Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Fur1Gd7X2SI1iCexAaVvhju27qg.roa
File:                     Fur1Gd7X2SI1iCexAaVvhju27qg.roa (raw, json)
Hash identifier:          qHKaoUFFie9CqHee3rxPNX+E/p7M4OLrw12yjpPH8U4=
Subject key identifier:   16:EA:F5:19:DE:D7:D9:22:35:88:27:B1:01:A5:6F:86:3B:B6:EE:A8
Certificate issuer:       /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial:       0589F164
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Fur1Gd7X2SI1iCexAaVvhju27qg.roa
Signing time:             Tue 15 Feb 2022 17:12:08 +0000
ROA not before:           Tue 15 Feb 2022 17:12:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1273
IP address blocks:        195.92.0.0/16 maxlen: 16
                          195.80.64.0/19 maxlen: 19
                          194.112.64.0/18 maxlen: 18
                          194.6.64.0/19 maxlen: 19
                          194.205.0.0/16 maxlen: 16
                          62.208.0.0/16 maxlen: 16
                          194.6.0.0/18 maxlen: 18
                          213.38.0.0/16 maxlen: 16
                          217.134.0.0/15 maxlen: 15
                          195.10.0.0/18 maxlen: 18
                          212.165.0.0/19 maxlen: 19
                          193.164.160.0/19 maxlen: 19
                          194.176.128.0/19 maxlen: 19
                          195.144.128.0/19 maxlen: 19
                          212.158.0.0/17 maxlen: 17
                          185.204.4.0/22 maxlen: 22
                          213.12.0.0/16 maxlen: 16
                          195.44.0.0/16 maxlen: 16
                          217.135.0.0/16 maxlen: 16
                          195.2.0.0/19 maxlen: 19
                          62.221.0.0/19 maxlen: 19
                          194.221.0.0/16 maxlen: 16
                          62.25.64.0/18 maxlen: 18
                          195.59.0.0/16 maxlen: 16
                          195.27.0.0/16 maxlen: 16
                          194.152.64.0/19 maxlen: 19
                          194.177.160.0/19 maxlen: 19
                          213.185.192.0/19 maxlen: 19
                          212.137.0.0/16 maxlen: 16
                          2001:5000::/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92926308 (0x589f164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
        Validity
            Not Before: Feb 15 17:12:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16eaf519ded7d922358827b101a56f863bb6eea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:d4:d6:f6:2b:09:1e:fc:44:85:ed:71:1b:
                    bf:f0:1e:7a:37:74:77:4c:ec:d4:d6:85:38:e8:54:
                    81:93:63:8d:76:ee:a3:ef:5c:15:1d:ce:00:66:58:
                    cb:84:c3:13:f7:57:e4:f3:63:05:c2:ab:5a:f6:97:
                    16:1d:e9:6a:e8:61:91:2e:95:9a:8a:ab:26:9b:dd:
                    39:32:6b:98:aa:62:11:39:a1:c8:15:6a:11:85:f6:
                    df:8f:68:a5:1d:08:df:1f:68:45:d6:15:76:eb:06:
                    38:8d:c7:da:20:9f:e6:55:b9:f5:d2:f5:7e:95:e3:
                    37:c4:8e:ab:f6:13:17:7d:a2:09:77:66:3f:22:7c:
                    7c:ea:f3:ff:ed:75:7f:b3:d5:7b:e9:70:b8:cb:78:
                    c9:28:a6:4f:6b:e3:4e:5c:c5:50:76:6e:da:f1:16:
                    72:bf:0d:d4:a3:a6:15:86:19:a6:ed:a9:32:cc:06:
                    e8:cf:8a:98:43:a5:2a:2e:5a:43:0e:07:1c:b4:44:
                    63:da:c0:73:05:ac:bc:8a:e0:34:1c:4d:60:0c:db:
                    97:87:f6:ac:e1:7b:14:88:bf:40:5d:b3:44:77:80:
                    d3:6d:ff:1e:41:93:db:14:b7:e5:1d:79:05:fb:21:
                    01:95:93:b6:ed:00:df:9e:f2:b8:04:23:af:88:62:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EA:F5:19:DE:D7:D9:22:35:88:27:B1:01:A5:6F:86:3B:B6:EE:A8
            X509v3 Authority Key Identifier:
                keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/Fur1Gd7X2SI1iCexAaVvhju27qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.25.64.0/18
                  62.208.0.0/16
                  62.221.0.0/19
                  185.204.4.0/22
                  193.164.160.0/19
                  194.6.0.0-194.6.95.255
                  194.112.64.0/18
                  194.152.64.0/19
                  194.176.128.0/19
                  194.177.160.0/19
                  194.205.0.0/16
                  194.221.0.0/16
                  195.2.0.0/19
                  195.10.0.0/18
                  195.27.0.0/16
                  195.44.0.0/16
                  195.59.0.0/16
                  195.80.64.0/19
                  195.92.0.0/16
                  195.144.128.0/19
                  212.137.0.0/16
                  212.158.0.0/17
                  212.165.0.0/19
                  213.12.0.0/16
                  213.38.0.0/16
                  213.185.192.0/19
                  217.134.0.0/15
                IPv6:
                  2001:5000::/21

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:13:7e:2c:e6:bd:08:98:45:de:93:bb:06:c6:61:4a:cc:
         bf:76:75:42:e1:63:51:00:26:5c:a8:1d:43:f7:0e:24:50:dc:
         ad:6e:78:8a:77:1a:e5:cc:1c:5a:68:ea:d3:cf:71:04:14:ed:
         ac:b6:19:c4:8c:b7:8d:61:18:4c:bf:36:38:3c:7e:fb:5d:1c:
         ce:7e:d0:e7:24:a6:f8:29:77:ac:7e:e1:38:cf:0e:b3:43:d4:
         b0:14:75:b6:e4:0d:47:ce:0f:8b:85:c1:0b:04:f6:9e:82:22:
         0d:85:f1:57:4b:a7:54:ba:65:3a:67:e1:31:3a:10:b5:ca:3e:
         ab:d6:66:3d:45:81:9d:de:6a:47:7f:ce:f8:8c:a6:8f:aa:3e:
         63:04:10:fe:6c:ce:b1:eb:24:59:46:af:ef:72:3e:de:05:fb:
         e8:82:c5:de:e3:81:fb:38:3f:5e:6a:06:42:28:3f:30:3f:f1:
         c0:a7:06:01:d1:e0:5b:9c:2e:4c:e4:48:7c:c6:d8:d2:63:15:
         30:ce:2e:da:6a:cf:0b:0a:4b:c3:f2:cd:56:3e:29:9f:3b:25:
         63:bc:b1:fc:cf:9a:2f:25:4c:af:78:46:ab:2d:2b:4e:cf:83:
         67:41:6c:1a:42:8f:0f:d3:df:f9:d0:73:39:06:4c:5b:ee:ec:
         85:7e:6e:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:22 2024 by rpki-client on console-ams.rpki-client.org