Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fO_Cb8rMPBeUOPm8n9vjsoosIdE.roa
File:                     fO_Cb8rMPBeUOPm8n9vjsoosIdE.roa (raw, json)
Hash identifier:          K7XTGlxXYqAVBcdIrXXo4WmN67b3XFwCU1ED0mg27Hk=
Subject key identifier:   7C:EF:C2:6F:CA:CC:3C:17:94:38:F9:BC:9F:DB:E3:B2:8A:2C:21:D1
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0351D75A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fO_Cb8rMPBeUOPm8n9vjsoosIdE.roa
Signing time:             Sat 18 Jun 2022 07:06:44 +0000
ROA not before:           Sat 18 Jun 2022 07:06:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211237
IP address blocks:        62.72.183.0/24 maxlen: 24
                          62.72.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55695194 (0x351d75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 18 07:06:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7cefc26fcacc3c179438f9bc9fdbe3b28a2c21d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:bd:28:cf:8c:09:e1:af:88:97:57:3d:91:
                    fd:9b:ab:2f:6e:88:d4:02:da:cb:be:01:9b:38:01:
                    53:3c:93:cb:e6:8e:82:44:5e:a9:1e:c3:7b:da:28:
                    1b:b6:70:cf:28:56:cc:62:cd:61:ed:c6:af:f3:47:
                    b1:d9:18:a2:a5:13:db:7f:26:7a:62:1a:2a:03:5b:
                    25:99:69:0c:eb:39:ba:90:ac:eb:98:14:d6:3e:15:
                    26:56:52:75:52:58:63:2c:04:9d:30:07:f9:46:a9:
                    d8:b8:7f:c8:9c:4c:18:b3:d8:d4:9b:6b:bc:75:0a:
                    1b:23:62:dc:f7:75:86:30:30:e8:ea:7c:d0:1e:34:
                    24:6a:fc:e9:c5:de:05:8d:9b:b1:43:f7:38:da:8e:
                    42:b7:4e:ef:89:4d:a0:55:a8:76:48:fe:11:e2:60:
                    4d:1d:8d:34:a0:9b:99:2d:7c:f1:83:dd:16:aa:e6:
                    0a:e6:af:c5:66:f0:54:3a:76:a3:4d:7e:d5:45:52:
                    3e:08:c0:2c:e2:59:84:2b:5d:4b:e5:13:d4:e4:71:
                    d5:c6:23:c3:71:d1:ae:a5:11:ef:84:05:33:a8:b5:
                    e0:1d:b9:86:7c:e0:ab:46:c1:f3:58:f0:ec:a9:06:
                    23:20:a0:14:c0:25:80:32:db:9d:22:97:d5:d6:45:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EF:C2:6F:CA:CC:3C:17:94:38:F9:BC:9F:DB:E3:B2:8A:2C:21:D1
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fO_Cb8rMPBeUOPm8n9vjsoosIdE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.183.0-62.72.184.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:d4:0f:c5:e3:09:b6:f6:f7:d4:1e:16:13:9f:29:db:1a:b8:
         84:1d:14:85:de:0f:70:4e:57:56:b3:bc:6e:a9:56:67:da:d5:
         b3:cb:40:ce:4c:dd:03:01:12:9a:94:db:f4:b3:f0:34:8d:1f:
         1c:dc:a1:39:3e:a9:0a:eb:22:30:85:ae:f8:5a:20:c6:64:b2:
         1e:75:41:4f:16:45:5b:73:37:6a:ec:ac:df:d4:35:10:3f:6a:
         a1:b1:3e:3e:8f:f2:28:2c:11:6d:f1:40:a1:e8:e0:d3:44:eb:
         2e:e9:ca:c6:20:65:15:a1:a0:e6:ce:b9:00:ac:c6:e4:bc:a7:
         94:ec:e8:23:93:e6:e0:b8:f4:d2:3f:6d:9d:dc:80:5e:07:64:
         a0:9f:36:69:b7:d6:37:ea:81:aa:c9:20:0c:27:44:d9:a2:58:
         82:ea:dd:e5:3c:fa:9c:71:5d:cf:08:1f:62:82:e9:f5:24:3e:
         45:59:c7:c8:0b:3d:69:30:fc:0d:46:c7:1f:96:12:c0:30:9e:
         f3:28:20:cb:ff:68:7d:57:75:3c:bb:4b:2b:32:f4:bb:72:26:
         45:a5:c5:51:1d:0e:e1:3f:80:60:cc:92:c3:47:8b:2e:4b:67:
         a7:6d:d0:74:d7:30:b9:c8:d8:ba:c9:db:c7:4d:a9:f4:49:a6:
         a0:43:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org