Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h2alI9Ay64COVmBb86gEYhMtsj0.roa
File:                     h2alI9Ay64COVmBb86gEYhMtsj0.roa (raw, json)
Hash identifier:          94BDifkIJQCNQRE0yPRgO3/djbCQID7YZkYwiUL++7A=
Subject key identifier:   87:66:A5:23:D0:32:EB:80:8E:56:60:5B:F3:A8:04:62:13:2D:B2:3D
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1C66EFB9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h2alI9Ay64COVmBb86gEYhMtsj0.roa
Signing time:             Sat 01 Jan 2022 01:02:30 +0000
ROA not before:           Sat 01 Jan 2022 01:02:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43068
IP address blocks:        93.123.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476508089 (0x1c66efb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 01:02:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8766a523d032eb808e56605bf3a80462132db23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:22:e1:e0:20:55:cd:90:27:26:3b:41:7a:
                    cc:b2:ec:15:dd:f3:b3:92:37:a1:6a:ff:83:23:56:
                    89:bf:24:74:b1:3c:a4:56:96:41:5e:84:8a:84:3e:
                    8a:d4:00:83:85:4a:0d:46:48:b4:c8:90:ed:12:80:
                    ae:6e:bd:6e:23:bd:86:19:ed:5a:3f:95:34:60:aa:
                    8e:1a:dc:36:53:40:2d:51:d1:94:f5:23:7f:7f:19:
                    af:57:00:bb:9d:eb:58:84:e0:b1:b2:18:be:2d:ca:
                    f5:43:1b:c9:3d:92:a6:a3:fd:f4:18:46:9e:80:4a:
                    7f:2c:36:ad:14:ce:18:bc:95:a8:5f:49:97:7c:ea:
                    ce:dc:13:55:b8:74:ea:63:2e:db:88:78:85:bd:27:
                    a1:fc:7e:c0:97:27:d1:d3:96:c0:00:9a:c3:3f:2f:
                    46:cb:23:93:e0:4a:2c:9b:7b:17:92:18:f0:50:52:
                    04:48:0d:d2:f5:2f:1b:0c:93:8d:5d:c1:2a:04:84:
                    a2:b7:d2:58:5e:d4:52:24:6d:59:94:79:73:e2:56:
                    8c:73:1a:0b:4d:90:9a:96:25:46:d6:d2:bf:a3:78:
                    0a:f3:a3:72:06:2b:5c:d5:c7:96:05:30:9c:68:45:
                    44:f2:34:18:07:0d:18:f9:a6:da:07:cf:58:02:14:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:A5:23:D0:32:EB:80:8E:56:60:5B:F3:A8:04:62:13:2D:B2:3D
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h2alI9Ay64COVmBb86gEYhMtsj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:89:15:dd:d8:27:af:bb:62:43:48:ac:b2:21:b2:12:03:be:
         34:e3:af:b7:fe:2e:49:e2:d6:cd:a7:8f:79:15:a1:6c:13:1a:
         b5:a0:71:3a:9b:33:40:4d:71:29:1c:2f:66:23:e6:92:8a:ef:
         11:06:fd:0b:96:76:1c:1c:fa:54:5b:e0:b4:0a:de:69:4f:3f:
         ba:4f:11:59:25:ba:25:20:1d:88:d2:26:5c:25:25:ac:b3:6e:
         ff:03:fd:34:79:33:6c:92:1a:1c:c6:3e:20:b6:06:5e:c8:ec:
         d1:1e:8c:56:e6:8c:de:50:f7:b8:34:ed:60:52:6d:4b:92:5f:
         7f:18:7b:a6:af:28:45:14:97:47:11:0e:9b:09:1a:cc:fc:a0:
         ea:80:e9:54:a1:20:8b:63:ae:eb:75:3d:4c:f5:51:4b:87:d4:
         aa:35:77:61:73:d1:f8:e5:e0:f2:db:20:dd:b6:e0:26:65:d2:
         3f:03:c4:4c:80:6a:9c:14:f9:90:9b:34:d4:da:27:5b:58:16:
         b3:68:35:63:57:cb:3d:35:a5:a1:ff:0a:99:7b:75:9b:e8:28:
         04:da:72:de:fd:1c:76:05:49:36:cb:73:b0:e1:a4:1d:f7:0c:
         af:f3:87:6f:b4:da:67:1e:d5:6c:02:79:a4:8f:98:b9:b4:ef:
         5c:7b:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----