Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Cbb-h3VluqNEWyNAS6rGrbK6_vI.roa
File:                     Cbb-h3VluqNEWyNAS6rGrbK6_vI.roa (raw, json)
Hash identifier:          7/tRpOk5PhJJYPWo7SxOWC80xpvQY+ODksvkr1uneVQ=
Subject key identifier:   09:B6:FE:87:75:65:BA:A3:44:5B:23:40:4B:AA:C6:AD:B2:BA:FE:F2
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0E12D9E6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Cbb-h3VluqNEWyNAS6rGrbK6_vI.roa
Signing time:             Sat 01 Jan 2022 01:58:13 +0000
ROA not before:           Sat 01 Jan 2022 01:58:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        194.87.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236116454 (0xe12d9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  1 01:58:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09b6fe877565baa3445b23404baac6adb2bafef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:8d:b5:83:79:f9:87:79:07:b1:5f:46:89:
                    f1:0a:c3:ed:8f:ef:6c:69:da:c7:2a:76:32:91:2d:
                    c2:3b:26:ef:79:94:76:b3:7e:21:87:03:87:b6:5a:
                    09:7c:3e:02:f8:02:8d:f8:71:02:66:d9:f7:20:2e:
                    78:c8:07:d1:db:82:07:04:84:7a:4d:e3:47:8a:67:
                    32:f7:4d:e1:54:4f:6d:a1:43:68:ae:2e:b3:ce:00:
                    e9:0c:ca:d2:d8:13:3d:86:21:fb:48:43:7a:1b:31:
                    94:20:10:8c:8d:16:6e:6b:42:2d:21:c8:02:94:e6:
                    c8:79:c8:84:a5:ab:27:de:a4:26:8f:8c:aa:83:bf:
                    21:b6:88:63:5d:f9:04:86:4c:e8:53:68:48:db:37:
                    77:57:59:e7:d5:a4:49:98:d0:fc:9a:26:c5:32:b7:
                    c3:79:e3:7d:6f:ba:fd:30:5e:a6:02:9c:1b:d9:d0:
                    69:2a:a5:48:22:4a:cd:f5:03:13:83:c0:94:af:f1:
                    b6:3f:fe:cc:19:b7:8a:3c:f1:be:86:ef:77:43:7f:
                    e5:61:5f:13:eb:9f:6d:b6:09:b5:f9:5e:98:18:ce:
                    d6:57:46:dc:01:11:d1:bd:02:bc:b2:51:1b:19:04:
                    a8:72:09:31:56:42:4b:06:42:f4:8b:16:52:72:21:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:FE:87:75:65:BA:A3:44:5B:23:40:4B:AA:C6:AD:B2:BA:FE:F2
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Cbb-h3VluqNEWyNAS6rGrbK6_vI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:db:94:77:ca:83:f2:5e:9c:73:0a:5e:ce:0a:06:be:eb:dc:
         bc:5f:73:80:15:1e:c0:ff:01:7f:01:28:85:f9:93:2b:85:b3:
         bd:e3:66:47:f6:75:2f:66:ed:b6:8c:3a:39:d0:0e:c9:45:d5:
         4f:12:75:1f:12:be:3b:bb:c9:3a:9c:20:19:5e:7f:6f:3d:f2:
         6b:19:12:2e:73:fb:e4:90:a1:ce:e9:aa:b2:5e:1f:2a:16:cd:
         71:2b:7f:65:26:f7:61:d6:3e:94:07:8d:ed:7c:2d:05:74:e9:
         2f:40:98:67:6e:ba:ed:ca:6b:ff:4c:8b:bb:40:df:87:3a:99:
         10:04:47:e9:69:da:6a:9a:f4:24:6a:dc:ae:e9:e3:e4:55:43:
         6f:b1:f1:e4:76:c6:dd:5a:f1:9b:07:6c:1b:79:38:77:48:2c:
         bc:41:1d:2e:9e:c1:d0:86:ba:65:45:16:60:55:48:76:88:f0:
         16:b7:71:0f:24:30:1b:77:8f:4f:d7:be:e5:96:79:23:8f:5e:
         03:ae:54:ec:5a:45:aa:26:c0:19:42:5f:83:d5:01:a1:c7:db:
         28:c8:44:d3:3a:e1:e3:f2:bd:9b:d0:2c:4b:b5:31:e0:11:f0:
         ea:0e:23:a5:e7:27:bc:ec:f0:62:b5:10:75:b4:ba:75:96:f5:
         9a:da:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----