Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_N3qB1dN9JOB7359rluHabm9k88.roa
File:                     _N3qB1dN9JOB7359rluHabm9k88.roa (raw, json)
Hash identifier:          NlrDsKj1y40H8uBr94LyADP5+dZrWnq5aMamW62vbyw=
Subject key identifier:   FC:DD:EA:07:57:4D:F4:93:81:EF:7E:7D:AE:5B:87:69:B9:BD:93:CF
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       031370F4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_N3qB1dN9JOB7359rluHabm9k88.roa
Signing time:             Tue 24 May 2022 06:22:30 +0000
ROA not before:           Tue 24 May 2022 06:22:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        62.72.177.0/24 maxlen: 24
                          62.72.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51605748 (0x31370f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 24 06:22:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcddea07574df49381ef7e7dae5b8769b9bd93cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:79:69:60:be:8d:f9:44:90:e9:e0:28:7a:
                    d3:f8:0e:b8:fc:19:70:a4:02:f1:13:5d:3b:5e:f9:
                    57:fb:b4:37:1b:94:ca:65:28:5d:b6:3d:9d:af:d9:
                    2c:8c:70:de:b6:b9:c7:35:b1:ec:68:fc:a1:10:e3:
                    fb:fd:46:b7:5f:e6:59:8a:54:f0:b6:ea:6b:bf:a5:
                    f4:3d:4b:52:7c:af:48:c5:9e:76:9f:70:4a:bb:c5:
                    4b:de:a9:40:f5:5d:76:b7:4c:a1:08:4d:be:55:33:
                    18:a6:dd:ea:8a:09:fe:2f:1e:6d:83:2c:bd:29:a1:
                    e5:b2:56:73:ce:90:0f:2e:46:bb:f2:90:b0:c8:c2:
                    a9:ad:20:c9:81:f6:ff:84:45:ee:b1:20:08:ed:4d:
                    21:5e:ff:91:91:65:61:d1:65:04:32:0e:76:c0:8e:
                    71:cc:66:ea:63:d1:3a:24:22:aa:a7:09:9e:a7:04:
                    76:77:9f:3d:af:3f:12:69:33:b0:35:50:65:5c:01:
                    f6:b2:27:23:e6:d6:af:70:dc:8d:27:1d:99:01:3b:
                    bb:96:31:35:d4:27:28:1f:6b:73:c1:a0:93:a3:11:
                    fb:04:b0:37:f1:db:ac:e8:94:68:84:c3:6a:c4:7e:
                    0e:8e:b9:1b:b0:83:5e:8e:9d:b4:35:d1:e0:02:56:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DD:EA:07:57:4D:F4:93:81:EF:7E:7D:AE:5B:87:69:B9:BD:93:CF
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_N3qB1dN9JOB7359rluHabm9k88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.177.0/24
                  62.72.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:9b:3d:5f:8d:f5:a0:c6:64:78:f6:d9:7b:35:70:19:f4:
         10:a5:99:f2:4e:f3:07:36:72:f6:ab:ca:5a:7c:a1:78:e4:46:
         42:6f:4a:b1:c9:76:4a:a5:e2:08:24:45:e9:38:e7:af:58:4c:
         80:57:33:75:df:76:ca:ea:4f:3e:f1:5c:0c:41:a1:eb:50:65:
         16:71:d3:02:6c:ca:92:5b:7f:44:aa:a6:22:5d:ec:44:b2:77:
         bb:53:c4:7d:07:20:57:53:7b:06:80:c6:ea:99:97:d7:4d:ef:
         10:2a:a6:57:95:8b:b5:c9:c7:68:0b:3f:85:7f:82:f8:54:ef:
         f5:0b:b8:c0:57:04:6b:1a:75:45:1f:f3:7b:e3:b5:a3:ff:cf:
         c7:8d:fc:7e:d7:f7:76:29:1e:8f:03:fc:1b:9b:a6:16:ff:d1:
         48:03:3a:b0:7d:54:2d:43:09:33:9c:63:f6:80:e6:98:b6:21:
         2c:61:18:c0:63:1b:d6:6e:b3:c1:16:da:b3:f3:73:9d:df:74:
         ab:2d:93:e1:b4:aa:49:91:1d:94:35:27:cd:fd:37:ea:7d:d0:
         3e:21:4f:39:89:77:78:5f:53:ea:a1:90:36:c2:c8:f6:0f:32:
         71:bc:ec:0e:75:83:0e:a1:5d:fe:7d:a4:2b:ad:1c:fd:ae:2e:
         ea:45:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org