Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Gf362f-RFD7ftN6tJypxE9z9L7I.roa
File:                     Gf362f-RFD7ftN6tJypxE9z9L7I.roa (raw, json)
Hash identifier:          vxggInNSbirDIvC5XeMW+B5ngO7nzH8yErvbxTB+6BE=
Subject key identifier:   19:FD:FA:D9:FF:91:14:3E:DF:B4:DE:AD:27:2A:71:13:DC:FD:2F:B2
Certificate issuer:       /CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Certificate serial:       634DF7
Authority key identifier: FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Gf362f-RFD7ftN6tJypxE9z9L7I.roa
Signing time:             Mon 07 Mar 2022 10:26:25 +0000
ROA not before:           Mon 07 Mar 2022 10:26:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        62.68.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6508023 (0x634df7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
        Validity
            Not Before: Mar  7 10:26:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19fdfad9ff91143edfb4dead272a7113dcfd2fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:51:ab:85:bd:38:81:2f:c4:57:ca:ee:6a:
                    d8:aa:2b:c2:27:f6:6a:2f:04:8c:2e:7f:98:dc:a6:
                    30:85:60:68:c1:f4:ca:e5:ab:df:58:58:d7:d0:09:
                    ef:81:0d:f3:e3:30:64:ec:cc:21:85:83:25:44:34:
                    64:4f:74:3b:26:cc:b3:c7:be:25:1a:cd:bf:1a:e7:
                    68:47:49:08:fd:50:c1:23:15:36:fd:9f:98:d1:58:
                    6f:9a:c3:04:c2:ea:2e:f4:95:74:18:06:e8:10:d7:
                    77:ac:3a:23:81:2d:6f:b8:f0:6c:61:d9:ad:2a:1f:
                    19:02:92:eb:c1:49:41:a2:c1:29:38:9c:4d:e3:ea:
                    f5:b9:7f:9a:19:a3:03:38:40:59:4e:53:27:a7:9c:
                    9f:9b:1d:3f:b1:04:1f:d3:94:17:2f:f8:09:8a:c5:
                    8f:08:cd:d6:4b:f2:53:69:2b:11:53:12:fc:69:cd:
                    82:03:65:27:ac:63:d6:84:06:a3:91:71:15:e8:87:
                    c0:04:66:52:84:36:97:6a:ce:16:c4:43:e1:e7:17:
                    3e:5d:be:63:01:20:cc:b9:e6:b7:0e:9b:06:d8:e8:
                    15:7a:9c:4d:5b:99:03:43:95:a8:0c:cb:82:cc:ac:
                    21:88:74:fd:22:42:7b:61:f9:e5:a8:38:31:66:cf:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FD:FA:D9:FF:91:14:3E:DF:B4:DE:AD:27:2A:71:13:DC:FD:2F:B2
            X509v3 Authority Key Identifier:
                keyid:FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Gf362f-RFD7ftN6tJypxE9z9L7I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a3:d8:e2:c8:a2:ae:23:5c:f6:31:65:68:f6:81:16:ec:19:
         1e:b6:e6:ba:bc:66:b2:c4:5b:ae:0f:0f:db:bc:40:fa:2b:d6:
         36:3e:e0:aa:4c:27:8d:0c:01:49:7f:4b:b8:2b:77:dd:81:65:
         20:e3:28:85:9b:ea:70:7b:36:e0:e8:e6:29:d4:88:aa:ba:10:
         1c:08:94:6d:64:ea:5f:ba:07:60:a8:d6:3c:16:be:a5:4d:12:
         c6:eb:dc:bc:7d:92:ba:6b:9b:92:b0:8f:da:5f:03:a4:33:0a:
         4f:e6:5b:34:c0:8c:97:5e:ce:68:d1:86:c1:99:9a:ab:12:f3:
         5c:00:8b:4f:e5:13:3f:58:0c:27:4e:c3:7a:87:51:78:e3:82:
         b2:57:f8:16:63:1b:78:51:c9:5a:94:f7:e4:87:a0:31:32:b0:
         43:24:6f:13:cf:e9:b6:3c:8a:d5:ae:33:01:19:5a:88:d7:0f:
         79:02:4c:5b:4d:5e:54:a5:4d:20:77:43:e8:e7:ef:8b:a0:e0:
         b4:69:5f:b8:71:a7:3d:bd:7d:4a:d5:cc:a4:c6:d7:d2:d7:68:
         e4:d9:b5:19:ca:92:01:2c:f4:ac:c7:4e:fc:f7:af:61:53:2c:
         f3:de:52:70:47:72:4e:43:0d:1d:f2:8f:b4:4f:2b:d7:ff:e6:
         c5:af:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----