Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Fq2DtbTH3wdmmlwo7MSxy2ftIEY.roa
File:                     Fq2DtbTH3wdmmlwo7MSxy2ftIEY.roa (raw, json)
Hash identifier:          V67ku/2jECjbOxUkSMvM7J+fch3yjcMcwwtnNZpRTlc=
Subject key identifier:   16:AD:83:B5:B4:C7:DF:07:66:9A:5C:28:EC:C4:B1:CB:67:ED:20:46
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0A2CB65F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Fq2DtbTH3wdmmlwo7MSxy2ftIEY.roa
Signing time:             Thu 24 Mar 2022 10:49:56 +0000
ROA not before:           Thu 24 Mar 2022 10:49:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48266
IP address blocks:        92.118.205.0/24 maxlen: 24
                          92.118.206.0/24 maxlen: 24
                          92.118.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170702431 (0xa2cb65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Mar 24 10:49:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16ad83b5b4c7df07669a5c28ecc4b1cb67ed2046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:1e:dd:40:63:c1:d1:e2:b0:be:d4:29:38:
                    67:f4:ee:09:2d:3e:c4:a0:af:10:e7:9e:13:fc:ad:
                    4e:8d:4e:2f:8a:85:f1:3c:cf:70:11:ed:b9:b5:1b:
                    46:30:37:f9:35:ff:30:d7:e4:56:a9:5c:7a:e4:32:
                    4f:ab:cf:df:f8:33:af:27:0f:49:48:a4:d5:04:67:
                    a8:4e:30:49:88:01:db:33:7e:d3:c2:bb:77:52:98:
                    0a:49:2e:21:11:60:3d:3e:76:fd:35:ee:8f:83:4a:
                    b4:6c:dc:56:4b:f2:23:9c:c1:a5:1a:07:27:ab:08:
                    14:b6:00:99:05:d0:71:7b:97:5c:3c:51:ca:b5:0b:
                    33:aa:a5:a5:99:f3:4e:22:b1:08:18:e9:05:3f:64:
                    a5:0c:10:c6:94:1f:39:f4:e3:fd:b0:8f:13:2e:6c:
                    2e:3b:2b:d5:3e:9a:5d:26:22:09:9c:d5:62:fc:d1:
                    36:dd:c9:72:a3:ec:40:60:cc:a9:ad:a3:5d:62:1b:
                    40:19:71:93:4a:c0:07:67:53:58:e1:ba:9c:7e:3a:
                    0e:f8:91:02:1d:7d:eb:de:16:44:55:0c:c0:59:77:
                    93:9e:f0:55:45:dd:49:13:a7:00:56:57:d4:c4:21:
                    65:29:8b:3a:39:46:f5:93:aa:99:01:e4:37:13:5f:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:83:B5:B4:C7:DF:07:66:9A:5C:28:EC:C4:B1:CB:67:ED:20:46
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Fq2DtbTH3wdmmlwo7MSxy2ftIEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.204.0-92.118.206.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:a6:78:b3:43:32:ee:4b:3b:a8:56:07:e1:66:d8:b9:51:
         9c:b3:ec:4e:e4:58:db:15:e4:7a:99:8b:46:65:5d:30:0c:69:
         28:1a:a1:9d:43:72:12:84:ac:8d:ed:31:b1:4c:47:6b:ec:e2:
         da:6f:6b:1a:b6:5d:00:62:a5:dc:4a:f0:ca:3c:00:1c:4a:56:
         9b:bb:2e:be:ab:4a:33:3b:68:00:f4:88:be:98:25:d2:d8:3e:
         5a:58:80:31:61:2c:0a:a6:a9:85:e2:d4:79:8d:6d:dd:72:36:
         a1:17:c6:79:f9:6a:56:d5:ee:ec:9b:52:57:4d:df:05:b0:57:
         5d:2c:d2:40:57:13:c1:cd:c2:35:69:da:05:c7:48:b0:95:00:
         92:66:d4:4e:70:e2:94:7a:8a:0a:12:3a:34:11:83:d0:4c:55:
         a1:82:1d:9f:a0:8c:7e:b4:1e:00:d9:66:87:fe:e4:09:3d:8b:
         8b:2b:67:73:ac:5d:35:c7:54:2c:60:66:06:82:0a:93:b5:f2:
         2c:9c:7c:c1:34:fa:e5:c4:87:80:c4:7b:34:1a:e8:f1:3a:78:
         4e:44:d4:d5:0d:aa:cd:a2:28:f1:7c:2d:3b:61:86:ce:c6:f4:
         6b:68:73:7c:c3:bc:85:ad:64:27:ea:4e:43:96:84:25:9e:62:
         f3:3b:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org