Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ba3oBE4qyge3eJ65IJfLJFrKUco.roa
File:                     Ba3oBE4qyge3eJ65IJfLJFrKUco.roa (raw, json)
Hash identifier:          0lzgjTGVvJ8l2s1QgKClePU3MmylPRwul/HyXfP6DnY=
Subject key identifier:   05:AD:E8:04:4E:2A:CA:07:B7:78:9E:B9:20:97:CB:24:5A:CA:51:CA
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       1039F31A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ba3oBE4qyge3eJ65IJfLJFrKUco.roa
Signing time:             Fri 03 Jun 2022 10:54:21 +0000
ROA not before:           Fri 03 Jun 2022 10:54:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50321
IP address blocks:        212.192.0.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272233242 (0x1039f31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun  3 10:54:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05ade8044e2aca07b7789eb92097cb245aca51ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:12:cc:45:19:aa:a5:19:12:91:72:da:2f:
                    0f:f4:5d:6a:2e:87:de:26:0a:d2:18:b2:00:18:2d:
                    e2:79:6a:f9:f1:d2:d3:f3:ef:d5:e4:da:2a:49:d9:
                    17:9e:72:a1:ec:ec:18:73:19:ad:8a:31:6a:9e:b0:
                    cb:80:19:07:2a:8a:93:12:c7:1b:b6:cc:32:4c:9f:
                    9a:3a:ce:d0:c4:20:0f:69:c6:71:8f:38:82:3c:07:
                    eb:f6:cd:b0:c6:1f:fe:3b:83:b7:9e:e7:7b:5d:a5:
                    e8:bb:dc:9e:b7:94:58:e0:bd:0a:29:0e:7f:1c:95:
                    a1:3e:86:20:e3:82:1d:fb:49:8e:70:7f:3e:5f:b0:
                    b0:ae:0a:4c:3e:ef:fe:b1:59:e3:e6:6b:0b:27:ea:
                    c7:4b:45:57:9a:cb:07:dc:c6:e8:b9:15:a4:c3:5f:
                    94:3f:ce:5b:02:98:71:7d:4d:db:a0:8f:64:0f:03:
                    fa:8d:4c:ec:61:b7:97:b2:0f:af:7c:a5:f8:59:f9:
                    44:63:05:42:49:8d:c2:95:9f:f6:e6:50:1b:90:4f:
                    35:79:da:07:29:b5:b6:e1:2f:b6:12:4a:b6:3f:6d:
                    89:bf:36:07:99:eb:80:a6:56:2b:dd:ed:ab:ac:de:
                    cc:ab:a1:2f:e2:73:58:42:3a:14:69:2b:8c:ce:73:
                    9d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AD:E8:04:4E:2A:CA:07:B7:78:9E:B9:20:97:CB:24:5A:CA:51:CA
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ba3oBE4qyge3eJ65IJfLJFrKUco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.192.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:75:43:c3:2f:a2:c0:6a:84:ef:33:97:40:3d:16:de:37:67:
         d2:64:c2:7a:8f:f1:c0:3c:bb:1a:47:f3:2a:84:2f:4f:cc:0f:
         1c:23:e1:92:d7:c4:42:c5:c5:15:78:e5:4e:da:45:c8:fa:4b:
         3a:4a:7b:6e:62:03:fa:50:c0:3c:10:0e:2b:c2:6a:e1:9c:1e:
         4f:07:ea:11:4d:42:1f:54:db:76:2c:9e:d0:1e:46:2e:83:00:
         e4:32:9a:1f:17:1f:69:4c:17:18:16:78:c8:23:b3:2b:86:01:
         ff:19:2b:41:74:9d:84:89:81:ce:98:8e:44:8a:c9:df:1f:45:
         dc:02:16:02:29:4d:17:57:ed:89:a0:52:9b:b4:94:5e:58:53:
         69:09:9a:c7:bd:dc:0f:64:07:00:dd:54:34:f6:51:9e:79:21:
         9f:58:88:80:a4:32:04:a0:4c:8e:f8:c4:c9:91:5c:70:ba:66:
         77:05:49:b2:33:21:3c:65:07:e7:50:3e:c7:ae:50:89:63:1d:
         a1:64:1c:62:4a:b7:cd:58:b6:02:65:fa:02:31:b3:c8:eb:08:
         06:7f:87:c8:7c:62:4a:4c:5a:dc:a2:83:96:40:4d:45:92:e3:
         96:1b:43:d5:25:0c:59:38:6e:bd:d2:cb:9d:99:20:00:1f:ff:
         5c:b8:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----