Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/SlvFOq-BLrjkuXS_ihqSLa6_I28.roa
File:                     SlvFOq-BLrjkuXS_ihqSLa6_I28.roa (raw, json)
Hash identifier:          8ez0juTXmBHdP+FfyjxI7hzuG4wGL78h36W15KLedrU=
Subject key identifier:   4A:5B:C5:3A:AF:81:2E:B8:E4:B9:74:BF:8A:1A:92:2D:AE:BF:23:6F
Certificate issuer:       /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial:       096F8C19
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/SlvFOq-BLrjkuXS_ihqSLa6_I28.roa
Signing time:             Sat 01 Jan 2022 14:08:49 +0000
ROA not before:           Sat 01 Jan 2022 14:08:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43366
IP address blocks:        185.79.8.0/22 maxlen: 24
                          2a05:6c80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158305305 (0x96f8c19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
        Validity
            Not Before: Jan  1 14:08:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a5bc53aaf812eb8e4b974bf8a1a922daebf236f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:af:68:9b:ba:c9:a2:4e:04:de:26:73:30:
                    64:67:e5:18:f6:45:85:62:8a:4a:90:79:65:cf:19:
                    83:96:54:ea:19:3d:7b:3b:de:ba:01:05:d3:09:77:
                    66:38:a6:68:42:e4:8d:58:35:1f:27:f3:27:a6:52:
                    85:a2:10:67:67:07:04:1a:b6:1d:60:a6:b4:fb:e3:
                    74:aa:26:3e:9b:ad:9a:e6:9b:09:1a:60:cf:0d:b6:
                    54:79:5e:c5:33:69:32:dc:58:ea:40:ad:a8:1f:2d:
                    03:af:bc:59:b1:6e:e2:1e:20:54:cb:65:cd:a4:ef:
                    f2:de:55:be:71:4e:dd:a2:c0:cb:c3:39:c0:c2:54:
                    b2:25:cc:71:f4:12:9a:ec:3e:8f:93:7b:17:43:43:
                    94:9e:95:6b:be:b3:9b:99:9e:15:3d:4a:8a:a2:c0:
                    b4:35:00:de:88:52:52:95:4c:69:44:de:de:4e:62:
                    85:67:d4:83:08:16:d5:cb:cc:80:e0:e1:5f:d0:6c:
                    e8:90:07:57:aa:99:c7:08:d7:18:94:f1:c1:6e:06:
                    c4:bf:c0:2c:55:4c:91:ea:36:ea:df:bd:41:f3:d4:
                    a4:48:2a:77:3f:4d:52:bb:39:52:2f:a4:aa:99:ae:
                    a2:c1:fe:92:37:97:1e:40:ec:91:09:95:44:45:64:
                    a8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:C5:3A:AF:81:2E:B8:E4:B9:74:BF:8A:1A:92:2D:AE:BF:23:6F
            X509v3 Authority Key Identifier:
                keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/SlvFOq-BLrjkuXS_ihqSLa6_I28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.8.0/22
                IPv6:
                  2a05:6c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:3f:3b:18:fd:52:41:c5:fc:bc:3d:48:95:94:1d:24:dd:
         c5:96:6c:d3:af:12:a2:28:76:70:f6:70:3b:4c:c2:48:cf:c7:
         76:43:38:a3:ac:22:2f:db:23:8d:87:c3:60:f0:0a:85:b2:3c:
         fa:c1:c5:ce:ec:c2:72:38:3f:65:24:64:aa:18:9b:37:cb:ba:
         01:d1:ed:48:a4:fc:74:fc:07:3a:ab:7c:5f:6a:b2:d3:b2:2a:
         5c:30:69:22:af:22:d0:0c:e6:c9:a4:00:4e:4d:33:2d:b6:26:
         1e:6c:39:f2:1e:d0:c2:a9:24:a8:30:1c:d9:92:27:c6:c6:99:
         45:0e:7b:f2:76:24:f0:80:b5:44:68:68:1b:47:49:a2:55:1c:
         f5:2b:1b:2a:c9:43:09:af:6e:a9:e1:91:a0:5a:94:c6:aa:ee:
         7f:fd:38:a1:bd:fd:67:e1:97:4f:17:6a:20:5c:63:fc:10:c3:
         3d:b6:f7:4c:68:06:0b:20:10:3b:34:78:cd:88:52:f9:cb:e1:
         31:ab:92:b3:fa:81:fb:a7:eb:41:42:2a:ea:6b:c7:b9:3b:a9:
         df:03:6c:6c:30:e3:3e:f4:94:1a:3e:50:27:82:8c:8a:fe:38:
         9a:1b:8b:97:b3:40:2d:65:99:dd:d7:33:cd:e4:3a:f2:1a:4d:
         fa:8b:f7:f8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECW+MGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MTAwNmEwNmRjNDkwOTk3ZmY4ZmMzYTQyZWNmMzg5YmVkM2RkMTc4MB4XDTIyMDEw
MTE0MDg0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE1YmM1M2FhZjgx
MmViOGU0Yjk3NGJmOGExYTkyMmRhZWJmMjM2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJVGr2ibusmiTgTeJnMwZGflGPZFhWKKSpB5Zc8Zg5ZU6hk9
ezveugEF0wl3ZjimaELkjVg1HyfzJ6ZShaIQZ2cHBBq2HWCmtPvjdKomPputmuab
CRpgzw22VHlexTNpMtxY6kCtqB8tA6+8WbFu4h4gVMtlzaTv8t5VvnFO3aLAy8M5
wMJUsiXMcfQSmuw+j5N7F0NDlJ6Va76zm5meFT1KiqLAtDUA3ohSUpVMaUTe3k5i
hWfUgwgW1cvMgODhX9Bs6JAHV6qZxwjXGJTxwW4GxL/ALFVMkeo26t+9QfPUpEgq
dz9NUrs5Ui+kqpmuosH+kjeXHkDskQmVREVkqN8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRKW8U6r4EuuOS5dL+KGpItrr8jbzAfBgNVHSMEGDAWgBThAGoG3EkJl/+P
w6Quzzib7T3ReDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRRQnFCdHhKQ1pmX2o4T2tMczg0bS0wOTBYZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvODMwYjVjLWI2YzgtNDk3OS1hNTNlLTQ5NGUyNjQ5MTc5Ni8x
L1NsdkZPcS1CTHJqa3VYU19paHFTTGE2X0kyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
ODMwYjVjLWI2YzgtNDk3OS1hNTNlLTQ5NGUyNjQ5MTc5Ni8xLzRRQnFCdHhKQ1pm
X2o4T2tMczg0bS0wOTBYZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlPCDANBAIAAjAHAwUDKgVsgDAN
BgkqhkiG9w0BAQsFAAOCAQEABcg/Oxj9UkHF/Lw9SJWUHSTdxZZs068Soih2cPZw
O0zCSM/HdkM4o6wiL9sjjYfDYPAKhbI8+sHFzuzCcjg/ZSRkqhibN8u6AdHtSKT8
dPwHOqt8X2qy07IqXDBpIq8i0AzmyaQATk0zLbYmHmw58h7QwqkkqDAc2ZInxsaZ
RQ578nYk8IC1RGhoG0dJolUc9SsbKslDCa9uqeGRoFqUxqruf/04ob39Z+GXTxdq
IFxj/BDDPbb3TGgGCyAQOzR4zYhS+cvhMauSs/qB+6frQUIq6mvHuTup3wNsbDDj
PvSUGj5QJ4KMiv44mhuLl7NALWWZ3dczzeQ68hpN+ov3+A==
-----END CERTIFICATE-----