Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/byuGzXkvHvhQdQWCBYs_SGfSKeM.roa
File:                     byuGzXkvHvhQdQWCBYs_SGfSKeM.roa (raw, json)
Hash identifier:          QQwDAtVqCah+fJQH1mi1ZDaMimKdgOMmEhXxIVTNyuk=
Subject key identifier:   6F:2B:86:CD:79:2F:1E:F8:50:75:05:82:05:8B:3F:48:67:D2:29:E3
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       0BECA036
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/byuGzXkvHvhQdQWCBYs_SGfSKeM.roa
Signing time:             Tue 25 Jan 2022 07:33:26 +0000
ROA not before:           Tue 25 Jan 2022 07:33:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197071
IP address blocks:        194.233.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200056886 (0xbeca036)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Jan 25 07:33:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f2b86cd792f1ef850750582058b3f4867d229e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:02:bc:8c:1c:20:c2:6d:18:c0:f7:7e:b9:
                    07:4b:26:d7:7a:69:2f:66:17:c7:aa:1f:5e:12:80:
                    22:12:df:6e:9f:6d:b1:7f:c6:b2:44:6b:e3:1f:aa:
                    d1:8c:e8:2b:fc:eb:e6:8d:be:73:d0:24:54:f0:62:
                    8e:16:d6:6f:75:9c:22:9b:6f:af:ef:c6:55:14:15:
                    da:c6:ef:55:30:12:c0:f9:28:91:e1:03:25:9e:a6:
                    d4:94:ab:da:1e:f7:9b:84:88:5d:9b:56:b7:20:8b:
                    b7:ea:da:1e:a8:43:7c:d4:d2:27:2f:44:84:e8:47:
                    20:bb:de:61:92:5c:d8:a4:d9:11:de:21:68:bd:5d:
                    d1:74:1b:09:e9:f4:43:84:c1:b0:5e:63:c6:df:16:
                    13:a1:d6:ec:fe:08:e2:92:b4:36:c0:1b:c2:09:f0:
                    9e:47:27:1e:ed:93:bf:de:a7:6b:33:10:61:37:87:
                    d1:51:ae:8b:7a:7c:d3:67:f3:67:86:5d:3a:4f:26:
                    a7:b6:d8:f4:e8:80:1d:12:25:18:b1:41:88:73:2a:
                    93:09:e1:aa:55:c3:70:87:2e:a5:30:87:ca:b8:5b:
                    45:aa:ae:76:51:ad:f8:2f:fa:d9:0d:8a:07:4f:18:
                    74:64:b1:f4:4a:5e:7e:de:dd:1f:86:27:6a:f0:37:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2B:86:CD:79:2F:1E:F8:50:75:05:82:05:8B:3F:48:67:D2:29:E3
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/byuGzXkvHvhQdQWCBYs_SGfSKeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.233.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:59:9e:1f:e1:bb:98:d3:49:65:84:6f:99:e2:fb:d0:cf:58:
         e2:91:2d:69:af:96:b5:a4:a3:86:c4:f7:62:8f:7c:cd:da:18:
         39:13:f1:bb:60:c2:5d:37:8a:56:72:f7:07:5e:31:73:d2:1e:
         07:be:1a:57:03:a5:a9:1b:f9:55:08:ff:f9:10:19:a5:9d:ef:
         65:b7:f1:b7:00:d5:c9:05:48:e8:6d:13:dd:36:c3:ad:bd:a1:
         2e:26:0e:ea:58:a5:e2:a5:ba:22:e0:1e:a8:2b:9b:ed:73:78:
         65:fc:97:c8:ba:76:8d:a2:3b:0c:51:60:f8:ad:b9:a1:e6:f1:
         40:22:28:54:44:69:dd:51:47:7a:05:62:89:ab:ba:27:d0:b8:
         ab:9f:3a:30:f9:44:1c:b9:97:01:3a:64:3d:ac:1a:93:af:3e:
         a0:0f:7d:f4:a9:cf:d4:94:0a:70:60:e3:1e:55:e2:b8:0d:bf:
         17:22:40:83:eb:9b:cc:c9:e8:40:d6:0d:7d:d3:7b:af:9d:77:
         07:50:a9:cd:f2:67:b1:82:78:98:3e:bc:62:e7:b8:9f:41:21:
         4b:a1:42:2c:89:08:2a:3a:9f:06:51:6a:a9:e0:80:6d:9a:58:
         48:76:39:8c:5e:64:24:88:77:26:92:80:36:3b:b9:f7:d9:dc:
         be:e5:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org