Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/As31Vidfx8X2dJVPeOPo-TLW0qI.roa
File:                     As31Vidfx8X2dJVPeOPo-TLW0qI.roa (raw, json)
Hash identifier:          6wDS6EJcIXeRVtR6wN2CtPgXtygtRNzHLbntJqMsTrU=
Subject key identifier:   02:CD:F5:56:27:5F:C7:C5:F6:74:95:4F:78:E3:E8:F9:32:D6:D2:A2
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       027AE398
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/As31Vidfx8X2dJVPeOPo-TLW0qI.roa
Signing time:             Sat 01 Jan 2022 00:52:51 +0000
ROA not before:           Sat 01 Jan 2022 00:52:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206238
IP address blocks:        45.80.168.0/22 maxlen: 22
                          45.95.236.0/22 maxlen: 22
                          45.83.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41608088 (0x27ae398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: Jan  1 00:52:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02cdf556275fc7c5f674954f78e3e8f932d6d2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dc:ae:02:5f:58:07:a2:c4:b7:c4:c4:75:ac:
                    f2:f4:20:a3:cc:1e:89:d4:89:2c:4d:a7:a8:4c:b7:
                    59:3f:99:fb:36:8e:c2:d5:e2:dc:ea:f4:98:1d:8d:
                    d3:cb:c7:b6:de:a7:fd:44:99:66:b1:03:ec:ab:f8:
                    5a:13:11:e3:ea:24:6a:63:c1:43:47:d4:31:cb:2a:
                    4b:28:6e:66:56:39:6e:e7:57:74:c6:de:45:1f:01:
                    ea:37:22:16:2b:bb:12:c8:1d:d0:81:67:ed:d5:cd:
                    d0:fe:a1:c3:65:4d:ff:a0:fa:a1:f1:1f:b4:d1:18:
                    53:3b:2e:fa:84:4b:dd:12:c1:4a:51:b8:d2:d2:6f:
                    a8:13:23:46:1e:1c:91:f5:86:13:ae:a6:82:04:47:
                    6b:d1:0a:34:41:cd:7b:25:a4:f8:71:6c:71:7d:e4:
                    7f:51:65:7b:b0:8e:0e:00:e9:c7:07:b3:f3:5e:c8:
                    55:1a:e7:40:d9:06:ee:55:80:db:77:ca:77:92:28:
                    ee:a3:7e:f7:4f:ae:e2:58:3d:bb:ec:47:a7:04:6c:
                    53:ee:e1:a3:91:7c:3e:d8:5d:9f:1d:d3:ff:c3:d8:
                    db:f4:f9:b1:e6:aa:43:4e:4f:8c:d1:0d:4b:3d:52:
                    e7:5f:65:77:bc:35:ce:e1:36:4e:94:74:e3:23:25:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CD:F5:56:27:5F:C7:C5:F6:74:95:4F:78:E3:E8:F9:32:D6:D2:A2
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/As31Vidfx8X2dJVPeOPo-TLW0qI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.168.0/22
                  45.83.4.0/22
                  45.95.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:38:62:7e:35:75:a6:52:56:69:4a:c1:13:fd:ee:f1:d6:12:
         c4:62:f4:e7:bf:c8:41:4b:9c:6c:42:56:65:e4:0f:97:7c:3c:
         02:c8:fc:f8:e3:cd:d8:47:d5:23:5e:c7:3f:da:76:91:87:85:
         17:7a:ee:cf:74:15:83:24:9e:ce:a7:e9:b9:dc:39:8e:d0:60:
         86:5c:d8:fd:a2:ee:41:c2:80:ab:c9:8c:2c:45:4b:e9:5d:3f:
         2a:4e:31:70:73:30:cb:2e:31:69:14:ad:e2:4d:18:cd:97:70:
         f8:37:70:dc:7e:0d:25:96:29:80:83:9b:b0:87:75:6c:46:c9:
         d0:6c:d9:85:7d:74:c2:c9:74:1b:cd:62:56:23:42:2e:5e:79:
         2e:dd:cd:85:b6:d8:cc:99:ce:59:aa:5e:c9:2d:17:c1:2c:d8:
         72:f6:ad:c8:0f:d6:35:6e:a0:51:49:5a:cd:2a:b2:b5:bf:56:
         f1:75:0d:cd:ca:d0:b6:06:63:1d:82:53:d4:c9:0a:d9:a6:09:
         c4:3b:e1:8b:b1:fc:bf:c8:06:7e:d3:59:74:74:94:47:0e:b0:
         54:ac:ee:f5:38:70:a6:26:24:ad:68:b6:6d:d4:c3:79:28:0c:
         86:8c:39:2b:4c:a9:11:cd:26:ad:58:c2:07:55:0a:8d:d7:85:
         1c:df:73:63
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAnrjmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZmM2OTY0NjQ1N2E4YmY4ZWY5NTY5YjliNDI3ZTlmMmM0NjJlNTZlMB4XDTIyMDEw
MTAwNTI1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDJjZGY1NTYyNzVm
YzdjNWY2NzQ5NTRmNzhlM2U4ZjkzMmQ2ZDJhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOXcrgJfWAeixLfExHWs8vQgo8weidSJLE2nqEy3WT+Z+zaO
wtXi3Or0mB2N08vHtt6n/USZZrED7Kv4WhMR4+okamPBQ0fUMcsqSyhuZlY5budX
dMbeRR8B6jciFiu7Esgd0IFn7dXN0P6hw2VN/6D6ofEftNEYUzsu+oRL3RLBSlG4
0tJvqBMjRh4ckfWGE66mggRHa9EKNEHNeyWk+HFscX3kf1Fle7CODgDpxwez817I
VRrnQNkG7lWA23fKd5Io7qN+90+u4lg9u+xHpwRsU+7ho5F8Pthdnx3T/8PY2/T5
seaqQ05PjNENSz1S519ld7w1zuE2TpR04yMlDFMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQCzfVWJ1/HxfZ0lU944+j5MtbSojAfBgNVHSMEGDAWgBSPxpZGRXqL+O+V
abm0J+nyxGLlbjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2o4YVdSa1Y2aV9qdmxXbTV0Q2ZwOHNSaTVXNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvOWZhYjVjLWUxMzgtNGVmNi04Nzk5LWIwYjM1YTM0ZTM4OC8x
L0FzMzFWaWRmeDhYMmRKVlBlT1BvLVRMVzBxSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
OWZhYjVjLWUxMzgtNGVmNi04Nzk5LWIwYjM1YTM0ZTM4OC8xL2o4YVdSa1Y2aV9q
dmxXbTV0Q2ZwOHNSaTVXNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAi1QqAMEAi1TBAMEAi1f7DANBgkq
hkiG9w0BAQsFAAOCAQEAfjhifjV1plJWaUrBE/3u8dYSxGL057/IQUucbEJWZeQP
l3w8Asj8+OPN2EfVI17HP9p2kYeFF3ruz3QVgySezqfpudw5jtBghlzY/aLuQcKA
q8mMLEVL6V0/Kk4xcHMwyy4xaRSt4k0YzZdw+Ddw3H4NJZYpgIObsId1bEbJ0GzZ
hX10wsl0G81iViNCLl55Lt3NhbbYzJnOWapeyS0XwSzYcvatyA/WNW6gUUlazSqy
tb9W8XUNzcrQtgZjHYJT1MkK2aYJxDvhi7H8v8gGftNZdHSURw6wVKzu9ThwpiYk
rWi2bdTDeSgMhow5K0ypEc0mrVjCB1UKjdeFHN9zYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org