Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/dUeN16sDTq-z6Z7uGETF-vwwKmI.roa
File:                     dUeN16sDTq-z6Z7uGETF-vwwKmI.roa (raw, json)
Hash identifier:          Vlj1+cflEwAX7WQraEgb2byZlWXm/des0Y59XPadE1o=
Subject key identifier:   75:47:8D:D7:AB:03:4E:AF:B3:E9:9E:EE:18:44:C5:FA:FC:30:2A:62
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       09B0B084
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/dUeN16sDTq-z6Z7uGETF-vwwKmI.roa
Signing time:             Sat 05 Feb 2022 17:15:33 +0000
ROA not before:           Sat 05 Feb 2022 17:15:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     53340
IP address blocks:        45.10.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162574468 (0x9b0b084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Feb  5 17:15:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75478dd7ab034eafb3e99eee1844c5fafc302a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:98:85:bb:2e:b3:37:5d:9e:91:26:86:6f:
                    14:ee:f1:9c:bf:09:42:fa:d4:c0:d1:02:41:3d:3b:
                    63:42:6f:61:af:5f:43:34:74:fd:82:71:f8:cd:f6:
                    85:e3:1c:13:4c:2b:cc:9e:de:60:bb:16:94:09:a9:
                    d5:7f:5e:94:6c:ba:3c:17:5b:a2:a3:bf:00:73:96:
                    95:ea:5d:fc:66:f1:e0:b9:5e:b4:dd:ad:f5:bb:d7:
                    9c:a0:df:ad:b2:79:b5:fb:46:9e:bc:36:a4:91:2d:
                    ef:3e:c5:56:71:41:99:ba:95:a2:83:e3:dd:e5:cc:
                    83:1a:30:f2:0f:39:3f:8e:49:72:92:e9:7d:6b:13:
                    60:3b:2b:7b:99:1a:77:ed:73:35:d2:10:3f:4e:55:
                    cb:3e:30:c0:31:3c:de:9f:d9:e6:17:37:a9:9f:ba:
                    38:fe:8e:af:0b:5b:c8:d0:76:73:c7:cf:e9:c0:63:
                    77:62:9c:b9:8c:a2:c3:08:8b:e2:a5:d3:af:fe:10:
                    6a:36:a1:b2:6d:22:b1:dc:0d:db:f7:58:d0:d4:68:
                    52:20:7d:69:12:51:39:b2:ce:3f:30:c6:90:6c:7a:
                    86:a1:4d:b6:a6:8f:71:c5:2f:08:5c:f9:8e:e2:86:
                    11:67:45:b2:1a:e6:7b:4e:c1:30:09:ff:22:44:50:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:8D:D7:AB:03:4E:AF:B3:E9:9E:EE:18:44:C5:FA:FC:30:2A:62
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/dUeN16sDTq-z6Z7uGETF-vwwKmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:24:23:a8:4e:da:b7:18:ca:4a:ec:46:71:a1:6e:47:7e:ce:
         81:35:55:8b:ac:ab:3d:68:12:70:eb:d6:a0:91:af:31:7c:81:
         29:c8:7c:7e:ef:cc:5a:c3:69:ad:56:3b:f2:a9:92:d7:50:b7:
         b9:13:0a:05:46:24:db:4d:37:79:9a:01:7d:1d:7a:5b:af:76:
         12:5e:5c:fc:8a:68:ba:ea:4d:bc:81:7e:49:9f:4b:9a:a5:0a:
         b0:3b:e2:ee:96:cc:aa:05:00:a0:97:39:65:1f:23:5e:f9:6d:
         8d:8e:02:de:60:3f:71:51:48:cb:a2:de:f1:1f:5c:d8:ad:ec:
         5e:45:9b:75:74:84:62:69:bb:6c:81:b4:ec:13:65:0c:c3:33:
         ee:ba:5b:df:72:0a:e3:f0:09:9c:e1:1e:46:2a:03:7d:db:3e:
         59:82:c7:27:c8:01:8d:b8:11:a3:2a:12:11:76:4d:e5:f4:7b:
         01:ad:1b:84:c0:88:3a:72:fc:46:36:5c:73:29:c9:80:66:75:
         5d:80:d1:00:52:1e:72:75:fd:c5:77:12:c5:9e:5e:d6:b2:a1:
         61:74:99:31:e8:12:0b:de:c3:45:6c:18:be:73:18:53:f9:d4:
         e9:b2:3d:a7:87:f9:bd:90:04:65:2d:ae:4c:ef:79:a7:da:80:
         cc:39:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----