Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/1-uN62c_2H5tHvVAiJRx5AuQFlGk.roa
File:                     1-uN62c_2H5tHvVAiJRx5AuQFlGk.roa (raw, json)
Hash identifier:          MgyBCvUlZ0Afpf/vGN9uDgNrABW2rFmCkWSjP5d18RU=
Subject key identifier:   FA:E3:7A:D9:CF:F6:1F:9B:47:BD:50:22:25:1C:79:02:E4:05:94:69
Certificate issuer:       /CN=73ff5366be0050d3dbee36f20e540065ca6a8e51
Certificate serial:       01FE650D
Authority key identifier: 73:FF:53:66:BE:00:50:D3:DB:EE:36:F2:0E:54:00:65:CA:6A:8E:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9TZr4AUNPb7jbyDlQAZcpqjlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/1-uN62c_2H5tHvVAiJRx5AuQFlGk.roa
Signing time:             Wed 11 May 2022 22:13:01 +0000
ROA not before:           Wed 11 May 2022 22:13:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        31.222.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33449229 (0x1fe650d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff5366be0050d3dbee36f20e540065ca6a8e51
        Validity
            Not Before: May 11 22:13:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fae37ad9cff61f9b47bd5022251c7902e4059469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:b1:93:eb:b6:29:2e:1a:3d:f4:79:c1:d2:
                    9f:13:e7:db:f9:aa:e1:2c:84:d0:d8:c4:ad:99:65:
                    81:93:13:fa:3f:5e:4f:b8:fb:19:c4:59:ea:b7:50:
                    27:71:9c:2a:72:44:f3:43:e6:22:d9:aa:bb:c7:58:
                    23:3a:39:c9:f0:e4:ef:36:63:cf:c6:46:23:ea:7f:
                    c7:19:87:d4:40:4f:7b:11:f2:bc:55:d8:bb:05:9a:
                    08:7b:99:c5:58:53:b3:5d:5b:ce:69:20:f0:ef:c2:
                    c7:50:48:50:8d:39:0f:df:b4:1f:39:75:3f:f8:24:
                    20:f0:82:ad:73:1e:96:7d:67:4c:a2:91:ac:68:50:
                    f4:49:12:b7:db:93:39:6a:b1:ca:f5:61:33:1d:9a:
                    9e:45:e7:73:fd:29:19:23:a2:ed:13:f7:db:0f:be:
                    0d:05:98:ca:66:0a:27:89:66:fc:fc:86:04:f5:9c:
                    53:d0:60:a1:ce:a4:66:16:98:02:56:1f:68:29:a9:
                    6c:86:be:42:a4:1d:66:17:93:72:98:c9:55:80:1b:
                    36:03:a4:4c:4f:a5:2d:43:98:33:e5:6f:9b:18:b1:
                    4f:6f:93:00:3a:40:e7:72:1e:2b:c3:01:3c:ba:bb:
                    75:c5:8c:43:93:aa:03:2a:2f:47:8d:a1:2a:48:d4:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E3:7A:D9:CF:F6:1F:9B:47:BD:50:22:25:1C:79:02:E4:05:94:69
            X509v3 Authority Key Identifier:
                keyid:73:FF:53:66:BE:00:50:D3:DB:EE:36:F2:0E:54:00:65:CA:6A:8E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9TZr4AUNPb7jbyDlQAZcpqjlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/1-uN62c_2H5tHvVAiJRx5AuQFlGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ed6589-272c-4120-9adc-ee8ae6638f12/1/c_9TZr4AUNPb7jbyDlQAZcpqjlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:95:72:72:2c:a7:8c:40:03:3a:ce:bd:75:16:8e:9c:94:
