Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6qyv94jvVx1PWeYo0WHXK_fIHOQ.roa
File:                     6qyv94jvVx1PWeYo0WHXK_fIHOQ.roa (raw, json)
Hash identifier:          KupatWORm7AJDQahm3t3TC6FuhZX5p/xPdTHnwcZIws=
Subject key identifier:   EA:AC:AF:F7:88:EF:57:1D:4F:59:E6:28:D1:61:D7:2B:F7:C8:1C:E4
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       02F1C331
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6qyv94jvVx1PWeYo0WHXK_fIHOQ.roa
Signing time:             Thu 12 May 2022 05:17:01 +0000
ROA not before:           Thu 12 May 2022 05:17:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        62.72.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49398577 (0x2f1c331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 12 05:17:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eaacaff788ef571d4f59e628d161d72bf7c81ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:c8:54:94:40:88:b4:33:0a:a7:c2:e1:6c:
                    fc:41:cc:8e:f8:ae:46:da:de:29:e6:a6:c6:08:60:
                    38:b1:62:72:8c:d8:c4:fc:fd:1c:e8:0b:be:3c:c3:
                    ec:2d:61:bc:0d:57:31:2c:d0:9b:d2:2c:08:88:39:
                    13:29:ce:da:62:3e:c6:fd:f7:25:31:cb:82:6e:2a:
                    34:04:5a:d1:55:9d:6f:55:3c:be:fa:b7:c4:e2:1e:
                    dd:e4:39:66:11:db:7a:3d:92:d8:32:32:93:da:30:
                    1d:72:53:fc:f8:8f:01:5c:eb:9f:f6:27:c6:c8:e3:
                    1e:3d:22:5d:89:a5:fe:69:cf:e1:bb:9a:31:97:73:
                    8b:84:ed:e9:27:14:a7:ea:9f:7c:4b:25:7b:17:7a:
                    23:67:8c:5a:d2:dd:9b:57:70:c4:79:4c:3a:dd:81:
                    49:b4:3c:a2:fb:9b:19:b4:81:40:e4:27:b1:54:70:
                    11:7a:4d:d2:68:72:dc:62:4a:a9:69:72:e4:2f:2c:
                    fb:bc:8b:1f:d1:b9:de:ea:c8:73:a1:70:12:43:fa:
                    63:63:94:ce:0b:f0:d0:8b:d6:f9:a3:f0:9c:ed:8d:
                    65:3e:ab:c5:71:eb:6f:3d:af:2d:38:e9:cb:e3:94:
                    a7:44:25:ab:31:29:b7:17:b6:d8:09:4b:52:77:3b:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AC:AF:F7:88:EF:57:1D:4F:59:E6:28:D1:61:D7:2B:F7:C8:1C:E4
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6qyv94jvVx1PWeYo0WHXK_fIHOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:4d:14:c5:3b:76:da:56:9d:57:5e:b7:7c:ab:ed:14:02:
         7a:df:2f:e8:7a:0e:c6:6f:4f:dd:f7:a7:23:e5:87:0c:86:f0:
         66:d2:00:c3:37:0b:d1:9e:01:af:85:05:02:e1:92:f8:ab:ef:
         4a:4e:9a:cd:08:37:0a:81:50:9e:dc:18:ca:1d:dc:4d:5d:d3:
         43:ea:84:b2:02:35:d0:ee:b3:ef:8d:56:38:ec:6f:22:1c:cd:
         d9:17:0f:bb:c7:3b:03:c2:f0:85:c8:dc:82:17:82:00:db:cf:
         26:bc:67:f8:71:e3:7e:b6:0d:ac:56:2f:1c:ca:a7:c0:97:4b:
         3c:2e:db:f1:61:b8:7a:c1:c2:79:48:0d:70:bf:b9:fa:e7:2f:
         33:82:a1:cb:09:81:21:3f:8f:85:21:93:c0:4a:e4:2c:a6:f5:
         1a:ab:1e:e3:f8:e9:01:ca:7f:ae:e1:f6:57:c6:70:da:69:62:
         22:d5:96:a9:74:55:9a:5d:65:02:08:be:06:97:68:8c:85:88:
         74:3a:ac:be:9a:3f:3b:3c:16:fd:bb:a9:22:14:42:a4:de:61:
         d7:06:c4:5c:6c:7e:db:d3:3e:92:5f:55:a8:4f:da:ff:7c:9b:
         d6:4d:33:83:74:f3:a9:ab:45:60:2a:1a:27:1c:43:c8:3d:b5:
         56:d0:ad:ab
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvHDMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWYxOTA3NDU0OGQyYTI5NGU0Mzg1ZDk1Y2Q2NzUyNDkwZWU0NmQ3MB4XDTIyMDUx
MjA1MTcwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFhY2FmZjc4OGVm
NTcxZDRmNTllNjI4ZDE2MWQ3MmJmN2M4MWNlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALLKyFSUQIi0MwqnwuFs/EHMjviuRtreKeamxghgOLFicozY
xPz9HOgLvjzD7C1hvA1XMSzQm9IsCIg5EynO2mI+xv33JTHLgm4qNARa0VWdb1U8
vvq3xOIe3eQ5ZhHbej2S2DIyk9owHXJT/PiPAVzrn/YnxsjjHj0iXYml/mnP4bua
MZdzi4Tt6ScUp+qffEslexd6I2eMWtLdm1dwxHlMOt2BSbQ8ovubGbSBQOQnsVRw
EXpN0mhy3GJKqWly5C8s+7yLH9G53urIc6FwEkP6Y2OUzgvw0IvW+aPwnO2NZT6r
xXHrbz2vLTjpy+OUp0QlqzEptxe22AlLUnc7Ay8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTqrK/3iO9XHU9Z5ijRYdcr98gc5DAfBgNVHSMEGDAWgBQV8ZB0VI0qKU5D
hdlc1nUkkO5G1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8x
LzZxeXY5NGp2VngxUFdlWW8wV0hYS19mSUhPUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8xL0ZmR1FkRlNOS2ls
T1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5IsjANBgkqhkiG9w0BAQsFAAOC
AQEAUgxNFMU7dtpWnVdet3yr7RQCet8v6HoOxm9P3fenI+WHDIbwZtIAwzcL0Z4B
r4UFAuGS+KvvSk6azQg3CoFQntwYyh3cTV3TQ+qEsgI10O6z741WOOxvIhzN2RcP
u8c7A8LwhcjcgheCANvPJrxn+HHjfrYNrFYvHMqnwJdLPC7b8WG4esHCeUgNcL+5
+ucvM4KhywmBIT+PhSGTwErkLKb1Gqse4/jpAcp/ruH2V8Zw2mliItWWqXRVml1l
Agi+BpdojIWIdDqsvpo/OzwW/bupIhRCpN5h1wbEXGx+29M+kl9VqE/a/3yb1k0z
g3TzqatFYCoaJxxDyD21VtCtqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org