Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/zc_zyHqtcgV9RHx1lqJPbztBYuw.roa
File:                     zc_zyHqtcgV9RHx1lqJPbztBYuw.roa (raw, json)
Hash identifier:          s5QdKdVdwFIUWhF8rEMg691e1kUzFbuquw5gdR++MpQ=
Subject key identifier:   CD:CF:F3:C8:7A:AD:72:05:7D:44:7C:75:96:A2:4F:6F:3B:41:62:EC
Certificate issuer:       /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial:       050893B8
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/zc_zyHqtcgV9RHx1lqJPbztBYuw.roa
Signing time:             Sat 01 Jan 2022 01:54:33 +0000
ROA not before:           Sat 01 Jan 2022 01:54:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62013
IP address blocks:        185.162.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84448184 (0x50893b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
        Validity
            Not Before: Jan  1 01:54:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cdcff3c87aad72057d447c7596a24f6f3b4162ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:5b:1b:2c:81:27:11:8a:11:09:ba:7a:06:
                    08:15:95:26:a9:74:76:7d:8f:14:38:50:b5:fc:65:
                    a4:b5:1d:1f:38:98:b1:cf:46:d0:c0:7c:47:1a:a9:
                    da:c2:79:c7:36:9e:f6:6c:99:93:ef:36:8f:36:6d:
                    08:78:20:ab:b7:a7:cd:d3:94:93:29:9e:59:a2:b1:
                    ad:37:67:59:3a:97:de:a4:04:55:d4:00:e1:05:0f:
                    9f:72:3b:6e:98:cf:f3:44:e6:22:c9:08:f9:60:8e:
                    2c:7b:5c:cc:01:57:9f:7d:7f:b2:a3:ae:1f:31:3c:
                    cc:18:6b:03:05:4d:de:74:49:e6:4a:e3:07:f0:99:
                    90:0f:b5:95:38:5d:da:6d:4b:f7:1e:fa:e4:9d:08:
                    1b:73:60:47:00:ce:31:af:36:61:d9:b0:56:2c:ce:
                    31:7d:43:21:58:22:23:51:23:ba:71:bd:72:a6:29:
                    c3:79:ff:b7:67:d7:33:cc:77:47:1a:03:41:08:f2:
                    c6:fb:10:8c:d6:7a:50:48:53:e0:1f:73:cd:a3:4c:
                    c4:5c:92:83:0d:3a:11:e9:39:5f:d6:b2:e9:1b:05:
                    23:3a:a3:8e:49:9b:ca:c5:79:b6:5f:a4:64:51:57:
                    82:bb:2c:37:e3:9f:3d:0d:21:eb:14:af:a4:a3:18:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:F3:C8:7A:AD:72:05:7D:44:7C:75:96:A2:4F:6F:3B:41:62:EC
            X509v3 Authority Key Identifier:
                keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/zc_zyHqtcgV9RHx1lqJPbztBYuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:84:bb:45:d4:37:1c:1b:80:26:88:7c:f3:90:bd:0f:04:1f:
         cd:36:8b:c0:f1:f2:9c:31:ee:ae:45:8f:e7:e0:f4:01:0d:18:
         8f:c6:0f:d1:ab:33:82:49:7a:bd:c6:49:c3:87:e2:44:8a:ac:
         2b:fe:ca:2e:1f:6c:23:27:38:79:3e:a4:e2:84:fc:10:d6:26:
         ac:6f:05:28:26:6e:2f:d4:d4:fe:ab:ac:c0:b5:2e:3b:e1:f8:
         07:fd:bb:02:79:22:dc:c3:04:1b:1f:f6:57:62:25:53:c0:89:
         3b:5f:b4:4a:02:3e:84:f1:89:98:63:be:e0:4d:66:04:32:19:
         54:70:0e:c2:57:68:86:0d:ed:2c:b2:2e:24:d7:53:d5:dc:53:
         1a:2e:25:71:1a:99:1b:67:91:e3:95:d2:a7:2b:7b:8b:55:04:
         a3:2b:7e:b4:8e:f7:2e:9e:ca:b9:25:c7:13:e0:55:6f:45:d6:
         80:82:29:13:d8:3a:a0:1f:61:3a:92:45:4b:3c:30:23:7e:55:
         1e:00:8b:f2:75:da:42:f0:e6:d8:5c:2c:01:61:8a:1a:55:c2:
         19:b0:13:39:45:3b:1f:12:87:04:56:0f:5d:d1:c6:6a:15:d4:
         c9:20:70:04:83:3c:67:81:a8:32:27:c9:ba:2b:05:11:b2:b7:
         05:f1:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:11 2024 by rpki-client on console-ams.rpki-client.org