Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/L5MPvitZMozk0ArwJZFqudijnLQ.roa
File:                     L5MPvitZMozk0ArwJZFqudijnLQ.roa (raw, json)
Hash identifier:          R/1TyINKUCLU/F7d4lh3YneRNaXV5XhqklN1zHgJHA8=
Subject key identifier:   2F:93:0F:BE:2B:59:32:8C:E4:D0:0A:F0:25:91:6A:B9:D8:A3:9C:B4
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01850FDB6018E4C62C539B9401042F3B8809
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/L5MPvitZMozk0ArwJZFqudijnLQ.roa
Signing time:             Wed 14 Dec 2022 08:58:33 +0000
ROA not before:           Wed 14 Dec 2022 08:58:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200710
IP address blocks:        62.72.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0f:db:60:18:e4:c6:2c:53:9b:94:01:04:2f:3b:88:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec 14 08:58:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f930fbe2b59328ce4d00af025916ab9d8a39cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:e1:75:85:65:30:52:60:0b:4b:7e:a9:dd:
                    7b:5e:d3:77:cd:cc:63:f7:90:80:a3:5c:30:86:a3:
                    8f:56:be:f2:bb:a6:a5:7a:b3:25:7e:dc:7e:a3:99:
                    89:63:4c:79:0f:d7:b4:24:16:1c:4d:9c:ff:29:99:
                    5d:08:e8:19:42:c1:b6:7f:df:39:0b:fd:ae:18:a4:
                    a9:39:0e:28:fc:15:5b:41:7b:70:2d:ac:4c:be:8e:
                    c9:2b:83:a9:3b:73:12:e3:10:09:37:2a:5b:c8:ec:
                    17:66:8f:69:b8:17:42:b7:90:90:32:c4:7d:7c:9f:
                    3b:20:16:2a:1e:8c:fc:cd:2d:51:eb:ab:0d:1b:a1:
                    b6:4d:76:3d:b5:70:2c:ee:67:5d:99:15:90:e8:3c:
                    60:8b:c9:60:a5:3a:0a:0b:7a:74:d6:da:00:c2:22:
                    3b:bf:5b:a4:c2:21:8a:48:b7:fd:50:17:f5:e3:c3:
                    b3:d1:28:3f:5a:6e:7b:7f:5a:e9:c1:52:d7:84:14:
                    dc:0e:1c:4b:20:e0:b0:92:49:88:86:1e:df:34:8d:
                    6b:81:11:4e:15:47:1a:f5:2a:b5:3c:18:3d:01:35:
                    54:0f:9c:bc:d0:84:c4:1c:de:02:15:55:6e:88:12:
                    8f:bf:db:37:be:ed:75:2b:7c:7d:33:b8:a4:d5:64:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:93:0F:BE:2B:59:32:8C:E4:D0:0A:F0:25:91:6A:B9:D8:A3:9C:B4
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/L5MPvitZMozk0ArwJZFqudijnLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:12:1a:88:99:be:5e:23:2d:76:10:37:da:ae:7f:43:20:
         b3:d3:04:c1:c6:05:bf:d2:e6:a7:92:fa:ea:59:a8:26:16:35:
         ef:94:9a:58:65:20:0d:0e:ff:4b:eb:ab:73:ca:91:0f:b6:c1:
         af:66:30:89:43:27:8b:2a:6e:b6:c4:0e:a9:ba:d6:b5:4e:65:
         3b:45:2c:7e:6f:ff:21:ff:a2:a5:bf:bb:54:14:b5:e9:0c:7d:
         22:9b:d0:bd:12:a6:43:2d:30:93:a5:ae:62:6d:11:16:29:9f:
         b1:f8:1b:58:01:94:02:fb:6c:be:61:df:47:23:5a:db:b8:81:
         93:7f:25:2d:e8:ea:b5:10:89:a4:a9:70:64:33:7a:fa:2e:92:
         77:e1:78:83:7d:0a:f5:de:5a:37:89:2d:92:00:35:f9:5e:69:
         d6:39:0d:ce:bb:d0:d5:a3:41:c2:56:93:2b:46:4e:74:30:ad:
         14:2c:2c:07:f2:83:05:ec:55:7e:4c:95:9e:2a:37:5b:c4:b0:
         4a:1d:e8:72:42:14:a8:02:8d:0c:10:3a:db:df:00:76:14:84:
         4d:ca:61:a4:f6:f5:da:c5:09:89:96:83:dc:7d:a1:64:d4:68:
         1d:51:1a:4f:d1:b4:aa:29:02:73:34:72:b7:4a:7f:05:1b:a5:
         81:e5:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org