Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/uAs8XlWHDtnqX0yor944JgP2YYI.roa
File:                     uAs8XlWHDtnqX0yor944JgP2YYI.roa (raw, json)
Hash identifier:          po4m0EHU5tBBGK2OMH4JDBSwQX0RDbEMzUFWsjjGwzg=
Subject key identifier:   B8:0B:3C:5E:55:87:0E:D9:EA:5F:4C:A8:AF:DE:38:26:03:F6:61:82
Certificate issuer:       /CN=9523182abbe906bcacc9524c8b3c1441fac836d1
Certificate serial:       219D
Authority key identifier: 95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSMYKrvpBrysyVJMizwUQfrINtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/uAs8XlWHDtnqX0yor944JgP2YYI.roa
Signing time:             Wed 26 Jan 2022 18:27:33 +0000
ROA not before:           Wed 26 Jan 2022 18:27:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        185.201.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8605 (0x219d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9523182abbe906bcacc9524c8b3c1441fac836d1
        Validity
            Not Before: Jan 26 18:27:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b80b3c5e55870ed9ea5f4ca8afde382603f66182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:5d:98:54:9a:3c:57:85:a4:c6:73:6c:86:
                    28:fc:35:f9:4b:c0:8a:ff:cb:9a:a8:72:c4:7c:f0:
                    1d:c0:90:b2:c6:07:b8:1f:01:b3:f2:06:11:c7:d5:
                    8b:88:aa:aa:cf:b0:a7:27:ba:59:ef:53:a1:61:d5:
                    62:61:86:93:53:a7:36:7f:a1:fa:a3:7c:55:e1:56:
                    12:fc:fa:ad:f6:cd:93:fd:cd:75:5d:07:1e:d2:c1:
                    44:4e:7c:a5:59:f8:d0:41:c9:2c:83:71:1c:e3:e8:
                    81:09:de:7e:82:8c:38:83:2e:5e:05:b9:11:05:cf:
                    19:1c:f2:d8:f8:68:c5:28:0d:82:c4:14:30:be:b3:
                    99:ef:5f:67:70:3a:0e:76:e2:c4:00:e8:dd:a2:80:
                    43:3f:90:a6:b4:3a:de:5d:d0:b0:67:7c:84:03:22:
                    01:0d:4d:8e:e7:47:86:ed:fd:dd:26:d3:cc:e1:c4:
                    80:41:08:94:01:5b:4d:f7:7b:e1:78:6c:1f:2f:f6:
                    6c:ee:85:67:7d:3a:8d:f2:99:d3:52:a0:bc:de:5b:
                    59:2a:ba:8e:d1:98:25:81:bc:80:06:e5:dc:48:f8:
                    85:55:27:d2:53:0b:eb:d7:a3:b4:cd:24:22:11:14:
                    c5:95:2a:d0:fa:67:e4:91:e3:7e:ab:7a:d9:f7:ee:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0B:3C:5E:55:87:0E:D9:EA:5F:4C:A8:AF:DE:38:26:03:F6:61:82
            X509v3 Authority Key Identifier:
                keyid:95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSMYKrvpBrysyVJMizwUQfrINtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/uAs8XlWHDtnqX0yor944JgP2YYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:6c:a6:ec:56:31:1f:89:6e:be:94:62:b7:8a:44:fe:ec:
