Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/1-s6fjnWT23FoO9clQQRmjCd_keU.roa
File:                     1-s6fjnWT23FoO9clQQRmjCd_keU.roa (raw, json)
Hash identifier:          qIQWek4DZ9s8xXIDWWCInGM9YhR3mc1bmio7NGv0oXU=
Subject key identifier:   FA:CE:9F:8E:75:93:DB:71:68:3B:D7:25:41:04:66:8C:27:7F:91:E5
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       37B87639
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/1-s6fjnWT23FoO9clQQRmjCd_keU.roa
Signing time:             Sat 01 Jan 2022 02:57:35 +0000
ROA not before:           Sat 01 Jan 2022 02:57:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16019
IP address blocks:        46.183.64.0/21 maxlen: 21
                          2a0b:c180::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934835769 (0x37b87639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: Jan  1 02:57:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=face9f8e7593db71683bd7254104668c277f91e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:7f:6a:bf:31:3f:4e:e9:f8:93:dd:4b:5f:
                    72:d6:4b:92:d5:8e:f2:fc:c7:5b:87:35:5e:b6:19:
                    e0:31:b2:69:9a:d5:ee:46:08:e5:75:6b:2f:ec:22:
                    eb:5b:16:44:e0:74:76:4c:da:97:e2:01:60:31:e4:
                    24:dc:ab:45:68:d8:8d:a9:98:23:76:ba:39:b1:d3:
                    a1:96:57:2e:ca:ee:f8:64:fa:b7:34:8f:92:88:87:
                    d4:16:d6:2e:0f:e9:4e:66:f1:21:c6:6f:67:86:a0:
                    8d:13:cd:ae:9b:33:bc:79:b9:ba:60:b2:0d:5d:26:
                    fd:e7:48:f3:59:6e:6a:5a:a2:e9:9d:20:36:8e:05:
                    1b:09:a9:ff:86:bb:e8:39:36:06:4f:b3:88:68:aa:
                    d5:6c:7c:fc:9b:d1:3c:70:c7:bf:e5:1c:0c:47:b1:
                    6a:e2:8e:36:6f:65:33:1e:b4:b5:c8:74:b6:58:1e:
                    51:5c:70:2d:b6:1e:8a:3c:b2:92:cf:18:3e:98:af:
                    2a:6b:37:b6:45:2c:54:03:99:cc:6f:5c:02:5f:8b:
                    41:85:94:21:bd:39:19:42:02:a8:e5:2e:81:22:ee:
                    10:0b:8a:af:c0:03:ef:f0:46:48:b8:bf:72:6b:9e:
                    63:9b:a6:b8:0a:0e:db:59:0c:b2:9a:fd:c7:6d:13:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:9F:8E:75:93:DB:71:68:3B:D7:25:41:04:66:8C:27:7F:91:E5
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/1-s6fjnWT23FoO9clQQRmjCd_keU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.64.0/21
                IPv6:
                  2a0b:c180::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:19:d5:60:db:9a:0a:68:ae:f0:1f:d0:dd:da:03:54:b3:96:
         f8:38:0c:8b:c7:6f:eb:8b:56:6a:45:07:b4:10:e6:de:74:94:
         e2:d2:cd:a0:3d:d5:36:6a:90:2b:69:ab:b5:de:a4:46:a3:4f:
         dc:c0:8a:68:2a:f0:38:13:46:8e:cb:78:15:42:e3:ce:6f:59:
         fc:dd:15:e7:16:11:a1:9c:7e:ad:36:21:9f:54:43:19:c6:c9:
         a0:97:cb:af:5d:51:25:60:29:73:51:d0:19:85:1a:d6:b7:31:
         fd:e5:c3:b2:e4:1d:30:3d:a1:01:94:81:74:b1:2d:76:6e:83:
         7d:23:06:d1:56:fb:4c:0b:c5:b3:03:28:44:b5:23:62:d0:0f:
         9f:05:99:b9:8b:ee:4f:9f:77:5d:ef:52:b0:e0:4d:52:b6:f6:
         d7:25:31:2d:85:3e:fa:f0:35:e4:43:11:86:76:a1:b7:b4:36:
         f6:de:b0:89:fc:a9:fe:d0:2f:79:f5:61:91:89:f0:65:0a:3f:
         60:2e:5d:56:c1:dc:d8:55:5f:ae:93:1d:28:53:1c:af:eb:d9:
         a0:bc:e2:fd:4f:65:18:60:e7:dc:3a:0d:4d:5b:d0:97:96:1d:
         69:a8:ba:5d:80:7d:00:17:ba:aa:60:9e:07:d7:0b:40:40:f4:
         ca:4a:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----