Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/guN95M8RgRbIpCtiHd-9e2Zlf3s.roa
File:                     guN95M8RgRbIpCtiHd-9e2Zlf3s.roa (raw, json)
Hash identifier:          X+u9s2dh/nFTPM2H66TyMjndm6TSUeTEamiZ4nq9gj4=
Subject key identifier:   82:E3:7D:E4:CF:11:81:16:C8:A4:2B:62:1D:DF:BD:7B:66:65:7F:7B
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       05EBE57B
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/guN95M8RgRbIpCtiHd-9e2Zlf3s.roa
Signing time:             Wed 15 Jun 2022 15:20:44 +0000
ROA not before:           Wed 15 Jun 2022 15:20:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213035
IP address blocks:        193.233.177.0/24 maxlen: 24
                          193.233.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99345787 (0x5ebe57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jun 15 15:20:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82e37de4cf118116c8a42b621ddfbd7b66657f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:39:02:15:ff:c1:ce:72:99:c1:57:5c:06:
                    5f:48:90:79:01:f4:ab:86:0c:2d:ba:f3:14:92:c1:
                    a1:bd:37:98:b4:ac:0f:aa:c2:fa:fb:59:ae:e1:4d:
                    26:66:e0:d6:c1:02:ca:7f:97:73:2c:59:6b:c1:70:
                    33:3a:22:46:7d:47:67:bb:e4:d1:4d:5f:71:cd:17:
                    2a:a2:36:28:2a:46:e8:f6:60:24:93:2c:af:73:23:
                    58:01:86:79:82:f7:ee:41:08:c8:b4:02:88:27:de:
                    63:d0:de:4f:e0:c5:b3:94:18:78:3c:b0:3c:f1:68:
                    80:b5:0b:c9:ba:ae:80:bf:79:e7:50:37:14:30:2c:
                    68:39:fe:6e:11:5a:9d:72:e3:44:54:cc:70:c9:e3:
                    16:33:d6:46:50:d3:d6:3d:d2:4d:e9:ac:11:53:f7:
                    71:db:ca:e0:67:ff:73:3a:ac:02:8c:58:3e:51:cf:
                    18:64:7d:53:14:e8:4f:56:74:83:7b:a8:ea:6a:a5:
                    66:1a:5b:a7:62:5a:d6:6e:fe:8d:da:5a:78:f2:80:
                    c1:8c:e6:6b:1b:3f:2a:26:eb:db:23:c5:a8:17:9a:
                    dd:30:a4:9f:70:be:79:a8:9b:0f:f4:85:d7:0a:91:
                    78:1f:f8:57:0d:ed:d0:85:63:51:c3:fc:72:0e:ab:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E3:7D:E4:CF:11:81:16:C8:A4:2B:62:1D:DF:BD:7B:66:65:7F:7B
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/guN95M8RgRbIpCtiHd-9e2Zlf3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:65:4c:7d:ce:4e:07:89:7b:07:67:e4:b6:e6:1a:79:b6:
         0f:10:36:d4:58:dd:b3:18:98:1d:17:d8:f5:c9:d9:ff:05:51:
         34:5d:cf:29:37:42:ba:77:94:f1:09:3f:42:1d:8a:50:55:ec:
         a3:a7:8f:09:95:9f:44:46:ea:63:08:34:06:3c:de:82:4a:98:
         ae:24:e5:b3:93:46:5b:dd:34:fb:d9:f5:f7:eb:9b:50:0a:ad:
         68:8b:88:24:c4:0c:78:14:6e:9d:1c:82:0e:1e:18:8c:d4:33:
         db:32:7e:a1:da:38:ed:ee:54:1c:6c:35:c5:39:0e:04:27:d0:
         05:1f:35:fb:7d:a0:87:be:16:d8:d9:b7:37:c9:d6:d3:d4:79:
         f3:93:de:78:3d:30:e2:94:9e:fc:6e:92:21:22:fc:66:c1:12:
         12:da:24:b8:65:51:86:ba:e2:af:ad:77:4a:d6:b3:97:c4:54:
         c1:7e:55:83:e6:07:4d:61:7d:c7:42:a3:5e:a3:25:c0:08:48:
         60:33:ad:46:f5:62:f9:b2:b3:49:3d:6a:cd:cb:94:38:98:ee:
         52:c7:9d:ff:96:81:ae:44:10:84:53:2e:93:30:da:8f:24:43:
         7f:02:5f:a1:49:b8:b7:ab:ce:2a:46:f9:09:20:4a:90:83:8a:
         37:0b:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----