Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/EF1Zo0SUxjcBqND75xCLdOdoPrM.roa
File:                     EF1Zo0SUxjcBqND75xCLdOdoPrM.roa (raw, json)
Hash identifier:          xpM1GV5Bk/NkI5fVYpOyCLqBNrfD8s3CONkkBwpwB60=
Subject key identifier:   10:5D:59:A3:44:94:C6:37:01:A8:D0:FB:E7:10:8B:74:E7:68:3E:B3
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       03C8B219
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/EF1Zo0SUxjcBqND75xCLdOdoPrM.roa
Signing time:             Sat 01 Jan 2022 14:04:21 +0000
ROA not before:           Sat 01 Jan 2022 14:04:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        212.30.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63484441 (0x3c8b219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Jan  1 14:04:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=105d59a34494c63701a8d0fbe7108b74e7683eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:93:09:9d:ea:b9:6d:7f:2a:90:c9:30:a8:
                    2e:50:6b:10:05:42:7a:95:f7:ec:06:54:8c:17:8e:
                    3b:71:c5:08:f7:1a:2a:49:4d:28:d0:b0:d6:ca:4e:
                    06:bc:5a:15:bd:ad:c6:2e:8f:a2:c3:38:8b:14:29:
                    1d:e0:e0:04:02:3e:31:f4:41:85:34:dc:b8:84:5d:
                    ce:87:d3:b3:91:09:bd:a3:52:7f:74:80:6f:1d:dd:
                    cd:b2:20:87:12:2a:15:3e:1f:16:f6:90:fb:36:5a:
                    cf:4a:f3:1f:d4:9c:7a:cf:fe:0f:a3:fa:f8:69:f7:
                    30:1a:07:6d:1b:ee:d2:c9:3f:ed:c5:d3:1b:58:80:
                    ea:7a:8d:ba:67:35:cb:c2:98:27:af:49:70:ec:d0:
                    1f:1b:be:df:30:0f:b6:1a:5f:0b:4a:98:2d:8c:88:
                    3b:91:42:76:9e:c4:ca:d6:e4:b4:82:36:42:5e:d8:
                    24:f0:fb:71:f4:35:bd:dc:6e:83:bf:f4:cd:55:8f:
                    a6:2b:4d:2f:4f:c5:7a:cd:81:e7:2a:0f:87:31:db:
                    44:07:9e:04:1a:7d:c0:be:de:b6:48:37:2c:5f:52:
                    a3:89:c9:7d:bc:ed:67:9d:e5:96:ef:6a:57:e3:43:
                    72:f9:87:79:5a:68:38:af:8e:92:9f:56:e2:2d:d3:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:59:A3:44:94:C6:37:01:A8:D0:FB:E7:10:8B:74:E7:68:3E:B3
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/EF1Zo0SUxjcBqND75xCLdOdoPrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.30.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:99:c0:7f:e3:13:b1:51:7a:08:27:36:ba:ba:2c:96:d9:
         4a:dc:c0:1c:3e:0e:49:b4:49:80:a8:75:f2:59:21:30:6f:ad:
         7f:41:bc:1f:da:0c:0f:5b:1e:dd:37:73:38:97:51:12:2f:5d:
         89:16:2b:de:55:28:57:ce:30:b2:c7:c5:a4:dd:08:39:e2:90:
         ee:43:de:db:6d:cf:50:42:69:e5:a5:10:e9:8f:fd:03:5e:55:
         87:56:66:be:5e:7a:90:ff:aa:b0:1a:76:66:f1:cd:ec:4e:97:
         1e:8b:ef:03:73:dc:50:89:aa:4a:6c:7a:ef:e6:77:d0:b5:44:
         b7:c1:6f:a9:30:06:3e:95:04:4b:05:2d:c1:e6:32:8d:de:42:
         83:c4:bf:bd:a2:2c:9b:60:fd:a8:31:c0:c9:b0:c0:6c:77:3e:
         5f:de:b0:77:be:b5:76:4c:46:b4:32:50:87:59:3d:5d:08:9e:
         db:d3:65:96:76:f8:61:fc:32:fc:21:d0:c5:68:31:c4:f1:2c:
         fc:a0:23:51:2f:06:5b:8c:ee:fe:02:9a:79:99:87:fd:a5:57:
         5d:fd:fb:cf:b6:8f:6e:fd:fa:40:65:ea:fa:af:a5:35:b5:f4:
         b4:2c:99:10:b9:6b:73:3e:70:78:9f:3f:7b:3e:cc:4c:3b:5e:
         95:67:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----