Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KiicxZo_JKwFhbauWsqXxkAEy98.roa
File:                     KiicxZo_JKwFhbauWsqXxkAEy98.roa (raw, json)
Hash identifier:          qiTde0GSrCy6vVm+752ds80vT6/4SB0fxYh2tpvlVpo=
Subject key identifier:   2A:28:9C:C5:9A:3F:24:AC:05:85:B6:AE:5A:CA:97:C6:40:04:CB:DF
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       06EDB9FA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KiicxZo_JKwFhbauWsqXxkAEy98.roa
Signing time:             Fri 20 May 2022 15:17:30 +0000
ROA not before:           Fri 20 May 2022 15:17:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44437
IP address blocks:        185.244.24.0/24 maxlen: 24
                          2a05:1080::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116242938 (0x6edb9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: May 20 15:17:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a289cc59a3f24ac0585b6ae5aca97c64004cbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ea:3c:19:70:8e:01:3e:7a:e3:0a:7a:e5:53:
                    b4:80:be:d4:4d:4e:56:41:67:5e:2c:1d:fa:7b:c6:
                    ba:4c:5a:ee:e4:65:db:88:3b:6b:c7:8a:0c:19:97:
                    f0:55:26:87:f9:81:9d:8b:6d:6e:5f:dd:bc:52:cf:
                    87:d2:23:7b:07:44:00:96:81:bc:ee:2b:eb:34:87:
                    2c:ee:5c:06:b0:2d:ab:6f:88:6d:a6:ac:a0:e0:7c:
                    7e:7c:22:5e:2f:0b:89:43:5e:4e:4a:fc:5b:13:51:
                    45:ab:7b:cc:4d:ec:b7:60:b8:3b:03:43:ef:e0:fa:
                    56:37:f4:13:73:ea:de:b8:68:d6:98:82:c0:9a:67:
                    2e:fe:f2:2e:ad:09:b5:84:d2:18:a0:8d:2e:6e:ba:
                    04:64:88:77:8d:8e:f7:46:10:db:00:28:e1:39:ab:
                    bb:6b:ff:a5:e9:e5:88:05:00:70:72:7a:1c:c3:2c:
                    8c:3e:3a:8b:2e:ca:64:de:73:f0:e1:b0:c9:95:0f:
                    76:7d:3e:ff:f3:b0:a2:b4:b9:d9:0b:6f:58:f7:38:
                    4a:02:d3:c0:f5:3c:e1:78:1c:f8:21:eb:d3:f3:9b:
                    b1:cd:80:c1:60:21:ac:50:66:29:1d:3c:24:05:5f:
                    7b:43:42:e5:07:91:d9:e6:1f:8b:63:08:eb:48:45:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:9C:C5:9A:3F:24:AC:05:85:B6:AE:5A:CA:97:C6:40:04:CB:DF
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KiicxZo_JKwFhbauWsqXxkAEy98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.24.0/24
                IPv6:
                  2a05:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:11:41:57:a7:20:96:02:d1:b3:59:a1:b0:95:6f:85:5e:
         ab:89:21:cd:f6:af:36:e4:35:ef:98:7a:a9:ce:e9:e0:82:75:
         12:86:c4:de:b2:03:0d:fa:e5:eb:9f:09:19:4f:11:cd:ca:93:
         43:4a:cc:ea:9b:01:b4:ab:62:7d:60:6d:f7:45:fd:e5:b5:83:
         99:e1:4b:5d:b6:72:dc:c5:9b:7b:59:98:44:ad:f9:14:29:ed:
         22:40:48:54:bd:b0:0f:08:d9:6a:1c:0e:52:ab:36:d5:dd:22:
         a1:50:73:3b:61:11:7e:2a:ae:b2:fc:1c:95:81:c5:69:86:2d:
         b9:d7:6a:3d:57:4f:e5:7a:90:b3:61:d7:8f:f6:33:f3:79:ff:
         83:27:80:c2:ac:79:5e:0a:3c:77:53:ad:15:8c:00:84:99:24:
         73:ae:24:30:72:22:40:12:c9:27:85:b9:bd:83:8b:b6:ed:c7:
         54:a8:7c:af:41:be:62:bc:4f:69:30:40:a2:a6:03:48:8a:9d:
         e5:6b:aa:6d:99:9c:9f:66:4d:eb:50:03:33:2a:cc:8c:a9:74:
         6e:c4:31:9e:2f:15:67:3f:ab:d6:28:07:5d:62:da:3c:ea:7c:
         d4:83:43:05:ca:14:85:d4:dc:91:3e:33:c7:4c:a8:ea:01:14:
         28:97:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----