Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v-oS4Kmk9_UGb47q26MCr__LlgM.roa
File:                     v-oS4Kmk9_UGb47q26MCr__LlgM.roa (raw, json)
Hash identifier:          xyF0nCIbULw9vulxMmi16tT0gid4nzXSvkaRMftCC8s=
Subject key identifier:   BF:EA:12:E0:A9:A4:F7:F5:06:6F:8E:EA:DB:A3:02:AF:FF:CB:96:03
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0310D5F4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v-oS4Kmk9_UGb47q26MCr__LlgM.roa
Signing time:             Mon 23 May 2022 06:21:30 +0000
ROA not before:           Mon 23 May 2022 06:21:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        62.72.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51434996 (0x310d5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May 23 06:21:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bfea12e0a9a4f7f5066f8eeadba302afffcb9603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:ed:84:49:51:d2:e0:c3:7e:c1:3a:79:87:
                    13:82:b8:48:9b:fb:48:0c:b0:be:0b:41:d8:71:06:
                    56:58:c7:f0:e6:00:84:ca:f0:bb:a4:bf:94:e3:4f:
                    3e:4e:3d:21:ad:e6:e5:b6:5d:4f:9c:e5:5c:a9:38:
                    f3:7a:d2:11:f5:84:cc:3b:a6:27:b2:be:b9:77:da:
                    30:3e:10:c3:68:87:11:69:4c:9e:f9:df:19:3c:1f:
                    94:41:ac:1c:92:ec:74:b4:c7:3f:b7:2a:f2:d5:ff:
                    71:9b:58:3d:c7:e8:32:57:be:14:2d:8a:0e:d3:fe:
                    ec:9a:0f:e8:72:d5:e1:df:7b:8d:47:7b:6e:ff:ee:
                    c3:19:c2:5a:4d:bf:94:b0:57:09:76:29:90:47:14:
                    c3:11:58:6d:5f:c1:68:d6:b2:4c:2a:59:d9:8b:e8:
                    30:bc:fb:ac:10:35:37:59:e4:c0:56:52:28:12:25:
                    57:59:92:2a:63:4f:1f:9e:58:11:77:df:95:ea:3a:
                    1e:3a:dc:78:21:fd:e8:25:d2:2e:9e:cf:8d:b2:91:
                    e8:66:9f:a4:43:56:70:eb:0f:46:d3:ad:d6:90:a0:
                    21:99:ff:30:16:e2:ab:76:8d:c2:76:d5:d5:e9:30:
                    ae:e3:b3:3b:da:e8:06:3f:10:df:6d:6c:97:4b:2c:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EA:12:E0:A9:A4:F7:F5:06:6F:8E:EA:DB:A3:02:AF:FF:CB:96:03
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v-oS4Kmk9_UGb47q26MCr__LlgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:02:2e:25:30:e8:53:fc:4c:f7:d0:73:c8:f8:96:69:d0:3c:
         96:12:0d:45:3c:3b:d1:45:3c:8f:fb:3a:0a:15:1c:0e:5c:64:
         c6:c7:1d:55:53:99:75:81:fa:d0:f0:2b:ae:ac:ee:44:0b:f3:
         07:63:ee:8c:85:12:9e:d2:68:b2:79:4a:45:34:3f:ae:04:68:
         10:2b:f7:05:8c:4c:4f:dd:d2:4a:cb:81:2d:dc:d8:1c:f8:81:
         ed:d3:6a:e3:89:07:50:eb:c7:ba:6c:f3:1b:c9:81:b8:35:4f:
         de:ed:c6:6f:a4:eb:a0:91:59:b0:da:87:fd:b1:f8:9c:79:4d:
         a4:cd:6f:d8:3a:44:59:31:69:c3:e2:62:0a:10:3d:72:7c:6b:
         9d:b5:05:64:c3:f1:89:6a:b3:a7:9a:d4:89:29:77:f9:9a:12:
         47:cc:72:35:0e:5c:05:d5:66:c8:b1:54:a3:cc:08:1d:11:06:
         41:a4:64:e8:2a:2a:7f:a1:eb:d8:36:95:09:bc:3b:50:72:9e:
         5f:10:ba:95:26:b5:97:83:eb:35:1d:50:ac:bf:ff:ed:ad:08:
         ba:b3:d5:52:72:5c:00:a4:fe:ab:9c:e0:66:e6:bb:4a:dc:0f:
         f2:86:50:75:6c:c7:74:35:73:b8:4a:8c:a6:57:fd:66:26:d3:
         0b:33:31:0e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxDV9DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWYxOTA3NDU0OGQyYTI5NGU0Mzg1ZDk1Y2Q2NzUyNDkwZWU0NmQ3MB4XDTIyMDUy
MzA2MjEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmZlYTEyZTBhOWE0
ZjdmNTA2NmY4ZWVhZGJhMzAyYWZmZmNiOTYwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzo7YRJUdLgw37BOnmHE4K4SJv7SAywvgtB2HEGVljH8OYA
hMrwu6S/lONPPk49Ia3m5bZdT5zlXKk483rSEfWEzDumJ7K+uXfaMD4Qw2iHEWlM
nvnfGTwflEGsHJLsdLTHP7cq8tX/cZtYPcfoMle+FC2KDtP+7JoP6HLV4d97jUd7
bv/uwxnCWk2/lLBXCXYpkEcUwxFYbV/BaNayTCpZ2YvoMLz7rBA1N1nkwFZSKBIl
V1mSKmNPH55YEXffleo6HjrceCH96CXSLp7PjbKR6GafpENWcOsPRtOt1pCgIZn/
MBbiq3aNwnbV1ekwruOzO9roBj8Q321sl0ss74cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS/6hLgqaT39QZvjurbowKv/8uWAzAfBgNVHSMEGDAWgBQV8ZB0VI0qKU5D
hdlc1nUkkO5G1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8x
L3Ytb1M0S21rOV9VR2I0N3EyNk1Dcl9fTGxnTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8xL0ZmR1FkRlNOS2ls
T1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5ItjANBgkqhkiG9w0BAQsFAAOC
AQEAlQIuJTDoU/xM99BzyPiWadA8lhINRTw70UU8j/s6ChUcDlxkxscdVVOZdYH6
0PArrqzuRAvzB2PujIUSntJosnlKRTQ/rgRoECv3BYxMT93SSsuBLdzYHPiB7dNq
44kHUOvHumzzG8mBuDVP3u3Gb6TroJFZsNqH/bH4nHlNpM1v2DpEWTFpw+JiChA9
cnxrnbUFZMPxiWqzp5rUiSl3+ZoSR8xyNQ5cBdVmyLFUo8wIHREGQaRk6Coqf6Hr
2DaVCbw7UHKeXxC6lSa1l4PrNR1QrL//7a0IurPVUnJcAKT+q5zgZua7StwP8oZQ
dWzHdDVzuEqMplf9ZibTCzMxDg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org