Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EJmLMR8FAe0iv-N1cBKYeZmAXP8.roa
File:                     EJmLMR8FAe0iv-N1cBKYeZmAXP8.roa (raw, json)
Hash identifier:          fsS/opxZ5Wnnv0hwwwLapl3nm6WHl1Cg4+uqZS215y4=
Subject key identifier:   10:99:8B:31:1F:05:01:ED:22:BF:E3:75:70:12:98:79:99:80:5C:FF
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01BE96E7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EJmLMR8FAe0iv-N1cBKYeZmAXP8.roa
Signing time:             Sat 01 Jan 2022 04:53:45 +0000
ROA not before:           Sat 01 Jan 2022 04:53:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        62.72.176.0/20 maxlen: 24
                          176.57.48.0/24 maxlen: 24
                          176.57.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29267687 (0x1be96e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 04:53:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10998b311f0501ed22bfe3757012987999805cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:cc:05:8f:86:c0:70:d9:c3:a3:b1:89:6b:
                    5b:e5:e1:bd:69:b1:d2:e2:88:17:5b:25:6b:47:26:
                    c4:b8:e9:a9:52:bd:c7:33:0a:58:11:70:11:63:5c:
                    e9:05:72:41:23:ee:82:8b:14:6d:8a:74:e5:7c:ad:
                    f4:ae:4e:8e:fe:b0:ed:72:f5:f8:f3:0a:05:fa:18:
                    6b:72:88:11:50:6c:d0:1a:9c:4d:29:d3:25:2d:b7:
                    e9:52:71:fe:c7:ee:8f:32:72:d2:ae:49:2e:27:d6:
                    36:ad:85:e0:ef:ef:22:f8:9c:af:45:13:fc:4b:51:
                    62:fc:d0:f6:be:55:67:37:9c:f6:42:ba:32:75:0e:
                    2b:e8:6d:f5:27:72:ea:fd:68:dd:9f:08:30:57:12:
                    ca:3e:94:d7:94:25:08:bd:8a:b4:aa:de:6e:7b:d0:
                    09:d5:f6:7c:d4:56:d7:03:29:5e:bc:06:a6:4e:9a:
                    3c:e9:0f:b1:9a:74:c6:4e:6c:4d:cb:ae:6c:08:8a:
                    14:cc:14:a6:28:74:f3:3c:bc:08:12:0b:f5:fa:3b:
                    fd:0c:2d:14:cb:7f:c2:81:eb:e4:85:80:29:32:72:
                    17:8d:9b:91:02:30:19:b3:a6:45:0b:81:59:26:73:
                    9a:25:4e:b0:c8:70:5a:7d:54:80:fa:e9:6b:20:8a:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:99:8B:31:1F:05:01:ED:22:BF:E3:75:70:12:98:79:99:80:5C:FF
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EJmLMR8FAe0iv-N1cBKYeZmAXP8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.176.0/20
                  176.57.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:4d:bf:8b:17:a5:ec:c5:b9:7c:78:21:56:23:16:a7:84:bb:
         43:b8:68:e3:6c:a3:f7:8d:81:bc:4a:02:60:73:2b:c2:9a:31:
         cc:e1:0c:a1:87:da:c1:7d:c9:72:f3:94:b6:ea:6c:29:15:20:
         6e:41:c1:2c:2b:6c:1a:d3:7f:77:05:14:db:97:c0:18:b9:26:
         0e:4e:ce:1a:22:dd:69:23:98:b8:2b:65:10:6f:79:84:d1:f3:
         82:2b:90:bf:15:18:e7:89:ba:61:74:f2:1f:ad:44:12:c2:88:
         98:b8:bc:0e:ef:68:3b:8b:d4:31:02:a4:34:0f:12:32:1c:13:
         f3:3f:66:54:98:11:5e:3d:90:5c:03:ee:ec:7c:45:39:8a:01:
         d2:7d:1a:9c:a0:4c:50:27:34:ee:38:ab:59:14:3b:03:12:58:
         3c:a0:bf:17:e3:9b:2c:51:13:0d:76:3b:30:23:be:e9:0b:c3:
         c1:65:c9:09:83:06:61:e0:56:82:67:74:3f:1b:ae:90:93:a9:
         76:13:7c:12:05:cb:9c:5f:4c:42:4d:4d:4f:38:48:57:cc:f4:
         b8:b2:48:08:04:29:d4:10:02:27:b7:41:2f:99:a5:14:82:c1:
         d4:57:92:ad:2f:13:c6:37:2e:71:96:54:a2:16:ce:02:58:ce:
         d1:5e:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org