Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/E5SsVWnDL57EMS1XU8dwka-8820.roa
File:                     E5SsVWnDL57EMS1XU8dwka-8820.roa (raw, json)
Hash identifier:          m/ENkg17RioNGsuR0UOnM54gh2IBxWY7uwlyQ9R+GYg=
Subject key identifier:   13:94:AC:55:69:C3:2F:9E:C4:31:2D:57:53:C7:70:91:AF:BC:F3:6D
Certificate issuer:       /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial:       1507D39B
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/E5SsVWnDL57EMS1XU8dwka-8820.roa
Signing time:             Sat 01 Jan 2022 14:04:02 +0000
ROA not before:           Sat 01 Jan 2022 14:04:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200770
IP address blocks:        185.96.212.0/22 maxlen: 24
                          2a06:200::/29 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352834459 (0x1507d39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
        Validity
            Not Before: Jan  1 14:04:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1394ac5569c32f9ec4312d5753c77091afbcf36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1d:8b:ef:b4:9b:3b:14:84:d6:6a:78:b7:04:
                    7f:ab:6d:8e:6b:e4:05:3f:d5:b6:a2:94:b0:45:4a:
                    a7:47:bb:94:5d:a0:38:45:66:08:5f:1c:94:1b:15:
                    67:70:05:23:c5:db:6f:49:93:f6:5e:f4:fd:c3:6c:
                    3e:70:56:38:a7:5b:5c:77:47:65:e9:e9:20:2c:48:
                    23:f4:5e:4f:a7:0b:29:4b:ca:4b:7b:a9:63:82:6b:
                    5d:87:b1:5c:a1:d8:2d:09:d1:4a:d2:6e:9b:dd:ad:
                    38:dd:90:4f:d0:be:36:45:7d:84:11:31:3d:11:b5:
                    c0:00:50:e5:a3:34:10:ed:65:19:b1:ba:73:9f:24:
                    f1:62:40:c7:46:fe:1b:b6:18:93:09:e6:97:fc:e6:
                    36:df:da:60:11:c2:55:60:7e:65:78:51:95:d2:cc:
                    33:6e:d1:40:5c:62:4e:0e:5e:17:4a:fb:d0:de:f0:
                    40:93:74:d9:97:10:20:17:a4:93:70:11:79:18:3f:
                    2c:ac:93:d4:ce:b1:72:04:61:37:de:c2:75:20:3e:
                    e1:6b:d4:83:32:aa:b0:2f:e3:eb:45:0b:5a:e3:e5:
                    0f:3c:ae:2b:ff:cc:da:e0:f0:07:04:fe:3e:88:a2:
                    76:62:41:4f:ee:be:9f:dd:98:f8:a1:52:24:13:fc:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:94:AC:55:69:C3:2F:9E:C4:31:2D:57:53:C7:70:91:AF:BC:F3:6D
            X509v3 Authority Key Identifier:
                keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/E5SsVWnDL57EMS1XU8dwka-8820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.212.0/22
                IPv6:
                  2a06:200::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:df:5c:bb:2f:84:f4:33:71:1d:f0:2f:d9:0c:f1:76:22:e6:
         96:3c:b2:d0:5c:bb:2d:7b:18:50:33:06:5f:83:3c:f8:2a:67:
         bd:9e:50:31:c7:42:7b:b4:6b:cd:d0:43:f6:49:03:56:76:b1:
         f7:42:20:39:8c:f6:90:62:76:bc:6f:21:0f:18:fa:0e:4c:2b:
         f3:1b:ed:e6:89:fc:b6:39:24:d5:b7:4c:03:57:d9:6e:fc:1d:
         9b:08:c0:b2:ed:12:d6:33:65:ab:97:f6:ab:da:6f:36:ab:b9:
         44:1a:60:ba:22:cb:33:e4:71:1a:e1:a5:55:d4:98:e0:45:87:
         19:cd:cf:97:c8:fe:69:5b:9a:93:27:54:18:e7:f9:dd:7b:19:
         64:7c:27:d7:92:83:ed:a7:2a:c8:3e:4d:57:bf:57:e7:ba:2e:
         fb:a7:68:96:74:5c:72:3f:2d:31:3d:37:c2:6b:7c:f1:b7:1f:
         29:12:64:1c:c9:5e:d9:db:6b:18:cb:b6:3a:d6:47:33:f9:64:
         35:72:92:96:ca:95:4e:1e:b1:c6:f2:0c:98:1d:f7:56:ca:7c:
         39:fa:d5:d3:85:7c:f1:21:d6:57:75:9e:2e:24:39:e3:27:72:
         1c:c6:d7:22:8d:d0:83:46:78:bf:7e:35:d4:ca:fd:53:ab:29:
         54:72:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----