Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/auzRHu2GWwlZtAfVd51X8koJqwU.roa
File:                     auzRHu2GWwlZtAfVd51X8koJqwU.roa (raw, json)
Hash identifier:          WNJEL0F3KoXHMHJkaj3AqdX3uibJl/32qUvxjElDFk0=
Subject key identifier:   6A:EC:D1:1E:ED:86:5B:09:59:B4:07:D5:77:9D:57:F2:4A:09:AB:05
Certificate issuer:       /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial:       03CE0C29
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/auzRHu2GWwlZtAfVd51X8koJqwU.roa
Signing time:             Sat 01 Jan 2022 12:57:46 +0000
ROA not before:           Sat 01 Jan 2022 12:57:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203052
IP address blocks:        185.146.140.0/22 maxlen: 22
                          2a07:5100::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63835177 (0x3ce0c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
        Validity
            Not Before: Jan  1 12:57:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6aecd11eed865b0959b407d5779d57f24a09ab05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:a9:32:0a:c9:f1:ad:79:21:ab:e4:44:af:
                    c8:a0:a1:46:3e:c0:d2:00:73:fc:b2:f0:c8:16:0f:
                    fe:23:13:e2:4b:8d:08:05:a4:13:9c:7b:08:ce:39:
                    16:3f:d8:49:ee:76:46:1f:d7:62:ec:70:6c:7e:35:
                    65:cf:85:d4:86:e9:8a:f5:f0:3e:c6:14:26:d1:a6:
                    63:64:d7:88:80:86:1b:80:e4:96:11:2a:30:44:51:
                    c1:4d:c9:4e:16:f6:2f:61:ca:c8:f6:35:a5:75:a5:
                    d6:63:04:ff:bd:a2:9f:a5:c8:ee:20:c3:0a:66:ac:
                    e3:55:3d:f4:ab:86:f4:e1:1d:2c:67:5b:3e:db:38:
                    cb:0c:c0:c8:d5:6c:a5:2c:a3:cb:e5:04:c5:1b:57:
                    d8:3e:c1:38:2f:dd:ad:cd:c5:39:6a:60:a3:b8:90:
                    c3:c6:f1:6c:fa:9d:8a:6c:86:bf:32:c3:32:58:0e:
                    9a:39:69:30:22:0f:d6:e2:25:ee:1c:26:92:a5:19:
                    55:89:3b:1d:1c:11:f3:8a:fc:f0:b1:92:ec:ab:db:
                    79:74:13:29:86:31:8c:96:22:56:a4:20:be:45:5c:
                    db:3c:1d:cb:7d:11:82:d9:2e:ae:76:12:93:e4:04:
                    b3:1e:53:ff:a1:28:e2:73:7d:18:5b:af:d3:e6:7d:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EC:D1:1E:ED:86:5B:09:59:B4:07:D5:77:9D:57:F2:4A:09:AB:05
            X509v3 Authority Key Identifier:
                keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/auzRHu2GWwlZtAfVd51X8koJqwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.146.140.0/22
                IPv6:
                  2a07:5100::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:4f:65:30:9f:cd:54:26:9e:ea:f8:f0:0e:f0:b9:98:2e:df:
         af:c2:58:af:1b:64:3a:a5:e4:3e:c9:3b:18:b2:4c:b2:d8:60:
         05:a8:27:17:3a:12:73:31:3e:d6:b6:41:5c:1e:a6:7d:d0:c5:
         7e:76:75:34:f9:d1:50:ea:ef:16:7f:a4:a9:8c:20:d8:bc:4e:
         4e:0e:2b:a5:fd:6d:f0:d4:29:4f:89:2d:98:5e:19:9c:ab:29:
         e9:2b:55:31:8d:eb:59:3b:8b:7d:71:ca:29:b7:d7:1a:ff:f5:
         bf:b6:aa:79:3a:97:17:21:9e:d5:a9:82:55:57:1d:44:c2:61:
         b5:93:c0:20:d5:79:c9:3e:0f:98:05:c5:54:63:d5:66:28:23:
         ce:8d:48:c2:2e:a4:53:f7:c6:21:59:3c:b7:7b:3e:0d:dd:15:
         7f:73:18:1b:94:94:7e:c2:61:6a:a4:03:3b:27:6d:3c:8b:93:
         3b:20:e5:ad:66:f2:e3:51:be:87:d6:6f:ab:4c:a5:2f:6c:28:
         e3:90:0c:6b:30:ca:39:a0:1a:df:4c:7b:be:ce:cc:d2:53:47:
         b6:30:d7:aa:1d:e4:3a:4e:88:fc:5b:88:74:ad:ea:7d:d6:e9:
         a5:d9:d3:3f:6c:94:ea:6b:a2:7d:71:9e:6f:85:0f:fc:63:94:
         46:aa:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----