Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/aagaNf9PdXWyXnprlUcifeedeNo.roa
File:                     aagaNf9PdXWyXnprlUcifeedeNo.roa (raw, json)
Hash identifier:          iZa4/5+u38TPyd9OMHPWc+V4NHUsfGX17KDK3dZXEMU=
Subject key identifier:   69:A8:1A:35:FF:4F:75:75:B2:5E:7A:6B:95:47:22:7D:E7:9D:78:DA
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       155CE6
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/aagaNf9PdXWyXnprlUcifeedeNo.roa
Signing time:             Mon 14 Mar 2022 20:08:37 +0000
ROA not before:           Mon 14 Mar 2022 20:08:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        185.177.46.0/23 maxlen: 23
                          2a0a:2f80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400038 (0x155ce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Mar 14 20:08:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69a81a35ff4f7575b25e7a6b9547227de79d78da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:db:42:c8:8d:7c:2c:b1:22:29:d6:79:f0:
                    af:9d:47:ad:b8:6a:91:f3:9e:fe:b4:24:05:c8:20:
                    a1:76:fc:87:5d:2d:86:2e:44:7c:01:7f:63:f7:af:
                    49:e1:b4:d5:bd:c8:58:80:a3:3b:b4:ae:f9:69:a2:
                    5f:bd:96:51:af:c8:f2:4b:b0:5e:82:f6:87:49:1c:
                    83:95:45:49:c5:f2:b1:5f:7f:1c:2a:b9:db:3b:32:
                    b4:f4:12:c0:91:a5:c9:74:2b:61:b3:9c:94:40:39:
                    19:3c:a6:a7:c0:17:89:e6:8b:c7:b9:91:0e:ff:2a:
                    f2:04:60:5a:ea:03:55:d4:75:b6:51:56:c5:20:77:
                    e1:89:f6:40:04:d5:ce:88:c7:bb:0c:06:99:d8:9c:
                    0b:59:3e:c2:66:17:da:ef:12:43:35:39:0d:45:5f:
                    cd:b7:f9:9d:32:4d:a3:fd:69:cf:e8:bc:21:a3:4a:
                    d9:11:ae:0a:2d:5c:23:6e:f2:1a:9a:2a:80:fd:a4:
                    fd:ce:84:3e:5f:81:42:63:b5:c6:be:44:8f:dc:5d:
                    73:6a:2d:6a:b4:fe:bc:cb:51:af:38:8a:b4:a0:b3:
                    14:fc:f2:a0:82:d7:12:70:63:21:05:30:ab:de:ca:
                    97:33:33:56:3b:cd:ba:5b:84:03:1e:36:3e:35:21:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:1A:35:FF:4F:75:75:B2:5E:7A:6B:95:47:22:7D:E7:9D:78:DA
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/aagaNf9PdXWyXnprlUcifeedeNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.46.0/23
                IPv6:
                  2a0a:2f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:00:58:bc:e8:be:cf:7c:76:45:92:5a:8b:2b:b3:42:36:92:
         cc:96:b4:43:40:8f:4c:9c:57:cd:f2:e5:4a:5c:ea:a2:48:4f:
         83:40:f5:f5:65:e5:92:0e:dd:a5:0d:1c:ae:4e:f9:63:3e:d7:
         d6:2d:c1:3b:c1:0d:49:57:3d:e1:74:2c:3e:c6:74:80:d5:31:
         0a:b2:69:0a:f0:81:15:cb:64:9e:e9:9d:86:2b:20:93:ce:24:
         87:91:72:22:53:a6:17:08:b6:08:36:03:5d:81:cb:56:f2:f7:
         10:a7:a0:7c:4d:78:cc:dd:48:42:83:c5:20:23:58:5b:46:8b:
         89:9c:33:52:a1:d4:06:4d:ba:82:61:86:e1:60:52:1d:cd:10:
         70:bb:24:ce:49:a5:16:d1:2c:d2:81:72:53:b7:79:a0:11:7b:
         60:e4:b6:0a:bb:58:6b:9e:3c:fe:ae:84:3b:ed:82:b3:2a:e7:
         14:73:88:0a:4a:61:10:c0:25:16:84:d8:5b:42:4b:36:1b:b0:
         41:25:2f:1b:8f:2e:c3:39:40:71:09:c4:18:0a:11:cb:93:3f:
         3f:d5:c3:23:50:c4:0e:78:be:67:66:d7:76:73:04:9c:4f:fc:
         4d:96:74:b4:be:d4:33:51:e4:40:23:69:a5:61:0e:61:67:5d:
         87:f8:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----