Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/Egy7fImwK4YFeYyqS6kckIuV684.roa
File:                     Egy7fImwK4YFeYyqS6kckIuV684.roa (raw, json)
Hash identifier:          vZ3tN02cWpGHvZ+6x02Mv55Qc85aaZDSoYNWmlkloP8=
Subject key identifier:   12:0C:BB:7C:89:B0:2B:86:05:79:8C:AA:4B:A9:1C:90:8B:95:EB:CE
Certificate issuer:       /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial:       015DCE94
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/Egy7fImwK4YFeYyqS6kckIuV684.roa
Signing time:             Wed 02 Feb 2022 15:38:35 +0000
ROA not before:           Wed 02 Feb 2022 15:38:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59608
IP address blocks:        188.213.84.0/23 maxlen: 24
                          2a11:e687::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22924948 (0x15dce94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
        Validity
            Not Before: Feb  2 15:38:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=120cbb7c89b02b8605798caa4ba91c908b95ebce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:c3:8f:03:18:26:a3:fb:fa:31:bd:06:8a:
                    85:59:be:fb:9a:2e:e8:45:11:59:81:72:fa:0e:b5:
                    21:d3:f3:e4:95:68:93:b2:33:c1:04:cb:f2:0d:5b:
                    1e:21:7d:9a:87:93:93:eb:e2:48:7f:b1:e2:bc:ce:
                    85:f3:ff:ce:e7:95:9b:0d:e2:bd:05:af:d1:11:30:
                    73:4a:8a:b0:a1:37:a0:c2:74:60:44:1d:d5:93:31:
                    da:6c:f0:6d:2c:fb:93:a8:ba:56:61:41:7e:55:75:
                    ed:c5:9b:54:9f:22:07:f2:1b:4b:71:dc:77:fb:a1:
                    7d:d8:fc:29:da:78:fd:ec:4b:f8:93:a6:ec:1a:b3:
                    87:e9:a7:80:57:77:4b:67:bd:50:47:14:24:84:f9:
                    9f:99:aa:8f:13:84:91:79:b1:59:d1:0c:c7:93:d6:
                    03:16:c2:4b:e9:6d:92:48:ab:2d:96:07:80:34:96:
                    e2:2c:d8:32:59:67:fc:29:70:fa:ab:e9:e9:d0:8e:
                    58:14:da:4f:6e:65:af:7e:40:a1:be:a4:91:86:f9:
                    83:1a:4d:a2:92:da:e7:36:78:c4:77:3a:77:32:c5:
                    32:02:aa:64:b3:97:78:be:9f:fc:37:5d:8b:f7:b6:
                    3c:b2:0e:96:2b:88:a1:6b:53:6f:34:76:3d:e4:d9:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:BB:7C:89:B0:2B:86:05:79:8C:AA:4B:A9:1C:90:8B:95:EB:CE
            X509v3 Authority Key Identifier:
                keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/Egy7fImwK4YFeYyqS6kckIuV684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.213.84.0/23
                IPv6:
                  2a11:e687::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:06:a5:85:64:28:85:b9:3f:d4:de:4d:f9:fc:78:bf:e9:
         df:a2:06:55:03:73:93:11:a5:2d:53:58:b3:6e:d1:cb:77:80:
         2e:a8:54:89:75:48:80:1f:7e:d9:e4:61:52:8d:7b:91:6c:9b:
         35:53:71:93:48:f4:06:9a:bc:4b:a8:01:11:41:1a:13:89:ac:
         dc:91:9e:98:55:59:6e:4b:6b:b3:9b:c8:93:f2:8a:b5:96:da:
         ae:a4:f4:44:74:04:08:7e:bf:b2:8f:56:95:5c:66:66:69:a0:
         bc:54:f4:0a:77:a4:6d:28:ad:1b:65:28:80:3e:d6:d8:e8:54:
         ac:c3:28:c7:25:91:41:21:7e:88:c9:07:2d:69:73:e8:a7:be:
         b9:44:55:91:6b:a7:4c:d5:fc:27:2b:ac:f3:9d:d9:ba:f3:a8:
         23:86:59:d2:f3:b2:f1:c1:50:ad:d8:0f:c0:04:9c:9b:d6:3b:
         2a:6e:ce:f8:a7:39:58:cb:6c:50:8d:61:bd:4b:9d:7d:19:d6:
         00:3a:79:29:26:68:fd:f8:5b:1b:85:92:57:ac:6d:37:c7:33:
         2b:00:ca:84:bd:24:2e:0f:34:11:34:80:bc:5b:0d:0f:a8:25:
         7b:76:20:a5:3e:2b:d3:2f:f9:9e:69:fe:c8:44:aa:89:67:41:
         2f:44:19:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAV3OlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
M2UyMzQwZWY1YzRhNDk1MmViNDEzZDI4OGMyOWQ5Mzc4MzQyMjMyMB4XDTIyMDIw
MjE1MzgzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTIwY2JiN2M4OWIw
MmI4NjA1Nzk4Y2FhNGJhOTFjOTA4Yjk1ZWJjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALaqw48DGCaj+/oxvQaKhVm++5ou6EURWYFy+g61IdPz5JVo
k7IzwQTL8g1bHiF9moeTk+viSH+x4rzOhfP/zueVmw3ivQWv0REwc0qKsKE3oMJ0
YEQd1ZMx2mzwbSz7k6i6VmFBflV17cWbVJ8iB/IbS3Hcd/uhfdj8Kdp4/exL+JOm
7Bqzh+mngFd3S2e9UEcUJIT5n5mqjxOEkXmxWdEMx5PWAxbCS+ltkkirLZYHgDSW
4izYMlln/Clw+qvp6dCOWBTaT25lr35Aob6kkYb5gxpNopLa5zZ4xHc6dzLFMgKq
ZLOXeL6f/Dddi/e2PLIOliuIoWtTbzR2PeTZEG0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQSDLt8ibArhgV5jKpLqRyQi5XrzjAfBgNVHSMEGDAWgBSD4jQO9cSklS60
E9KIwp2TeDQiMjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ctSTBEdlhFcEpVdXRCUFNpTUtkazNnMElqSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvZDRkMmY4LThkYzEtNDA3MC05NzdlLWE2Y2VjMDQ1OTVmOC8x
L0VneTdmSW13SzRZRmVZeXFTNmtja0l1VjY4NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
ZDRkMmY4LThkYzEtNDA3MC05NzdlLWE2Y2VjMDQ1OTVmOC8xL2ctSTBEdlhFcEpV
dXRCUFNpTUtkazNnMElqSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAbzVVDANBAIAAjAHAwUAKhHmhzAN
BgkqhkiG9w0BAQsFAAOCAQEAF7UGpYVkKIW5P9TeTfn8eL/p36IGVQNzkxGlLVNY
s27Ry3eALqhUiXVIgB9+2eRhUo17kWybNVNxk0j0Bpq8S6gBEUEaE4ms3JGemFVZ
bktrs5vIk/KKtZbarqT0RHQECH6/so9WlVxmZmmgvFT0CnekbSitG2UogD7W2OhU
rMMoxyWRQSF+iMkHLWlz6Ke+uURVkWunTNX8Jyus853ZuvOoI4ZZ0vOy8cFQrdgP
wAScm9Y7Km7O+Kc5WMtsUI1hvUudfRnWADp5KSZo/fhbG4WSV6xtN8czKwDKhL0k
Lg80ETSAvFsND6gle3YgpT4r0y/5nmn+yESqiWdBL0QZSw==
-----END CERTIFICATE-----