Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/Pr4qVJXTnd058BgQJ9TJyTaQrqo.roa
File:                     Pr4qVJXTnd058BgQJ9TJyTaQrqo.roa (raw, json)
Hash identifier:          pk0lek0tb4boHwtEQXiBd6lS8ZkUovf2ECkFj8xAKC4=
Subject key identifier:   3E:BE:2A:54:95:D3:9D:DD:39:F0:18:10:27:D4:C9:C9:36:90:AE:AA
Certificate issuer:       /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial:       0522F66E
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/Pr4qVJXTnd058BgQJ9TJyTaQrqo.roa
Signing time:             Sat 01 Jan 2022 07:54:47 +0000
ROA not before:           Sat 01 Jan 2022 07:54:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42818
IP address blocks:        77.244.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86177390 (0x522f66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
        Validity
            Not Before: Jan  1 07:54:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3ebe2a5495d39ddd39f0181027d4c9c93690aeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:7c:b9:17:e3:61:9c:60:0c:04:b8:40:29:
                    e0:80:ab:25:7d:2b:5b:d7:f9:71:80:e8:45:24:fc:
                    51:f3:d0:8e:ef:ae:90:f0:3c:02:28:c8:23:79:f5:
                    f4:f3:5d:1e:27:b6:6e:e6:e5:b7:9b:9d:9f:e4:07:
                    1d:94:f0:0b:71:74:b9:7e:13:51:17:7d:a9:e8:88:
                    80:87:3d:4f:95:f6:80:91:bf:2e:94:26:ac:3c:75:
                    65:15:75:c2:2b:25:09:f0:97:35:18:d2:fc:90:4a:
                    f0:0e:a2:33:d2:78:8f:b2:10:7f:28:08:38:0d:b9:
                    3d:7c:4b:44:8f:dd:72:3f:fe:a9:b5:94:f8:da:5f:
                    dd:e3:ae:64:8b:17:84:38:ff:8e:84:fd:d8:bf:26:
                    e6:f1:50:97:98:34:0f:71:81:3e:df:30:76:aa:cd:
                    74:e4:c8:b7:b5:64:2b:bd:e6:e7:27:75:60:0c:85:
                    84:1f:da:00:53:14:82:48:cb:f0:08:c5:06:d9:a1:
                    ae:bc:f5:bf:1f:9d:c2:1e:9c:75:78:a7:9f:d4:6f:
                    05:2f:05:21:df:12:3c:2d:3d:eb:55:c8:f8:95:62:
                    fe:ea:b4:ee:d3:f7:2a:ef:f2:d9:1e:b4:47:24:d4:
                    3e:51:65:43:0a:06:d0:a6:e2:af:50:f5:77:ad:4c:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:2A:54:95:D3:9D:DD:39:F0:18:10:27:D4:C9:C9:36:90:AE:AA
            X509v3 Authority Key Identifier:
                keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/Pr4qVJXTnd058BgQJ9TJyTaQrqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.244.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:96:9c:36:4b:c3:f2:b7:fa:8a:97:80:95:e9:f7:5b:e7:bc:
         d1:5d:36:59:f1:30:61:27:1c:a8:bf:ab:dc:07:f1:16:65:43:
         7b:e1:d9:c1:20:dc:9c:03:f4:39:f4:73:0b:ac:5a:9f:b4:71:
         5b:f3:ec:e7:c5:9f:65:03:71:61:bf:cf:50:c6:49:2a:03:28:
         12:79:07:ae:d9:07:dc:30:b2:b0:74:3c:ad:00:d1:bb:da:e8:
         8f:f5:2c:97:e1:99:08:45:da:c5:ed:d0:01:c6:da:8d:8e:bf:
         d6:e3:f3:80:c9:36:c6:3b:f9:6c:f3:b0:a6:44:d2:cf:d9:15:
         cf:c7:3e:21:f5:c0:f3:52:80:31:ac:6a:01:64:42:1d:95:e9:
         e5:b0:61:19:20:18:e1:ea:56:a8:50:7d:fa:d2:50:0d:7f:e0:
         5c:17:37:8c:65:ed:1b:7b:13:1a:4d:47:25:ee:26:de:60:b2:
         ef:7b:0e:f2:ac:b1:cb:13:09:7b:16:90:77:8c:f5:01:1b:e5:
         8d:c5:57:81:bb:0d:59:9c:97:e1:8c:fc:ee:af:1e:76:31:1d:
         6c:75:1a:44:93:90:21:e0:2b:9c:d4:d2:20:f5:0e:e6:3d:a2:
         79:ef:e2:27:73:33:0d:de:13:8b:6d:30:ca:8f:00:45:12:8a:
         bf:2b:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----