Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zayqBf3iTE1tjp0r2McXRr5VaGg.roa
File:                     zayqBf3iTE1tjp0r2McXRr5VaGg.roa (raw, json)
Hash identifier:          W18p9UZFYjJ2nREKAHHhhcSPbgUBuXAdu3pEa1/IfHY=
Subject key identifier:   CD:AC:AA:05:FD:E2:4C:4D:6D:8E:9D:2B:D8:C7:17:46:BE:55:68:68
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       09D2B3D4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zayqBf3iTE1tjp0r2McXRr5VaGg.roa
Signing time:             Thu 17 Feb 2022 20:08:10 +0000
ROA not before:           Thu 17 Feb 2022 20:08:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48266
IP address blocks:        92.118.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164803540 (0x9d2b3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Feb 17 20:08:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cdacaa05fde24c4d6d8e9d2bd8c71746be556868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:77:68:f3:f1:d8:46:a7:7c:58:26:b6:f3:
                    73:20:7d:0a:87:3c:9f:dd:f8:3d:05:f3:57:83:f0:
                    cd:29:3b:d4:6b:50:a7:62:5f:38:64:51:10:f8:4a:
                    5d:9b:87:e4:9d:70:31:97:87:23:4c:00:2a:36:e4:
                    c5:45:5a:cf:ab:2d:14:98:05:01:71:2c:48:75:05:
                    06:83:ba:83:f7:72:28:2e:f0:94:41:e9:b9:9e:1e:
                    ad:b1:06:fd:69:a5:fb:6a:ec:a5:0e:e5:d1:68:f5:
                    c5:dd:c8:07:6b:ee:c4:71:99:05:89:1d:4f:1b:dd:
                    2e:47:1c:7e:3d:35:16:31:61:af:41:7e:4a:53:15:
                    91:bc:db:d9:ac:d0:ac:c9:2c:3e:55:e8:22:d5:d1:
                    dd:ac:95:92:ea:59:93:2d:dc:da:9f:1c:0c:0a:ad:
                    dc:10:12:d8:58:08:85:4c:c5:55:51:40:e9:9a:e8:
                    af:6b:56:59:6a:31:0c:93:c6:07:b2:ce:2d:c1:6b:
                    8f:3e:5a:bc:63:20:d7:f1:31:3b:7a:62:bf:c7:68:
                    6e:a1:85:f7:c1:c9:5c:e4:6e:f2:11:f9:8f:c4:4f:
                    be:06:80:fc:49:61:9d:1a:54:13:e0:1e:a3:c8:b1:
                    e3:56:fc:1c:9b:eb:53:ca:35:ce:b5:89:a6:56:34:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:AA:05:FD:E2:4C:4D:6D:8E:9D:2B:D8:C7:17:46:BE:55:68:68
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zayqBf3iTE1tjp0r2McXRr5VaGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:3b:a3:24:5a:a8:83:7c:2c:8c:e1:80:71:98:44:98:9b:e5:
         a3:91:a8:91:7f:58:e3:0d:a2:39:1f:bc:5c:1a:66:25:1a:c7:
         18:be:25:66:e6:bc:01:14:38:fa:fd:99:90:95:98:51:a8:57:
         be:9c:82:d8:91:12:86:10:d3:4c:2e:a7:d3:4a:a2:9e:8b:6c:
         1f:1c:33:9d:a1:f9:4e:0b:f6:4a:bf:53:52:af:88:e0:8b:54:
         dd:08:37:a5:f7:ac:0f:4c:23:f9:a2:a3:6b:ef:83:2e:ae:c5:
         21:6c:5b:e5:b3:61:77:93:a0:0d:d8:c5:70:06:95:77:d9:96:
         5f:6e:d7:12:d6:eb:61:3c:6e:66:ca:9c:43:b9:60:b1:58:f6:
         02:43:e6:f4:09:77:9d:72:a8:8a:22:30:e4:9f:a5:ee:18:89:
         aa:85:5e:61:fa:c5:cc:5a:79:0a:fc:51:13:1b:a6:6d:1f:be:
         c2:d9:10:04:a3:20:68:15:e2:72:23:37:2d:8d:53:84:ff:4f:
         3c:1e:8d:2f:74:af:d0:03:2b:3e:71:29:8a:71:ae:1d:b8:32:
         b3:b8:ad:06:7c:53:45:94:36:55:4b:f9:1e:09:a8:af:30:e6:
         c4:5e:97:84:61:08:76:3d:34:7e:c3:d2:b1:08:f7:d5:49:2d:
         07:66:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----