Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/T1hLSDVrZPZ9X1kl3qdQhQKrCm4.roa
File:                     T1hLSDVrZPZ9X1kl3qdQhQKrCm4.roa (raw, json)
Hash identifier:          GBdOU7clRdyVIPHg5h7gkuVJP1/qqbRzIhuOge50SUY=
Subject key identifier:   4F:58:4B:48:35:6B:64:F6:7D:5F:59:25:DE:A7:50:85:02:AB:0A:6E
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       0425DC
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/T1hLSDVrZPZ9X1kl3qdQhQKrCm4.roa
Signing time:             Tue 25 Jan 2022 11:30:09 +0000
ROA not before:           Tue 25 Jan 2022 11:30:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200416
IP address blocks:        185.107.198.0/24 maxlen: 24
                          2a06:45c1::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271836 (0x425dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Jan 25 11:30:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f584b48356b64f67d5f5925dea7508502ab0a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:11:fb:39:19:0e:f3:50:e9:61:37:59:23:
                    f8:90:13:98:a8:7c:5b:3a:f1:5b:54:65:cc:05:c1:
                    2a:90:c0:bc:28:86:f4:04:25:80:e3:d3:eb:eb:54:
                    9f:9b:d9:a5:9e:1e:ac:53:a1:99:38:81:4d:4f:44:
                    b8:a6:76:35:c4:ec:a7:5a:b3:81:1b:c3:c8:a4:93:
                    e0:43:91:6b:39:8c:b5:9a:ed:c1:44:bf:2c:e0:ad:
                    a9:35:52:ec:6c:5f:b2:54:c7:3e:11:d5:fe:e0:97:
                    11:1f:17:0a:91:38:82:f8:0f:be:69:45:fb:b6:7e:
                    b2:6f:48:19:24:9c:58:3f:7f:0d:9d:21:3f:c1:d3:
                    b9:e0:6f:74:6d:ce:6b:84:d1:e1:4f:cd:ac:87:f6:
                    db:0f:19:fd:ff:67:53:3e:7a:a9:f7:a7:52:61:6c:
                    3f:03:e6:80:be:ef:2d:8f:25:ba:94:15:66:54:cb:
                    51:e2:d5:a6:71:e1:c2:3d:e1:36:ec:96:a8:25:49:
                    9f:36:58:e2:55:2f:c1:5c:17:3e:2c:3d:bb:84:f9:
                    cd:ae:18:32:e6:44:d4:a9:53:1e:c6:ed:18:6a:cd:
                    a1:d1:0e:ed:a2:db:7a:bd:72:3a:80:c4:e5:52:c0:
                    e0:dc:5c:3f:3a:ca:ff:26:95:8d:2d:a4:0b:60:08:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:58:4B:48:35:6B:64:F6:7D:5F:59:25:DE:A7:50:85:02:AB:0A:6E
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/T1hLSDVrZPZ9X1kl3qdQhQKrCm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.107.198.0/24
                IPv6:
                  2a06:45c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:12:e5:c9:f5:ac:6e:d7:e8:d0:26:a8:e7:92:03:07:bf:
         fe:d4:8a:80:f5:18:bf:6c:4b:fa:ff:41:00:9e:fd:22:b5:22:
         d5:99:11:0c:c5:a0:3e:65:c5:a4:c5:b4:8d:fa:36:ae:8c:21:
         36:e4:7e:fe:eb:e5:45:88:2a:40:65:68:01:7a:76:1b:15:a9:
         2e:06:ac:5e:f1:8f:1e:12:90:55:cb:a0:dd:36:2b:db:e6:99:
         12:3d:c3:0c:d4:78:a7:91:9a:60:75:f9:17:3d:66:df:63:3b:
         f6:89:e6:a3:ae:28:7b:19:ba:ce:46:5d:09:40:14:ff:a9:92:
         4a:a3:77:a2:77:05:67:16:c2:9e:f9:50:a6:24:07:1e:40:c9:
         95:77:e7:25:c1:3e:8f:a7:22:ea:5c:9e:7e:e8:76:be:73:28:
         2e:43:a4:85:d4:7a:ef:3e:80:e8:e6:18:ff:cb:a0:0b:2a:de:
         2b:02:07:c4:2b:62:38:89:5c:b5:d0:53:2f:96:3b:45:51:b0:
         c5:f4:4d:25:aa:ec:5b:b2:e5:8c:e3:2d:b7:0b:b0:29:fd:c9:
         e6:41:61:30:db:b3:a3:b5:f5:cb:07:60:29:48:83:a1:98:14:
         f0:ba:ee:9b:92:65:f0:03:b8:b9:c0:3e:39:aa:17:78:0e:40:
         2f:1e:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----