Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/H-IJLYSeiY-pvgLI_zLwe0ZGbZY.roa
File:                     H-IJLYSeiY-pvgLI_zLwe0ZGbZY.roa (raw, json)
Hash identifier:          D2JNm+8Vo5CwTN6V1C1mHXWdAsTOZ0t+YVM6qRUY+Xw=
Subject key identifier:   1F:E2:09:2D:84:9E:89:8F:A9:BE:02:C8:FF:32:F0:7B:46:46:6D:96
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       0185698FAE52FF5AAB403489AE3A4920DD90
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/H-IJLYSeiY-pvgLI_zLwe0ZGbZY.roa
Signing time:             Sat 31 Dec 2022 19:01:41 +0000
ROA not before:           Sat 31 Dec 2022 19:01:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58299
IP address blocks:        185.62.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:69:8f:ae:52:ff:5a:ab:40:34:89:ae:3a:49:20:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Dec 31 19:01:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1fe2092d849e898fa9be02c8ff32f07b46466d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:8f:f7:41:ea:a3:db:9b:fe:ec:7f:39:47:
                    a0:78:16:ac:ff:5d:4d:38:25:45:a3:6b:26:aa:c5:
                    37:f2:f2:96:b7:9b:26:b9:45:29:f6:94:3e:49:42:
                    8b:cf:5c:68:ab:2f:0f:ff:53:d9:e0:b8:38:8b:73:
                    43:05:01:52:48:30:f8:7f:c1:70:e0:48:f4:b7:a3:
                    8e:ff:21:9c:af:da:b3:c5:0b:6f:42:cc:32:f9:6b:
                    e6:c8:42:41:50:07:d6:c5:fd:1a:14:43:6d:20:6a:
                    83:98:6f:78:9a:2c:f5:c0:4a:00:53:2c:f9:08:0d:
                    b6:76:fd:f7:2c:74:8e:97:36:ef:f3:06:51:b2:33:
                    f4:34:7a:14:a0:00:c2:51:71:49:7a:bd:63:7d:4c:
                    c2:42:20:1b:6a:1a:e4:0b:fc:c0:69:6c:37:d0:12:
                    21:e3:9a:62:73:2d:50:40:dc:61:6f:a9:96:9e:9d:
                    00:6a:69:69:b1:05:57:36:51:7c:57:f0:4f:cf:5a:
                    0c:17:54:26:55:68:49:c4:ae:1c:ce:48:a5:74:3d:
                    47:8c:0f:c6:44:2e:eb:39:95:b1:26:81:72:ae:ee:
                    c4:c5:8a:80:aa:e2:28:98:b7:72:30:fd:7a:d9:5f:
                    ce:5c:76:af:6e:d3:7d:e3:90:da:dd:7c:bc:d9:71:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E2:09:2D:84:9E:89:8F:A9:BE:02:C8:FF:32:F0:7B:46:46:6D:96
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/H-IJLYSeiY-pvgLI_zLwe0ZGbZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:be:eb:a1:4a:a2:72:79:33:cb:9a:95:a7:fe:b9:61:48:
         27:a0:23:ae:b2:b6:d8:18:59:32:94:e5:1c:2e:dc:2c:de:3b:
         ec:43:a5:b3:53:20:7a:f5:ac:10:06:bd:49:b0:b2:39:d1:3f:
         5c:1c:f7:b7:89:ca:53:37:2b:27:ae:77:9b:63:97:6f:59:eb:
         46:7d:a9:dc:c8:33:ab:d3:51:4d:f8:7a:30:c4:bb:d5:d8:29:
         f2:64:39:66:ab:b0:d3:86:d6:3c:f3:ef:8e:ea:55:50:66:6c:
         ec:66:b5:20:55:be:c4:4a:38:0b:36:80:08:49:8b:43:49:ec:
         a9:4f:8e:f5:4d:fa:93:4f:2b:3c:f0:3e:ba:6c:d7:ec:0b:55:
         2d:d7:6a:0e:e0:4b:3d:38:92:8d:01:19:ad:6d:e4:4e:88:2d:
         ed:eb:0b:67:97:a0:96:37:86:14:76:b3:58:31:3b:3b:a2:08:
         fb:35:a6:f9:f1:4e:72:e7:ed:6b:ba:5f:eb:cc:af:ab:bd:c7:
         07:55:02:1c:d8:76:19:92:4c:e9:16:70:f9:d5:50:83:e7:ab:
         dc:6b:7a:08:a2:c6:69:c2:e1:ea:d8:45:32:6a:4f:d7:af:26:
         53:25:16:fe:fa:85:8a:6d:95:14:5b:32:4a:e8:23:eb:9f:17:
         dc:db:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:12 2024 by rpki-client on console-ams.rpki-client.org