Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Bf9o4lOZjTfmWn2q6UgnzwZIoCk.roa
File:                     Bf9o4lOZjTfmWn2q6UgnzwZIoCk.roa (raw, json)
Hash identifier:          Dzh3upwYG02yeoMmrk4e6LRnesQkw6MYSlFhSxKDUe0=
Subject key identifier:   05:FF:68:E2:53:99:8D:37:E6:5A:7D:AA:E9:48:27:CF:06:48:A0:29
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       02F34E69
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Bf9o4lOZjTfmWn2q6UgnzwZIoCk.roa
Signing time:             Thu 12 May 2022 15:51:01 +0000
ROA not before:           Thu 12 May 2022 15:51:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        62.72.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49499753 (0x2f34e69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 12 15:51:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05ff68e253998d37e65a7daae94827cf0648a029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:6d:20:8e:fc:78:84:42:9e:46:e5:79:00:
                    1f:7c:bf:99:04:9e:65:f6:ba:9f:63:1d:ff:46:31:
                    8c:b7:34:e3:58:cd:db:30:42:dd:7f:12:14:45:cd:
                    1f:7e:84:47:77:eb:32:b2:a7:ae:56:6e:61:2a:a2:
                    63:a6:8a:99:c8:a7:b4:c4:8a:2a:37:a2:72:ae:45:
                    23:2e:b4:56:1f:7a:75:ea:cb:a8:83:1d:eb:a7:b5:
                    07:e2:85:0e:1e:ca:40:69:14:69:70:2d:42:4e:47:
                    25:0c:43:b4:40:8a:1e:6c:64:2d:d1:3f:5e:d0:90:
                    9b:a0:a1:d7:51:02:4f:1a:46:cd:07:6f:2f:55:08:
                    1b:8b:09:2b:2f:a3:1b:9a:1f:41:38:37:81:fd:89:
                    f8:71:b5:cb:d9:84:86:33:da:88:a0:f3:b6:47:cf:
                    30:04:0e:21:51:73:ad:c7:6e:12:26:79:a3:60:ac:
                    8d:6b:e3:a3:4f:24:89:a0:7b:09:46:98:f1:c4:c9:
                    cc:01:7b:57:a8:78:84:17:5c:74:7c:91:be:b2:e7:
                    ee:56:68:20:dc:32:4f:3a:3b:e6:46:d6:31:da:8c:
                    a3:ca:d7:b8:ff:7b:63:35:71:1f:88:10:b4:40:ac:
                    eb:75:20:b2:32:73:3e:c1:69:ca:98:9e:01:2f:38:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FF:68:E2:53:99:8D:37:E6:5A:7D:AA:E9:48:27:CF:06:48:A0:29
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Bf9o4lOZjTfmWn2q6UgnzwZIoCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:28:8e:52:0d:15:56:6f:c5:12:ed:bf:90:01:47:79:be:
         6f:d3:3f:30:8c:45:4b:68:18:c1:7d:55:da:92:94:9e:a6:89:
         34:bd:1a:75:b7:93:af:4e:6d:ad:58:82:98:42:cd:b7:b5:c0:
         61:3b:5b:95:51:d3:f5:55:5d:1c:23:ff:7b:39:38:3a:45:fc:
         97:8d:68:1e:3e:57:33:83:6b:17:f2:c8:33:a4:91:5d:20:45:
         17:d9:01:7d:4f:7b:9b:52:a5:0e:6e:b0:93:7e:26:ef:33:02:
         6b:6b:d3:26:d2:ac:2f:fc:7f:e1:4f:8c:2b:84:34:fc:1b:e4:
         00:a7:c4:83:dc:a7:93:40:49:e2:10:d0:42:18:f0:95:be:d5:
         47:5e:29:01:8d:3d:b3:d8:90:8d:c9:3f:1a:8c:e5:4a:7c:ba:
         07:c7:61:a0:a7:75:b0:4f:9d:f1:81:76:55:a2:65:29:be:76:
         b7:ee:a9:ea:c5:a6:f1:c3:87:6c:2b:d2:c9:f6:21:9d:57:7b:
         4a:68:46:1c:0c:a0:83:4b:21:8c:94:10:3a:d9:23:5a:a1:49:
         71:f4:54:ab:e8:0c:b9:0e:49:65:df:76:f3:54:3a:62:f3:b6:
         22:85:5c:b5:05:f7:bd:e9:0e:00:be:61:4f:66:79:2b:e7:f4:
         c0:1a:12:1b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvNOaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWYxOTA3NDU0OGQyYTI5NGU0Mzg1ZDk1Y2Q2NzUyNDkwZWU0NmQ3MB4XDTIyMDUx
MjE1NTEwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDVmZjY4ZTI1Mzk5
OGQzN2U2NWE3ZGFhZTk0ODI3Y2YwNjQ4YTAyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsWbSCO/HiEQp5G5XkAH3y/mQSeZfa6n2Md/0YxjLc041jN
2zBC3X8SFEXNH36ER3frMrKnrlZuYSqiY6aKmcintMSKKjeicq5FIy60Vh96derL
qIMd66e1B+KFDh7KQGkUaXAtQk5HJQxDtECKHmxkLdE/XtCQm6Ch11ECTxpGzQdv
L1UIG4sJKy+jG5ofQTg3gf2J+HG1y9mEhjPaiKDztkfPMAQOIVFzrcduEiZ5o2Cs
jWvjo08kiaB7CUaY8cTJzAF7V6h4hBdcdHyRvrLn7lZoINwyTzo75kbWMdqMo8rX
uP97YzVxH4gQtECs63UgsjJzPsFpypieAS8477kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQF/2jiU5mNN+ZafarpSCfPBkigKTAfBgNVHSMEGDAWgBQV8ZB0VI0qKU5D
hdlc1nUkkO5G1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8x
L0JmOW80bE9aalRmbVduMnE2VWduendaSW9Day5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8xL0ZmR1FkRlNOS2ls
T1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5IszANBgkqhkiG9w0BAQsFAAOC
AQEAbt8ojlINFVZvxRLtv5ABR3m+b9M/MIxFS2gYwX1V2pKUnqaJNL0adbeTr05t
rViCmELNt7XAYTtblVHT9VVdHCP/ezk4OkX8l41oHj5XM4NrF/LIM6SRXSBFF9kB
fU97m1KlDm6wk34m7zMCa2vTJtKsL/x/4U+MK4Q0/BvkAKfEg9ynk0BJ4hDQQhjw
lb7VR14pAY09s9iQjck/GozlSny6B8dhoKd1sE+d8YF2VaJlKb52t+6p6sWm8cOH
bCvSyfYhnVd7SmhGHAygg0shjJQQOtkjWqFJcfRUq+gMuQ5JZd9281Q6YvO2IoVc
tQX3vekOAL5hT2Z5K+f0wBoSGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org