e:43:ed:c4:27:b6:7e:f2:77:05:
                    66:1f:e1:15:4c:ea:6f:01:f0:e2:01:2f:03:99:09:
                    85:cf:59:34:33:ff:82:cb:17:f4:4f:9a:e6:9c:c8:
                    4a:be:47:09:2c:3a:6c:4d:df:6f:6e:82:48:c0:42:
                    97:7a:7d:d1:15:0f:f3:08:9f:66:6e:9d:f0:e0:21:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A8:5E:6D:9A:8D:64:6B:A3:8F:C9:43:E2:6D:C8:0E:B2:E7:50:3B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6ahebZqNZGujj8lD4m3IDrLnUDs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.177.0/24
                  62.72.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:43:4c:58:9c:6f:46:0b:fc:ac:a0:f2:1b:38:5d:a8:b3:f7:
         bd:3c:c4:35:26:51:aa:19:57:69:5b:f1:c5:44:48:3c:10:16:
         5b:e6:2b:dc:08:5f:d8:48:90:63:60:a8:7b:8d:25:c2:5e:aa:
         e2:34:75:bc:4c:29:d9:7f:53:a6:db:0f:79:15:b9:56:05:10:
         3b:27:c8:4c:e2:22:29:29:ac:c1:7b:e2:19:c9:2c:79:77:fa:
         a3:4e:a4:09:7a:17:84:4c:76:e3:4b:7d:9b:65:18:54:c8:1e:
         8d:bc:3a:9c:2f:d7:0c:52:0f:5d:34:4f:b8:7e:f6:0d:a3:4f:
         3b:e9:e1:93:ed:fd:b0:63:2d:ef:21:77:ed:6d:30:11:a0:d6:
         02:84:a9:a0:31:14:f1:fc:ad:1d:0b:db:68:42:86:72:64:c0:
         5c:89:78:6b:ca:7f:29:77:87:ce:36:33:14:61:c1:35:5a:17:
         9e:41:74:0c:07:f4:79:26:02:fa:ac:a4:ee:26:07:6b:3b:7f:
         9b:a6:32:72:f4:08:d1:b6:f2:34:2d:e8:4a:5e:a8:8f:6b:64:
         88:ab:29:0f:c1:53:ea:9b:2d:66:31:42:ec:07:52:53:a4:c2:
         dd:72:ab:ec:a5:a9:55:c9:41:85:1e:e8:94:6f:97:13:42:1a:
         1c:cb:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org