Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9tEv_YN4bvg6iLTQIDHwb0qXN2Y.roa
File:                     9tEv_YN4bvg6iLTQIDHwb0qXN2Y.roa (raw, json)
Hash identifier:          gcBEwYGIJpeSAyM86t3qh/uIJy5Oetqtb5TNqwf5EvU=
Subject key identifier:   F6:D1:2F:FD:83:78:6E:F8:3A:88:B4:D0:20:31:F0:6F:4A:97:37:66
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       035003B9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9tEv_YN4bvg6iLTQIDHwb0qXN2Y.roa
Signing time:             Fri 17 Jun 2022 08:25:44 +0000
ROA not before:           Fri 17 Jun 2022 08:25:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211237
IP address blocks:        62.72.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55575481 (0x35003b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 17 08:25:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6d12ffd83786ef83a88b4d02031f06f4a973766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:79:bc:44:76:0d:36:ce:f3:81:16:f0:aa:
                    e5:23:c0:66:bf:d0:99:3e:27:ff:29:86:4b:c8:c1:
                    f0:5a:33:49:2b:15:7f:87:cf:5a:62:ba:06:ad:68:
                    ca:70:36:68:ce:8c:10:23:6b:66:af:d1:8f:fc:da:
                    67:cd:97:84:b7:44:0b:1e:5a:4b:0c:38:8e:af:39:
                    ab:50:23:62:ef:9b:5f:d5:9a:86:54:32:2d:16:8c:
                    f8:10:35:db:b5:c2:ea:dc:21:94:3d:a4:a6:f8:01:
                    b8:a7:84:84:20:b4:e1:2c:81:29:d1:c9:45:97:d4:
                    61:3f:9c:0f:1e:11:41:14:99:65:a6:97:95:47:30:
                    1f:a3:94:44:e3:07:cb:de:36:52:16:35:14:e4:b4:
                    0e:8b:d9:f9:28:62:6f:48:3f:54:4e:50:cc:8a:a0:
                    41:7e:fd:11:46:7c:9e:59:64:01:28:53:40:02:6e:
                    06:ba:e6:58:da:53:ca:05:0d:e1:4e:65:4f:0c:ee:
                    e2:7a:57:b3:03:f9:ff:8e:e1:62:80:a4:d1:d1:0d:
                    77:1f:66:a5:23:bb:e7:8b:99:03:51:55:1c:5b:75:
                    de:51:63:37:cb:57:9a:a3:35:7c:aa:e3:88:f2:21:
                    51:03:2e:3d:ea:fa:6a:c4:2b:f0:c1:10:0c:aa:ce:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D1:2F:FD:83:78:6E:F8:3A:88:B4:D0:20:31:F0:6F:4A:97:37:66
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9tEv_YN4bvg6iLTQIDHwb0qXN2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:20:aa:51:36:0c:0a:b0:67:0f:a1:d0:cf:01:5f:da:16:2a:
         3f:46:e1:2f:dc:12:c7:bb:bb:fc:18:a8:52:73:23:92:ee:ce:
         5a:3e:86:57:18:90:e6:53:f6:82:f8:ee:43:aa:ba:85:a2:d0:
         06:fc:ba:08:2f:25:3d:1a:91:17:79:3e:bd:bf:78:de:49:d8:
         8a:5f:e9:2f:01:76:4c:fb:5a:1e:2d:79:fc:46:65:25:d7:1e:
         ca:12:8c:5c:f2:38:b7:51:15:e9:ff:06:3e:c7:75:d9:55:7c:
         ee:ba:bf:fc:e0:7d:3a:09:d0:bc:4e:50:29:c8:78:b6:a9:e8:
         88:de:e0:c3:88:ed:5d:e0:d5:86:cf:b8:5a:61:62:75:c9:89:
         1a:56:5c:7a:65:6f:f5:96:01:d2:0e:8b:74:2b:fb:0b:b7:f6:
         b2:81:cd:94:e4:45:17:1b:eb:fe:32:28:f6:6c:4d:cc:24:9b:
         22:9e:7a:75:81:48:75:92:fc:3d:f1:70:64:2e:95:4d:c6:6c:
         8e:c4:13:31:62:e8:8a:e7:9a:a0:0c:f3:f8:5f:ea:c9:5c:cf:
         e1:0d:d6:86:74:3b:3e:69:77:a8:9e:99:4d:d4:68:09:25:37:
         b1:71:f5:a3:96:be:69:45:d4:fe:36:e5:d6:17:bf:f1:b3:07:
         72:e0:1a:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA1ADuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWYxOTA3NDU0OGQyYTI5NGU0Mzg1ZDk1Y2Q2NzUyNDkwZWU0NmQ3MB4XDTIyMDYx
NzA4MjU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjZkMTJmZmQ4Mzc4
NmVmODNhODhiNGQwMjAzMWYwNmY0YTk3Mzc2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcgebxEdg02zvOBFvCq5SPAZr/QmT4n/ymGS8jB8FozSSsV
f4fPWmK6Bq1oynA2aM6MECNrZq/Rj/zaZ82XhLdECx5aSww4jq85q1AjYu+bX9Wa
hlQyLRaM+BA127XC6twhlD2kpvgBuKeEhCC04SyBKdHJRZfUYT+cDx4RQRSZZaaX
lUcwH6OUROMHy942UhY1FOS0DovZ+Shib0g/VE5QzIqgQX79EUZ8nllkAShTQAJu
BrrmWNpTygUN4U5lTwzu4npXswP5/47hYoCk0dENdx9mpSO754uZA1FVHFt13lFj
N8tXmqM1fKrjiPIhUQMuPer6asQr8MEQDKrO4L0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT20S/9g3hu+DqItNAgMfBvSpc3ZjAfBgNVHSMEGDAWgBQV8ZB0VI0qKU5D
hdlc1nUkkO5G1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8x
Lzl0RXZfWU40YnZnNmlMVFFJREh3YjBxWE4yWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8xL0ZmR1FkRlNOS2ls
T1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5ItzANBgkqhkiG9w0BAQsFAAOC
AQEAaCCqUTYMCrBnD6HQzwFf2hYqP0bhL9wSx7u7/BioUnMjku7OWj6GVxiQ5lP2
gvjuQ6q6haLQBvy6CC8lPRqRF3k+vb943knYil/pLwF2TPtaHi15/EZlJdceyhKM
XPI4t1EV6f8GPsd12VV87rq//OB9OgnQvE5QKch4tqnoiN7gw4jtXeDVhs+4WmFi
dcmJGlZcemVv9ZYB0g6LdCv7C7f2soHNlORFFxvr/jIo9mxNzCSbIp56dYFIdZL8
PfFwZC6VTcZsjsQTMWLoiueaoAzz+F/qyVzP4Q3WhnQ7Pml3qJ6ZTdRoCSU3sXH1
o5a+aUXU/jbl1he/8bMHcuAakw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org