Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/RtOswf9Z5Houm_1M8uH376loF3o.roa
File:                     RtOswf9Z5Houm_1M8uH376loF3o.roa (raw, json)
Hash identifier:          A5PtB/XNC/zEJiCmOi45Z/XXgwJSJKeBrLgKAFtHH8Y=
Subject key identifier:   46:D3:AC:C1:FF:59:E4:7A:2E:9B:FD:4C:F2:E1:F7:EF:A9:68:17:7A
Certificate issuer:       /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial:       0122C5
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/RtOswf9Z5Houm_1M8uH376loF3o.roa
Signing time:             Mon 21 Mar 2022 17:42:57 +0000
ROA not before:           Mon 21 Mar 2022 17:42:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        62.106.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74437 (0x122c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
        Validity
            Not Before: Mar 21 17:42:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46d3acc1ff59e47a2e9bfd4cf2e1f7efa968177a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:cd:a1:d7:0c:3d:49:38:c9:07:0b:7a:8b:
                    84:d8:d7:ec:39:95:29:a4:d5:92:e3:75:61:fb:62:
                    60:d3:76:c4:c6:f7:af:b7:90:57:d1:e4:84:3e:ff:
                    5d:55:50:ec:e5:3c:99:94:f3:f7:61:ef:7d:40:00:
                    6b:1b:5f:0c:29:c2:4f:e4:67:8f:5c:2f:cb:a9:6d:
                    96:13:e1:81:63:24:93:8e:fe:8d:bb:c7:bd:97:b1:
                    f8:08:2f:a3:d3:7d:4e:95:dd:5d:ac:5f:fe:ec:8e:
                    3e:23:af:36:79:31:cf:30:ac:83:a0:89:14:8e:5c:
                    f1:c2:ca:56:3d:1b:2c:10:ce:48:35:bb:a9:3d:d1:
                    21:1a:10:ad:a5:86:53:27:e9:23:ed:68:9a:0c:4f:
                    07:ab:1f:43:33:65:1b:87:04:64:c4:0b:87:38:e2:
                    a5:37:1d:10:00:82:93:39:e9:cd:8f:2b:64:b8:09:
                    ed:79:f2:6e:d3:06:38:74:a5:76:e7:8d:96:42:82:
                    2b:8f:87:1f:17:a4:81:f5:c8:8c:04:66:67:f6:9f:
                    d5:17:52:b3:87:2e:98:44:7f:b6:99:c6:6f:b0:64:
                    3f:95:a6:9a:ce:a5:9c:9a:bc:47:08:d3:99:77:9e:
                    f7:ca:8e:74:c7:3d:cf:06:db:ff:5b:d0:dd:a1:b0:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:AC:C1:FF:59:E4:7A:2E:9B:FD:4C:F2:E1:F7:EF:A9:68:17:7A
            X509v3 Authority Key Identifier:
                keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/RtOswf9Z5Houm_1M8uH376loF3o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:66:8f:a6:f6:9f:2f:23:cd:f3:b4:61:e4:9e:b8:8a:88:5c:
         fd:91:35:ea:7b:45:71:3d:be:1b:ef:24:29:12:1f:10:1c:73:
         b8:75:86:7e:e5:67:45:19:73:6b:59:3a:ca:51:5d:16:7c:4a:
         5c:56:dd:de:29:56:e5:17:45:d9:80:66:0f:02:3d:6d:8c:b8:
         4a:89:0f:5d:96:b9:e4:df:62:28:ac:d3:03:60:f0:7a:f1:c1:
         ab:92:d8:7b:78:1b:fd:10:68:e1:5a:db:19:ea:3b:c3:2e:17:
         18:d1:d3:52:3f:27:55:9f:fa:dd:72:c2:f8:72:ed:b5:f4:f7:
         0b:e2:5c:c7:c0:28:61:4e:17:b4:a3:bb:b5:27:ae:bb:c9:1e:
         3b:94:a5:92:e0:71:69:0e:e0:f7:d4:f1:f5:f6:01:b7:17:c7:
         3a:8c:3d:b7:e2:82:a2:6e:03:76:9a:bf:48:ff:88:ab:d2:01:
         01:57:15:c8:1d:50:ef:95:75:4c:cd:fa:49:b4:67:c7:a6:4b:
         ee:21:f6:fa:34:b7:f6:d7:29:84:2f:5b:ab:f0:e0:37:2c:6a:
         67:ce:a5:f9:a2:39:9e:40:c1:a4:7f:4a:53:25:3a:e6:02:17:
         8f:07:9a:e8:77:9f:d4:41:bb:7b:aa:a0:5a:f0:36:1b:ee:e1:
         56:68:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:47 2023 by rpki-client on console-ams.rpki-client.org