Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/vAtnW6503pH7Lz-m_AvYKxFZviE.roa
File:                     vAtnW6503pH7Lz-m_AvYKxFZviE.roa (raw, json)
Hash identifier:          1vnM5GUyKnaE7duIg0ouvBzR+l6njac6brVBrH1GcMQ=
Subject key identifier:   BC:0B:67:5B:AE:74:DE:91:FB:2F:3F:A6:FC:0B:D8:2B:11:59:BE:21
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       2929867B
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/vAtnW6503pH7Lz-m_AvYKxFZviE.roa
Signing time:             Sat 01 Jan 2022 12:07:02 +0000
ROA not before:           Sat 01 Jan 2022 12:07:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57997
IP address blocks:        176.110.116.0/23 maxlen: 23
                          2001:67c:1070::/47 maxlen: 47

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690587259 (0x2929867b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Jan  1 12:07:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc0b675bae74de91fb2f3fa6fc0bd82b1159be21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:d8:d0:50:e6:03:08:1c:83:a2:5b:49:4d:
                    a0:d1:7b:34:24:4e:68:39:28:de:91:a4:e4:4f:a9:
                    53:2e:60:b8:4e:17:34:4b:a6:12:ab:21:5c:af:9d:
                    5c:52:04:29:f7:4d:16:33:83:6a:0b:28:2d:ec:de:
                    fa:ae:42:34:d3:76:40:29:fc:1f:53:21:7d:00:cd:
                    e2:9e:67:77:8a:ed:63:ed:8f:d9:52:4a:27:f1:da:
                    43:dd:9a:81:b6:9c:1e:7c:7f:a2:d7:b8:98:66:0f:
                    5d:1b:19:25:dd:d5:cc:db:42:81:2b:41:85:0a:70:
                    f1:0c:95:a7:ca:94:f4:40:4b:e6:8a:98:16:3c:fa:
                    0f:af:c3:7c:50:ce:bf:e4:d4:e1:9d:d3:c4:94:a0:
                    60:0a:19:5d:79:19:ef:46:c4:2e:29:5f:9e:00:9f:
                    01:99:56:28:c5:a7:fd:b2:cf:f5:82:43:2c:09:63:
                    bd:04:39:6d:db:fc:84:e7:b3:78:f0:e2:e6:1c:cf:
                    a0:5e:e1:ff:fb:e9:5c:6e:1b:be:08:fe:35:a7:dc:
                    fb:e0:df:85:65:fd:c5:68:fc:97:7f:43:e4:3f:62:
                    64:aa:bb:c3:58:cc:0f:84:26:5f:1c:57:12:c0:0e:
                    6b:fb:b4:fa:6b:5c:90:e3:77:f6:bf:24:f6:80:d9:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0B:67:5B:AE:74:DE:91:FB:2F:3F:A6:FC:0B:D8:2B:11:59:BE:21
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/vAtnW6503pH7Lz-m_AvYKxFZviE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.110.116.0/23
                IPv6:
                  2001:67c:1070::/47

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:bb:e9:3c:4a:69:54:53:8d:6c:98:5c:7b:5d:3e:25:b3:
         fa:8c:00:e0:72:d8:92:96:00:46:38:62:86:a6:a5:d6:ba:72:
         28:75:14:21:09:8e:1c:ea:a2:2f:97:b2:78:ac:92:0f:4a:54:
         07:87:0c:72:ff:f2:a9:a3:a3:d4:3d:e5:65:2a:18:dd:91:06:
         10:06:2b:23:fb:57:d6:bf:55:4d:b3:00:02:a5:f9:29:19:59:
         d1:83:58:66:06:80:9c:9a:f5:75:68:dd:49:01:d5:9f:cd:22:
         fe:90:21:6c:58:e9:1a:a1:0b:91:9d:ae:b1:af:ad:5b:a8:4d:
         a8:a5:a7:ba:3a:62:ab:b1:e4:73:e8:7b:75:72:c5:90:24:ed:
         b3:11:36:df:42:87:dc:67:53:b3:a2:13:b9:e3:7a:7b:70:0a:
         38:ce:b5:44:55:4e:db:4b:16:0b:93:c4:83:87:b4:37:56:68:
         08:05:0c:f1:5b:97:19:45:5f:3a:6c:dd:b5:04:6b:d6:71:69:
         7d:57:cd:52:3a:cc:41:f4:c8:62:42:54:8f:b6:6f:75:70:00:
         7b:1f:3f:8b:83:48:95:19:86:6b:f4:d5:ff:44:7c:06:ba:d2:
         f8:40:a6:84:33:dc:41:41:48:3d:46:c1:69:45:14:93:57:e8:
         d6:2a:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----