         c4:25:eb:e4:63:3b:dc:fa:bb:6c:e0:5d:ad:35:d6:33:fd:51:
         08:c0:c9:67:e6:a9:f2:5f:87:26:b0:d8:42:2f:69:e7:d9:b1:
         ed:2b:f6:e0:a1:22:f6:63:db:88:81:c0:f5:bb:ca:95:6d:c5:
         4f:50:49:ae:83:ea:53:35:cf:05:15:72:d1:1b:8c:fd:66:94:
         6e:42:ee:53:16:5e:4b:c7:bb:f0:96:88:b7:d6:0f:ec:9b:07:
         21:eb:f4:55:25:76:73:a4:26:eb:7b:35:a3:a8:8c:fd:6e:26:
         a5:15:ba:c6:1b:be:c1:da:cf:96:e3:18:94:a7:97:27:59:ba:
         51:60:23:25:a2:de:11:10:d4:56:b8:58:44:90:34:62:82:63:
         89:e2:d9:1e:dd:2f:df:41:2a:73:29:3e:dd:47:49:20:93:26:
         e2:58:01:ef:57:7b:c5:23:7b:cd:c6:26:60:68:e4:84:42:4a:
         9e:4e:5c:f8:00:9e:5e:6c:72:51:c5:0b:75:7e:d6:2b:86:bd:
         76:56:5a:4b:45:15:51:7a:07:bb:64:4a:d2:62:62:8b:e0:18:
         5d:85:6c:fa:28:e6:4d:33:12:1d:07:6f:3e:cc:f0:84:f1:ce:
         df:b4:bf:30
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAf5lDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2ZmNTM2NmJlMDA1MGQzZGJlZTM2ZjIwZTU0MDA2NWNhNmE4ZTUxMB4XDTIyMDUx
MTIyMTMwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFlMzdhZDljZmY2
MWY5YjQ3YmQ1MDIyMjUxYzc5MDJlNDA1OTQ2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMuBsZPrtikuGj30ecHSnxPn2/mq4SyE0NjErZllgZMT+j9e
T7j7GcRZ6rdQJ3GcKnJE80PmItmqu8dYIzo5yfDk7zZjz8ZGI+p/xxmH1EBPexHy
vFXYuwWaCHuZxVhTs11bzmkg8O/Cx1BIUI05D9+0Hzl1P/gkIPCCrXMeln1nTKKR
rGhQ9EkSt9uTOWqxyvVhMx2ankXnc/0pGSOi7RP32w++DQWYymYKJ4lm/PyGBPWc
U9Bgoc6kZhaYAlYfaCmpbIa+QqQdZheTcpjJVYAbNgOkTE+lLUOYM+VvmxixT2+T
ADpA53IeK8MBPLq7dcWMQ5OqAyovR42hKkjUUBsCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT643rZz/Yfm0e9UCIlHHkC5AWUaTAfBgNVHSMEGDAWgBRz/1NmvgBQ09vu
NvIOVABlymqOUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NfOVRacjRBVU5QYjdqYnlEbFFBWmNwcWpsRS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvZWQ2NTg5LTI3MmMtNDEyMC05YWRjLWVlOGFlNjYzOGYxMi8x
LzEtdU42MmNfMkg1dEh2VkFpSlJ4NUF1UUZsR2sucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYw
L2VkNjU4OS0yNzJjLTQxMjAtOWFkYy1lZThhZTY2MzhmMTIvMS9jXzlUWnI0QVVO
UGI3amJ5RGxRQVpjcHFqbEUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAf3uYwDQYJKoZIhvcNAQELBQAD
ggEBAJzolXJyLKeMQAM6zr11Fo6clMQl6+RjO9z6u2zgXa011jP9UQjAyWfmqfJf
hyaw2EIvaefZse0r9uChIvZj24iBwPW7ypVtxU9QSa6D6lM1zwUVctEbjP1mlG5C
7lMWXkvHu/CWiLfWD+ybByHr9FUldnOkJut7NaOojP1uJqUVusYbvsHaz5bjGJSn
lydZulFgIyWi3hEQ1Fa4WESQNGKCY4ni2R7dL99BKnMpPt1HSSCTJuJYAe9Xe8Uj
e83GJmBo5IRCSp5OXPgAnl5sclHFC3V+1iuGvXZWWktFFVF6B7tkStJiYovgGF2F
bPoo5k0zEh0Hbz7M8ITxzt+0vzA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org