Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0OuuykQvrtlyFByWmSu6kSJHzcA.roa
File:                     0OuuykQvrtlyFByWmSu6kSJHzcA.roa (raw, json)
Hash identifier:          8aDy1cKAbVaBTtVY4S4uN+2kvXCZPCU5uG81rDD49us=
Subject key identifier:   D0:EB:AE:CA:44:2F:AE:D9:72:14:1C:96:99:2B:BA:91:22:47:CD:C0
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0FF42941
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0OuuykQvrtlyFByWmSu6kSJHzcA.roa
Signing time:             Wed 18 May 2022 14:03:16 +0000
ROA not before:           Wed 18 May 2022 14:03:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     272686
IP address blocks:        194.87.164.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267659585 (0xff42941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May 18 14:03:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0ebaeca442faed972141c96992bba912247cdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:ba:88:14:bf:5d:4e:3f:86:19:17:f3:a6:
                    1c:92:68:36:65:0b:a9:dd:97:12:6a:b8:6b:0a:34:
                    03:0f:59:8c:5b:c9:99:36:b2:5b:1b:9e:28:2d:b2:
                    e9:4d:72:3f:5b:08:63:4b:38:fb:44:d5:c3:c3:ce:
                    3b:a2:8f:e9:f2:1d:a8:52:ad:76:19:5f:23:1e:4c:
                    c6:22:3f:49:e4:52:b4:ea:9e:ce:c9:13:e5:31:72:
                    53:0a:d7:e1:65:70:c5:c4:1f:b8:de:a8:c8:21:a2:
                    df:49:50:50:85:ec:0d:67:93:b0:7a:bd:b3:fe:fe:
                    d6:2e:14:96:ba:de:cf:20:93:2d:bb:b5:2e:29:8e:
                    23:c5:90:fe:f4:90:1e:ca:42:38:83:23:2f:9c:8f:
                    ad:ed:78:cd:30:b3:f4:f3:d0:b8:92:15:5a:89:87:
                    e1:bd:e1:bb:ec:01:d0:b1:68:9d:40:f5:bf:76:9c:
                    be:ee:74:30:44:c6:60:35:fb:f5:a6:74:b9:bd:ce:
                    c6:99:48:18:4c:84:aa:f0:d6:e9:44:6b:ed:e1:f8:
                    0f:58:db:2a:15:ce:de:ca:a7:ce:6a:01:17:ff:66:
                    1b:e4:5b:31:7f:5f:65:ed:a1:f3:bd:7b:fb:a2:53:
                    66:22:b9:9e:a0:14:5f:21:76:64:89:e3:44:c7:3f:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EB:AE:CA:44:2F:AE:D9:72:14:1C:96:99:2B:BA:91:22:47:CD:C0
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0OuuykQvrtlyFByWmSu6kSJHzcA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:ba:8c:7c:75:b7:94:26:b8:1d:19:74:d7:ae:15:5d:a0:ae:
         e9:55:95:3c:5f:11:33:0a:c5:6a:c5:03:ce:82:39:6c:07:8f:
         ea:8e:b3:38:bc:f6:e7:0d:4f:97:41:4e:38:a4:6c:26:c8:77:
         61:d0:81:e7:ba:96:8b:f9:bb:ec:aa:90:44:36:a2:e2:3a:b8:
         17:ed:fb:d0:e6:48:02:0d:ce:da:48:41:e5:4c:97:be:35:6b:
         a3:ad:89:c0:01:54:d9:76:7f:b7:6f:f3:c8:58:bd:41:46:ab:
         7a:34:ad:08:48:99:71:cf:61:f2:a5:16:a4:ab:16:d3:b5:65:
         9b:ed:67:2e:ad:c6:5d:ca:1f:ec:5b:19:b1:02:20:78:b9:9c:
         b4:23:e0:11:f8:ce:fb:24:c0:58:2e:8c:2f:05:25:8d:82:56:
         80:26:60:b8:32:29:99:19:3d:57:b8:a0:f2:6a:cd:fa:84:90:
         41:1a:c2:c4:88:48:80:33:0f:24:17:6b:c0:62:a4:a8:79:cb:
         bc:78:53:86:a4:46:bd:da:71:8b:fa:b3:ef:32:33:ac:2a:30:
         32:e4:b7:76:f5:f9:80:ab:32:aa:8e:22:fe:f9:e4:8b:70:3e:
         55:f5:3c:36:27:a8:96:6b:87:d1:d9:a7:fa:37:f6:76:26:91:
         bb:1c:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----