Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/H82GrGSWBrQ70rOx3k3-nfY83Hc.roa
File:                     H82GrGSWBrQ70rOx3k3-nfY83Hc.roa (raw, json)
Hash identifier:          CiUmF/hUM51r9zbJQq1S9T2PSZuJockJ6L3Te9+EpG0=
Subject key identifier:   1F:CD:86:AC:64:96:06:B4:3B:D2:B3:B1:DE:4D:FE:9D:F6:3C:DC:77
Certificate issuer:       /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial:       02A364C4
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/H82GrGSWBrQ70rOx3k3-nfY83Hc.roa
Signing time:             Sun 23 Jan 2022 08:44:31 +0000
ROA not before:           Sun 23 Jan 2022 08:44:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48440
IP address blocks:        62.122.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44262596 (0x2a364c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
        Validity
            Not Before: Jan 23 08:44:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1fcd86ac649606b43bd2b3b1de4dfe9df63cdc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:18:06:25:17:16:0c:96:78:cc:db:aa:64:
                    98:e8:cd:85:c0:99:d7:44:9d:66:31:92:ce:c8:10:
                    c3:6e:2d:e6:1f:2a:83:d4:b4:96:97:ea:d9:87:26:
                    a0:07:30:03:2e:de:11:af:b1:2e:30:f8:9e:d3:08:
                    8f:53:0d:e3:41:e8:9e:1e:25:cb:9d:24:99:16:46:
                    6e:13:20:d5:2f:89:53:83:eb:44:a4:bb:b7:6e:19:
                    c7:29:22:ca:bb:b9:da:56:9b:3e:09:5c:79:f9:f5:
                    73:95:4a:1d:42:c6:74:12:0e:f1:59:3c:20:81:4a:
                    69:f5:ab:ad:85:31:92:b0:5e:c1:a5:47:45:e6:61:
                    0f:cd:99:57:92:03:36:0b:37:d4:a7:79:3a:ec:63:
                    22:2a:45:8e:70:95:dd:6d:45:4c:82:54:64:2e:f8:
                    b6:f4:a7:ba:a8:72:d2:2d:f1:df:68:05:a2:a6:7e:
                    ff:00:93:0d:8c:06:b6:81:cc:c3:a4:f6:7a:38:9d:
                    63:a7:04:cd:01:49:e7:c4:ac:44:9c:33:05:f2:45:
                    b6:2e:5b:24:0b:49:79:7c:e3:30:2f:b4:40:9f:bc:
                    b0:bd:36:8f:f6:c9:78:ad:a6:84:0c:06:82:34:ad:
                    94:56:db:72:ea:72:cd:5a:66:b1:b3:20:54:db:e4:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CD:86:AC:64:96:06:B4:3B:D2:B3:B1:DE:4D:FE:9D:F6:3C:DC:77
            X509v3 Authority Key Identifier:
                keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/H82GrGSWBrQ70rOx3k3-nfY83Hc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:64:8d:b6:bb:ae:18:f2:fa:2f:84:32:14:1e:28:f9:6c:
         bd:91:a8:45:59:88:16:9a:08:7f:dd:81:3f:4b:b8:a1:56:94:
         b2:cf:b0:90:9c:89:92:70:c5:1f:0e:f6:35:90:07:cf:cf:30:
         95:9e:4b:cc:ea:24:20:c1:12:61:b8:dd:0e:d4:eb:3e:2e:dc:
         f7:2c:8a:02:65:5f:0a:88:57:17:8a:44:2e:d3:b0:08:44:a8:
         0d:7d:b7:f8:e2:4f:9f:eb:aa:c8:b4:b8:d4:59:c8:ba:74:96:
         f4:0f:03:8c:22:df:24:c4:0c:f3:97:25:11:79:38:f6:cb:9a:
         98:cd:ab:72:11:0a:17:b3:f2:57:9f:1b:21:65:f9:9c:7c:87:
         26:22:a3:5c:98:84:30:86:94:36:4b:89:4f:8f:0a:73:e0:a8:
         de:e2:0b:c1:e7:3a:96:8c:e3:25:62:60:5c:7d:a3:4c:2d:f0:
         0f:57:be:f4:44:76:73:4e:2b:74:be:d9:41:50:dd:a8:54:fc:
         e8:b1:5c:58:39:30:eb:af:c3:88:eb:38:9f:e1:78:62:af:76:
         cc:0f:6f:6b:be:41:55:35:f9:6d:37:c2:9c:99:8f:cf:3b:ef:
         e8:c9:8f:01:2f:2a:10:70:3d:55:d1:46:57:f5:38:1f:f5:87:
         38:86:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org