         e6:ba:eb:c2:50:77:f6:8f:77:e2:e0:8d:9d:ac:17:22:82:32:
         e9:6d:e6:ef:c2:8e:fa:7e:17:c9:f4:1e:11:b5:7e:b0:8a:d6:
         29:c8:e1:01:4d:50:1b:81:43:9c:2f:69:27:e6:8d:19:4e:6f:
         8c:9c:a3:ea:e2:26:00:ec:d6:fb:24:f2:24:4a:b7:12:a2:14:
         93:77:b2:a1:7b:2c:1d:f1:0f:a2:47:fb:15:e4:46:92:bf:dc:
         a5:27:ac:3d:82:5f:66:2b:59:f9:fc:d8:9c:01:6a:ac:c0:8c:
         05:ac:b5:27:b9:18:15:90:15:30:59:de:af:22:71:5c:01:38:
         2f:d9:08:9b:a6:70:90:40:57:2c:3e:92:21:85:59:5e:ff:91:
         62:a1:dc:66:48:7a:e6:27:94:2d:8e:86:d0:7a:8d:72:bd:fa:
         fa:88:79:cd:bc:dd:3d:eb:1e:47:e0:18:ec:74:8d:be:d8:cb:
         56:1b:c8:66:d7:c2:51:40:93:48:dc:8f:a0:96:bb:70:ba:08:
         a4:67:b5:50:7e:d6:98:fc:c1:c0:58:23:bd:32:3d:04:07:5b:
         9d:f1:3e:b5:9a:d6:c3:c6:8b:e1:fd:40:76:40:9f:3d:6d:52:
         d8:3d:ac:62
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICIZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTUy
MzE4MmFiYmU5MDZiY2FjYzk1MjRjOGIzYzE0NDFmYWM4MzZkMTAeFw0yMjAxMjYx
ODI3MzNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGI4MGIzYzVlNTU4NzBl
ZDllYTVmNGNhOGFmZGUzODI2MDNmNjYxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCljF2YVJo8V4WkxnNshij8NflLwIr/y5qocsR88B3AkLLGB7gf
AbPyBhHH1YuIqqrPsKcnulnvU6Fh1WJhhpNTpzZ/ofqjfFXhVhL8+q32zZP9zXVd
Bx7SwUROfKVZ+NBBySyDcRzj6IEJ3n6CjDiDLl4FuREFzxkc8tj4aMUoDYLEFDC+
s5nvX2dwOg524sQA6N2igEM/kKa0Ot5d0LBnfIQDIgENTY7nR4bt/d0m08zhxIBB
CJQBW033e+F4bB8v9mzuhWd9Oo3ymdNSoLzeW1kquo7RmCWBvIAG5dxI+IVVJ9JT
C+vXo7TNJCIRFMWVKtD6Z+SR436retn37r7VAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUuAs8XlWHDtnqX0yor944JgP2YYIwHwYDVR0jBBgwFoAUlSMYKrvpBrysyVJM
izwUQfrINtEwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9s
U01ZS3J2cEJyeXN5VkpNaXp3VVFmcklOdEUuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2NjLzgwODMwMi1jOTgzLTQzZDUtYTc1Yy00ZTRlYzQyYWZkMDIvMS91
QXM4WGxXSER0bnFYMHlvcjk0NEpnUDJZWUkucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzgw
ODMwMi1jOTgzLTQzZDUtYTc1Yy00ZTRlYzQyYWZkMDIvMS9sU01ZS3J2cEJyeXN5
VkpNaXp3VVFmcklOdEUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5yR8wDQYJKoZIhvcNAQELBQADggEB
AAY9bKbsVjEfiW6+lGK3ikT+7Oa668JQd/aPd+LgjZ2sFyKCMult5u/Cjvp+F8n0
HhG1frCK1inI4QFNUBuBQ5wvaSfmjRlOb4yco+riJgDs1vsk8iRKtxKiFJN3sqF7
LB3xD6JH+xXkRpK/3KUnrD2CX2YrWfn82JwBaqzAjAWstSe5GBWQFTBZ3q8icVwB
OC/ZCJumcJBAVyw+kiGFWV7/kWKh3GZIeuYnlC2OhtB6jXK9+vqIec283T3rHkfg
GOx0jb7Yy1YbyGbXwlFAk0jcj6CWu3C6CKRntVB+1pj8wcBYI70yPQQHW53xPrWa
1sPGi+H9QHZAnz1tUtg9rGI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net