Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PV7ZKKVkjiIKU0Q0N1f6v-OnTWY.roa
File:                     PV7ZKKVkjiIKU0Q0N1f6v-OnTWY.roa (raw, json)
Hash identifier:          hwxJ4w/9qtMy4725k3fh+lLFVnIvJ8MHa87Xm7DmIn4=
Subject key identifier:   3D:5E:D9:28:A5:64:8E:22:0A:53:44:34:37:57:FA:BF:E3:A7:4D:66
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0183BB4B5C990AB8AF2B10FB8DA8CF6FC680
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PV7ZKKVkjiIKU0Q0N1f6v-OnTWY.roa
Signing time:             Sun 09 Oct 2022 05:50:21 +0000
ROA not before:           Sun 09 Oct 2022 05:50:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        62.72.178.0/24 maxlen: 24
                          176.57.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:bb:4b:5c:99:0a:b8:af:2b:10:fb:8d:a8:cf:6f:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Oct  9 05:50:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d5ed928a5648e220a5344343757fabfe3a74d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c3:2d:0e:6d:d0:d0:78:72:3b:65:19:18:0a:
                    fb:87:1f:54:c0:07:8b:d0:b7:ef:1c:c7:f4:ea:d1:
                    45:9b:6e:be:de:09:eb:61:39:de:38:c6:ed:24:ed:
                    35:09:33:b3:e1:ee:8e:f1:89:cf:d3:27:00:46:7b:
                    27:1f:13:8b:52:77:d5:bf:2f:a6:84:cb:a4:87:d3:
                    9d:bf:46:56:0e:83:0b:fe:e8:f7:b0:5f:91:97:c5:
                    80:e0:5c:c5:9e:dd:1b:ad:d4:a9:d9:89:1f:b7:97:
                    b1:9b:5e:25:7c:89:fe:68:29:7e:df:81:da:6b:9c:
                    ad:e2:87:ab:f3:44:3a:e5:62:c1:b5:8e:48:94:b6:
                    47:32:5f:a7:5e:65:f8:f7:32:b1:90:48:09:84:13:
                    56:a2:5c:9d:77:0d:20:0c:eb:dd:6f:70:a4:90:ce:
                    15:67:85:46:97:b1:2a:b5:2b:55:cb:9e:35:d3:7d:
                    d0:75:78:ec:e1:5c:fb:df:fc:8e:73:22:f3:15:9e:
                    3a:49:73:43:3b:71:f1:54:10:5e:e9:9b:41:19:e6:
                    34:ed:fd:32:c2:51:e6:fe:cf:e1:2f:a0:33:3c:ec:
                    31:30:27:ee:f2:7b:31:1c:46:92:57:30:b4:01:a6:
                    9a:8a:84:5e:25:80:f4:2b:70:bf:29:ec:69:78:f4:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:D9:28:A5:64:8E:22:0A:53:44:34:37:57:FA:BF:E3:A7:4D:66
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PV7ZKKVkjiIKU0Q0N1f6v-OnTWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.178.0/24
                  176.57.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:78:09:93:5a:3b:26:82:89:83:bd:1b:42:61:f9:81:bd:
         1e:1b:06:b4:fa:e8:1c:29:49:ba:74:21:06:7a:26:5c:ee:9a:
         31:a8:65:cb:6d:b1:a6:81:c8:ec:86:23:6c:88:b9:d4:12:f4:
         c9:9b:ee:94:ff:f4:b9:ea:3d:be:44:21:65:7a:ef:53:a6:b7:
         f3:56:d1:fe:6a:30:60:06:d8:61:ee:fb:2b:c6:4e:43:1b:cf:
         6d:39:5b:10:75:1b:dd:af:f1:be:7b:87:ae:f0:f1:7a:db:26:
         99:4a:ac:3f:72:1b:92:86:11:90:c8:29:64:aa:53:3b:db:08:
         6f:34:33:e3:e9:02:75:68:c2:a7:6c:0e:48:a5:40:df:b4:97:
         be:8e:f7:c8:a1:27:5b:8c:d3:3a:30:a5:ca:d8:8d:c1:ef:ee:
         e2:7e:b0:22:ae:a0:3a:39:8b:3b:84:52:14:3e:94:da:1c:66:
         26:45:32:42:c6:56:0c:85:b2:b6:fb:e5:f4:78:63:65:fc:3d:
         f0:ac:71:d7:36:8f:1a:09:74:79:58:d7:d8:dc:4a:6c:c1:64:
         29:fa:5e:c3:05:82:10:61:66:2c:1b:51:68:8e:1c:dc:90:34:
         ba:28:0a:49:52:ca:2b:6b:da:53:b2:b1:d3:57:e8:91:16:f7:
         5a:39:19:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYO7S1yZCrivKxD7jajPb8aAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjIxMDA5MDU1MDIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDVlZDkyOGE1NjQ4ZTIyMGE1MzQ0MzQzNzU3ZmFiZmUzYTc0ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8MtDm3Q0HhyO2UZGAr7hx9UwAeL
0LfvHMf06tFFm26+3gnrYTneOMbtJO01CTOz4e6O8YnP0ycARnsnHxOLUnfVvy+m
hMukh9Odv0ZWDoML/uj3sF+Rl8WA4FzFnt0brdSp2Ykft5exm14lfIn+aCl+34Ha
a5yt4oer80Q65WLBtY5IlLZHMl+nXmX49zKxkEgJhBNWolyddw0gDOvdb3CkkM4V
Z4VGl7EqtStVy541033QdXjs4Vz73/yOcyLzFZ46SXNDO3HxVBBe6ZtBGeY07f0y
wlHm/s/hL6AzPOwxMCfu8nsxHEaSVzC0AaaaioReJYD0K3C/KexpePT3OQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD1e2SilZI4iClNENDdX+r/jp01mMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvUFY3WktLVmtqaUlLVTBRME4xZjZ2LU9uVFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkiyAwQA
sDkxMA0GCSqGSIb3DQEBCwUAA4IBAQAfVHgJk1o7JoKJg70bQmH5gb0eGwa0+ugc
KUm6dCEGeiZc7poxqGXLbbGmgcjshiNsiLnUEvTJm+6U//S56j2+RCFleu9Tprfz
VtH+ajBgBthh7vsrxk5DG89tOVsQdRvdr/G+e4eu8PF62yaZSqw/chuShhGQyClk
qlM72whvNDPj6QJ1aMKnbA5IpUDftJe+jvfIoSdbjNM6MKXK2I3B7+7ifrAirqA6
OYs7hFIUPpTaHGYmRTJCxlYMhbK2++X0eGNl/D3wrHHXNo8aCXR5WNfY3EpswWQp
+l7DBYIQYWYsG1FojhzckDS6KApJUsora9pTsrHTV+iRFvdaORnn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org