Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Eu2JsG9wDDcu0Y2zULJ0HE8xw5o.roa
File:                     Eu2JsG9wDDcu0Y2zULJ0HE8xw5o.roa (raw, json)
Hash identifier:          pKUGwM1cX6rFSvudi/ez9JxXJmzwqHStTuyLPm6K0IE=
Subject key identifier:   12:ED:89:B0:6F:70:0C:37:2E:D1:8D:B3:50:B2:74:1C:4F:31:C3:9A
Certificate issuer:       /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial:       05E2D187
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Eu2JsG9wDDcu0Y2zULJ0HE8xw5o.roa
Signing time:             Sat 01 Jan 2022 14:07:36 +0000
ROA not before:           Sat 01 Jan 2022 14:07:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59766
IP address blocks:        185.51.168.0/22 maxlen: 22
                          89.148.128.0/18 maxlen: 18
                          62.69.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98750855 (0x5e2d187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
        Validity
            Not Before: Jan  1 14:07:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12ed89b06f700c372ed18db350b2741c4f31c39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:01:5f:b7:1a:16:b8:55:bd:bd:8b:ae:67:
                    2a:7d:14:22:39:ba:4b:13:a2:bc:28:df:51:b8:d3:
                    08:48:59:7b:a1:19:5f:28:70:fa:ed:1b:dd:e0:46:
                    d0:74:63:ad:5c:a5:cd:02:d2:85:80:61:eb:c5:6c:
                    94:67:db:fa:25:0b:32:4b:67:88:7b:27:16:85:45:
                    38:5c:71:ff:0e:49:82:16:ac:ba:3c:97:83:23:99:
                    2f:0a:39:72:b1:dd:7d:71:d3:dd:a4:12:21:30:90:
                    38:7f:fb:e6:b3:86:0b:fb:04:b4:a9:6e:f9:8e:f3:
                    b6:30:97:f9:72:a1:42:e4:70:f6:66:80:05:89:00:
                    1a:d1:3a:ff:4a:5f:23:d8:11:4a:41:aa:a6:5d:10:
                    21:4f:70:f9:39:b5:8b:17:3c:0b:67:09:77:9f:1c:
                    90:a7:fc:d9:11:7f:b5:14:05:44:e7:f3:2d:0d:7e:
                    83:9b:23:20:76:16:7a:e4:c0:5f:71:79:f8:98:ee:
                    ad:27:cb:af:01:96:4a:2f:e6:26:5d:d1:be:ba:ae:
                    73:6c:8f:9a:e1:aa:e8:70:16:30:c2:2c:c9:d2:17:
                    c1:54:e9:78:fb:3d:19:45:b3:f8:dc:55:ef:f6:01:
                    42:23:94:a1:57:d1:a0:b3:ea:26:7a:a1:60:97:33:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:ED:89:B0:6F:70:0C:37:2E:D1:8D:B3:50:B2:74:1C:4F:31:C3:9A
            X509v3 Authority Key Identifier:
                keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Eu2JsG9wDDcu0Y2zULJ0HE8xw5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.69.128.0/21
                  89.148.128.0/18
                  185.51.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:b8:dc:be:54:c9:3b:1e:d2:5b:3c:a9:41:79:89:3d:18:
