Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wXx-2FUvlSEdDIJ6NFYfCSAcPvA.roa
File:                     wXx-2FUvlSEdDIJ6NFYfCSAcPvA.roa (raw, json)
Hash identifier:          zyDBpND3syu8IL1dnFCYsAWoT2j0wofVoHIQL08AGrc=
Subject key identifier:   C1:7C:7E:D8:55:2F:95:21:1D:0C:82:7A:34:56:1F:09:20:1C:3E:F0
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       03743492
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wXx-2FUvlSEdDIJ6NFYfCSAcPvA.roa
Signing time:             Mon 20 Jun 2022 07:17:51 +0000
ROA not before:           Mon 20 Jun 2022 07:17:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        62.72.176.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57947282 (0x3743492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 20 07:17:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c17c7ed8552f95211d0c827a34561f09201c3ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:a5:99:34:8a:07:01:92:be:4d:d1:e0:7f:
                    d7:b3:49:92:6a:2e:a7:a8:1d:24:d4:6d:48:a9:55:
                    55:9b:86:83:b7:b1:54:18:27:62:4d:2b:c5:b1:d0:
                    93:9b:f3:f5:f6:13:47:b0:f3:d8:9c:03:78:3f:b8:
                    8b:69:06:1c:ef:d0:57:95:49:3f:a8:d0:82:f7:98:
                    c4:44:95:1e:da:3c:1a:83:ea:48:61:f1:2e:6a:60:
                    a2:29:f8:dd:47:9d:d4:18:8a:8c:87:9a:37:9e:1f:
                    e1:74:34:67:1d:10:60:82:79:a7:6c:ba:28:4e:51:
                    fe:8f:1b:a1:07:7b:e3:b7:85:98:f3:f9:11:b4:ba:
                    14:10:df:0c:ce:21:d8:13:97:60:db:1a:cc:63:cc:
                    dc:a2:8e:5c:ed:d5:3c:e5:3f:be:fa:91:59:59:26:
                    dc:6e:e4:84:13:ac:bd:18:36:23:3c:c2:1f:32:8d:
                    0d:41:c3:73:93:1a:56:b8:81:90:12:cd:24:8d:b5:
                    34:04:67:01:3e:84:ee:54:05:30:34:4c:7f:58:f6:
                    4a:c1:af:ca:d4:71:06:82:1d:0f:f5:7a:75:ab:03:
                    e4:9e:58:3f:50:c5:0b:60:06:da:c1:ce:aa:92:cd:
                    5d:b0:0e:90:1a:2f:18:0e:5e:9d:2b:20:c4:5e:9a:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7C:7E:D8:55:2F:95:21:1D:0C:82:7A:34:56:1F:09:20:1C:3E:F0
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wXx-2FUvlSEdDIJ6NFYfCSAcPvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:fc:b8:7d:38:8c:ea:e9:20:16:1a:19:66:c1:b6:50:b1:98:
         d1:5d:62:69:39:da:70:24:a5:fa:e7:e0:7e:e1:82:84:0b:c3:
         91:0d:dc:69:5b:20:74:c2:ab:bb:1e:c9:1a:e4:e0:09:d4:f5:
         d9:28:11:47:33:26:77:17:44:38:3d:ca:2d:83:c1:82:fd:40:
         64:40:57:84:79:90:c5:bf:dc:67:63:03:fc:ea:4d:15:32:88:
         39:39:4d:6b:cc:c0:58:4c:13:9a:2d:5d:d5:76:ef:a2:3f:22:
         16:ee:73:8f:71:87:b3:f8:ad:1c:6d:c0:82:97:a2:bf:ea:90:
         16:41:65:eb:74:dd:19:9c:df:d1:15:d4:e0:60:62:64:2b:25:
         3d:31:09:42:f2:8f:99:7d:ee:dc:76:4c:1d:b9:33:78:f6:12:
         86:07:7a:18:af:0c:44:b8:9d:a1:fc:7d:7c:75:87:b0:f9:d4:
         5f:3b:0b:48:1b:dd:6b:55:b3:1e:6b:8f:20:d6:6f:0d:27:92:
         29:66:47:c1:6e:9f:88:6d:12:72:5b:ac:f1:91:32:76:f5:71:
         56:a9:f6:e9:29:a1:a6:67:64:f5:67:53:e1:e4:9a:91:1f:44:
         7f:36:c3:62:b8:24:86:73:82:d8:36:0f:94:11:90:b7:dc:a6:
         70:af:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org