Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/cxBeu_3lbb9qBCpd_TOwVWFbYSo.roa
File:                     cxBeu_3lbb9qBCpd_TOwVWFbYSo.roa (raw, json)
Hash identifier:          nRLDz9ZxyPxWouMKrwcnMWBCWhwjl4pi20A9Rz7pRgw=
Subject key identifier:   73:10:5E:BB:FD:E5:6D:BF:6A:04:2A:5D:FD:33:B0:55:61:5B:61:2A
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       03B254
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/cxBeu_3lbb9qBCpd_TOwVWFbYSo.roa
Signing time:             Mon 09 May 2022 20:55:28 +0000
ROA not before:           Mon 09 May 2022 20:55:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44486
IP address blocks:        62.68.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242260 (0x3b254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: May  9 20:55:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73105ebbfde56dbf6a042a5dfd33b055615b612a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:80:1b:9e:c3:8d:fd:2e:cc:f3:ca:68:d1:
                    aa:b3:42:88:cb:f0:f5:2f:f9:05:2a:1e:4d:7f:3e:
                    19:eb:ec:a8:0b:f2:3a:fa:51:69:0b:47:b2:64:cb:
                    b5:e8:82:ce:32:b8:f6:0b:a7:6e:d4:a2:2a:ef:8e:
                    65:5c:2a:72:d6:b7:6f:ff:a8:94:d4:eb:45:48:7b:
                    a7:c2:c3:81:69:50:8f:00:41:8c:22:05:33:45:a1:
                    b7:fd:7b:83:47:69:0a:e6:30:c8:c1:d7:73:60:56:
                    4b:9e:ed:33:35:66:27:74:fa:44:c3:be:40:02:be:
                    21:09:b5:5a:d0:43:c4:13:28:f1:b4:03:43:fe:08:
                    93:21:52:cc:f2:f2:57:bf:21:6c:6d:d5:ac:96:01:
                    dc:b0:fa:de:71:12:ba:4f:cd:30:f0:6a:60:64:7c:
                    c7:3e:e6:04:49:8f:2b:b4:ce:d6:17:94:98:a7:8c:
                    6d:fc:91:cd:2d:d8:af:7e:55:96:70:0d:c9:4d:95:
                    1b:d7:66:37:58:0b:0b:46:7e:14:20:4e:ea:4e:6b:
                    d5:3e:2d:bc:1c:f9:b9:07:71:4c:fe:f4:18:0a:b0:
                    b6:e4:95:d1:ea:cc:ba:7b:1e:ef:d3:c4:88:e9:65:
                    89:3e:f8:dc:27:98:06:5f:27:26:7f:ec:07:04:99:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:10:5E:BB:FD:E5:6D:BF:6A:04:2A:5D:FD:33:B0:55:61:5B:61:2A
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/cxBeu_3lbb9qBCpd_TOwVWFbYSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:04:99:23:3e:e6:c8:91:34:ac:25:a7:76:10:7f:92:1c:a5:
         7b:c9:4c:c4:4f:a5:34:f4:e8:12:d7:6c:38:f5:13:21:70:2f:
         b7:4b:72:6c:a4:3b:18:b1:d7:c0:3a:21:75:54:c2:aa:5d:3c:
         14:bc:5c:b3:a7:60:21:04:6c:85:f2:01:91:1b:8a:b2:43:06:
         20:d7:28:48:47:bb:24:b6:2b:7d:72:8d:d1:7a:df:e3:b8:aa:
         71:fd:48:27:8a:27:71:24:ce:40:e2:26:eb:1a:0d:dd:8f:ac:
         45:f0:5b:3d:27:d8:59:39:4b:75:c8:97:b4:28:c4:ad:83:6c:
         d3:60:15:a8:89:13:4c:fa:20:9d:6e:cb:7b:c7:53:c9:c1:2f:
         a2:e0:84:00:e5:f4:ec:46:b1:a1:47:47:bf:0b:b7:c1:5b:47:
         b9:8f:fe:7b:4e:e7:e4:4a:b3:e5:43:8b:64:06:dc:d0:c5:19:
         e1:6e:0f:9d:34:3a:82:a3:7f:ae:0c:86:96:ac:9f:13:66:3c:
         d0:be:a4:90:f8:b8:4d:95:3f:a6:05:20:b4:0a:02:af:75:50:
         a0:0a:79:5f:fa:b9:15:87:26:b0:a3:b5:b7:f1:5d:c4:8c:70:
         8e:f6:c2:61:f4:0b:b6:27:cc:d8:2f:6e:05:df:63:2a:c9:dc:
         1e:49:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:24 2024 by rpki-client on console-ams.rpki-client.org