         ad:ee:1e:13:5f:cc:51:f3:86:38:20:9e:50:98:90:d9:2d:2b:
         bf:a0:91:2b:31:ca:45:8f:4e:5a:c4:29:02:4f:5b:39:f2:59:
         d6:a9:50:e8:e5:29:94:8a:1e:d3:0c:67:f0:e2:87:ba:ea:e7:
         e3:a3:28:b7:67:7b:9e:98:e0:5a:a8:1e:ac:00:48:d1:9d:b2:
         3c:12:e7:9e:32:ec:9d:69:f7:28:c7:d2:56:57:a4:f7:e3:d6:
         2f:ce:be:b4:5c:f0:1e:0c:05:84:4d:d8:ce:2d:53:6a:81:3f:
         8d:51:ca:8b:15:b0:7f:9d:d2:26:e2:08:39:ee:4b:bf:3f:e9:
         d8:69:f6:01:7e:7e:09:fa:bd:64:24:ea:7a:6f:9e:f3:5f:c2:
         b2:dd:81:0c:b8:e6:bb:e3:8c:42:4e:8d:cb:f9:c3:63:d8:23:
         57:f7:08:2e:96:dd:a4:52:c5:01:38:10:29:3f:62:75:7f:10:
         db:b3:ef:93:be:07:82:f3:59:64:8c:f7:48:2d:72:76:a4:7c:
         53:3c:68:37:70:fe:59:70:be:68:a3:1c:f6:de:6f:7a:2b:44:
         56:a2:0e:cc:75:a4:ba:5a:aa:ca:91:e6:b7:92:b9:3d:da:e3:
         51:22:ef:3b
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBeLRhzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NmJmYzY1NzZmZjQyODdhODhlOWRlM2UyMTBiOWVjMGUxMTFiNWFkMB4XDTIyMDEw
MTE0MDczNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJlZDg5YjA2Zjcw
MGMzNzJlZDE4ZGIzNTBiMjc0MWM0ZjMxYzM5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFkAV+3Gha4Vb29i65nKn0UIjm6SxOivCjfUbjTCEhZe6EZ
Xyhw+u0b3eBG0HRjrVylzQLShYBh68VslGfb+iULMktniHsnFoVFOFxx/w5Jghas
ujyXgyOZLwo5crHdfXHT3aQSITCQOH/75rOGC/sEtKlu+Y7ztjCX+XKhQuRw9maA
BYkAGtE6/0pfI9gRSkGqpl0QIU9w+Tm1ixc8C2cJd58ckKf82RF/tRQFROfzLQ1+
g5sjIHYWeuTAX3F5+JjurSfLrwGWSi/mJl3Rvrquc2yPmuGq6HAWMMIsydIXwVTp
ePs9GUWz+NxV7/YBQiOUoVfRoLPqJnqhYJczYBkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQS7Ymwb3AMNy7RjbNQsnQcTzHDmjAfBgNVHSMEGDAWgBQWv8ZXb/Qoeojp
3j4hC57A4RG1rTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZyX0dWMl8wS0hxSTZkNC1JUXVld09FUnRhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvOTI5M2NmLTI5MzktNDg2ZS1iOGY4LWM1OGE5ZDVjNzUzNC8x
L0V1MkpzRzl3RERjdTBZMnpVTEowSEU4eHc1by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
OTI5M2NmLTI5MzktNDg2ZS1iOGY4LWM1OGE5ZDVjNzUzNC8xL0ZyX0dWMl8wS0hx
STZkNC1JUXVld09FUnRhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAz5FgAMEBlmUgAMEArkzqDANBgkq
hkiG9w0BAQsFAAOCAQEAO9u43L5UyTse0ls8qUF5iT0Yre4eE1/MUfOGOCCeUJiQ
2S0rv6CRKzHKRY9OWsQpAk9bOfJZ1qlQ6OUplIoe0wxn8OKHuurn46Mot2d7npjg
WqgerABI0Z2yPBLnnjLsnWn3KMfSVlek9+PWL86+tFzwHgwFhE3Yzi1TaoE/jVHK
ixWwf53SJuIIOe5Lvz/p2Gn2AX5+Cfq9ZCTqem+e81/Cst2BDLjmu+OMQk6Ny/nD
Y9gjV/cILpbdpFLFATgQKT9idX8Q27Pvk74HgvNZZIz3SC1ydqR8UzxoN3D+WXC+
aKMc9t5veitEVqIOzHWkulqqypHmt5K5PdrjUSLvOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:18 2024 by rpki-client on console-ams.rpki-client.org