Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/CeJOuq1SyyMACPe9-UgHQQOTbkw.roa
File:                     CeJOuq1SyyMACPe9-UgHQQOTbkw.roa (raw, json)
Hash identifier:          4PivimQA663uNSmbyxrSlaWcLzJU69O4DzoECcSc0Y0=
Subject key identifier:   09:E2:4E:BA:AD:52:CB:23:00:08:F7:BD:F9:48:07:41:03:93:6E:4C
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       2CB0B9E6
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/CeJOuq1SyyMACPe9-UgHQQOTbkw.roa
Signing time:             Sat 01 Jan 2022 04:59:42 +0000
ROA not before:           Sat 01 Jan 2022 04:59:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200094
IP address blocks:        77.79.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749779430 (0x2cb0b9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  1 04:59:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09e24ebaad52cb230008f7bdf948074103936e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:7f:8c:fd:37:a6:5c:49:58:5f:02:b2:2a:
                    33:81:ba:38:2b:db:b6:09:33:48:b2:3a:72:5e:63:
                    5c:d5:61:02:32:9d:5c:fd:66:bc:e4:13:fb:51:b7:
                    95:8c:04:a6:c9:23:c5:ab:4c:cd:60:45:22:f5:08:
                    a4:08:09:31:82:45:6c:95:60:5a:53:0f:93:41:22:
                    33:7b:f6:13:c5:c1:e3:24:1f:e9:ae:84:2e:74:9f:
                    ee:89:ab:82:97:f2:a0:18:ac:96:13:a7:c2:c0:18:
                    c5:4e:20:94:1f:4b:43:c0:23:18:09:b6:f0:05:29:
                    ef:ef:6e:09:68:22:44:4e:6c:32:ab:60:22:59:f7:
                    b9:3c:35:bd:f6:d6:cd:f6:21:54:59:81:20:12:b8:
                    18:5a:ce:08:a5:5e:52:94:22:3d:37:91:6a:a3:22:
                    97:37:ed:43:d7:a4:1b:c5:ce:0e:d5:b3:a7:e9:4c:
                    1a:19:36:65:5a:83:bb:a6:5e:63:ca:df:f9:49:e8:
                    49:d3:3b:07:c7:94:83:74:99:31:6a:ee:41:2c:de:
                    0d:5c:fd:16:ed:69:f5:54:c2:f0:ec:a6:dc:55:29:
                    7f:fc:73:c8:dd:ec:8d:16:1f:b0:41:c4:69:33:32:
                    e9:88:06:db:e2:ba:1f:a2:f9:d0:e7:fb:a2:28:c4:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E2:4E:BA:AD:52:CB:23:00:08:F7:BD:F9:48:07:41:03:93:6E:4C
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/CeJOuq1SyyMACPe9-UgHQQOTbkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.79.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:d8:e0:43:7b:91:c3:00:f6:41:17:0b:48:92:2b:30:84:9f:
         36:eb:59:2b:e7:9c:c5:f1:2c:84:0d:43:6e:b4:cd:88:91:6a:
         ed:d6:01:7c:e4:16:a8:37:fa:3c:54:b1:3c:6e:e3:3e:6d:e8:
         bf:a3:b5:f6:a4:dd:7f:fb:0b:2f:4e:a0:28:f1:ec:9e:25:7b:
         d3:69:11:d1:e5:09:4c:60:09:9d:23:ce:b2:4c:ba:d3:db:14:
         3a:7c:58:f5:28:ab:1d:2b:a4:b6:11:9e:a2:44:f6:b0:ff:6a:
         66:3b:dc:36:f2:9c:ee:0c:30:17:a9:fd:d9:6a:b5:b7:50:e6:
         9f:d7:d5:87:b7:ad:1a:be:e6:4d:4a:c1:11:6e:4d:8d:f1:10:
         70:3e:64:48:7a:9c:58:a9:80:eb:dc:29:a8:08:39:4a:86:5e:
         f4:89:b9:1f:ae:10:15:3b:45:2f:04:f6:f2:58:f4:11:33:58:
         7a:ac:c0:e8:0b:10:f9:00:c1:0f:ed:db:cc:b5:32:f4:55:d9:
         24:62:b3:af:a5:3e:57:41:1b:6d:4c:f1:61:2e:69:44:b9:5d:
         8e:6d:4c:dc:f3:26:c1:22:26:41:33:89:53:63:ee:24:c2:e5:
         d0:f1:30:3d:d3:fa:b9:7a:57:fa:2a:68:3a:fa:f9:a4:df:7c:
         21:ce:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----