Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/ii8r-OpfLl6OuZzlzXn_A1NV1MY.roa
File:                     ii8r-OpfLl6OuZzlzXn_A1NV1MY.roa (raw, json)
Hash identifier:          LOHlXNG+pc8HHOJz/L0Rw+Sh60FY4E5cA53j2fKYxx8=
Subject key identifier:   8A:2F:2B:F8:EA:5F:2E:5E:8E:B9:9C:E5:CD:79:FF:03:53:55:D4:C6
Certificate issuer:       /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial:       05172CB8
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/ii8r-OpfLl6OuZzlzXn_A1NV1MY.roa
Signing time:             Sat 01 Jan 2022 13:07:04 +0000
ROA not before:           Sat 01 Jan 2022 13:07:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57728
IP address blocks:        188.122.192.0/19 maxlen: 19
                          2a0a:b6c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85404856 (0x5172cb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
        Validity
            Not Before: Jan  1 13:07:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a2f2bf8ea5f2e5e8eb99ce5cd79ff035355d4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:49:b7:8e:1e:b8:da:0d:8b:27:9b:1d:6b:
                    3b:57:2e:18:0f:89:2e:3a:c1:d4:5f:7d:5f:a9:07:
                    23:99:25:91:f0:84:ff:4d:75:7a:31:c7:77:e5:07:
                    02:67:98:b8:58:c3:e8:b3:63:4e:de:1f:e2:be:5c:
                    8c:c1:13:64:3f:f4:db:a9:8b:b6:88:a3:9e:6a:dd:
                    47:d8:a5:ff:1e:79:d2:07:47:1e:10:34:2f:41:20:
                    3e:d4:66:58:e9:d5:5a:03:95:22:ab:18:09:c5:a6:
                    3f:4a:50:39:db:d5:a6:28:4b:a8:45:b6:47:c8:3c:
                    12:27:99:0b:3f:08:7a:04:2c:ee:42:51:a2:72:e1:
                    a4:67:d8:64:81:f4:cc:18:8e:18:09:a9:53:7d:46:
                    17:f6:c0:89:9a:4e:50:f5:9b:d6:f8:44:f5:6b:b1:
                    f5:2f:0a:5e:a5:41:42:32:24:b4:77:c5:71:a9:51:
                    9b:4e:c0:25:cd:93:05:b6:65:f4:c3:58:2d:d2:db:
                    e4:7b:9d:5d:08:c4:6a:9d:47:18:a7:ce:0c:77:73:
                    78:b7:0a:e2:49:b9:be:83:d5:32:c7:42:86:00:34:
                    ac:85:db:5a:c6:a3:94:ce:21:7f:f8:10:b7:59:40:
                    2f:52:a8:6a:7e:40:c5:02:b2:04:97:44:d6:21:b7:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:2B:F8:EA:5F:2E:5E:8E:B9:9C:E5:CD:79:FF:03:53:55:D4:C6
            X509v3 Authority Key Identifier:
                keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/ii8r-OpfLl6OuZzlzXn_A1NV1MY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.122.192.0/19
                IPv6:
                  2a0a:b6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:4a:1b:63:c1:a7:f0:83:ee:25:da:39:67:74:f6:43:ec:7c:
         81:8b:5e:41:b4:18:62:8b:6c:ae:d4:a2:ed:ec:22:43:8f:c1:
         6b:fb:29:de:77:b3:11:01:b8:99:fd:30:46:78:9c:d2:a8:06:
         cc:40:c2:58:6e:a3:11:cb:b5:1a:41:a0:bb:e6:7c:d4:97:31:
         9a:a9:ea:68:c2:23:df:4d:f6:ad:85:67:2c:18:46:0a:98:6d:
         29:4a:86:86:ea:8e:d1:5e:db:21:c3:86:38:2e:a7:fd:12:c4:
         a2:06:6b:ce:fd:aa:de:5a:04:7c:8b:78:9a:34:b7:18:b3:c2:
         47:6e:7e:2e:3d:e4:33:6f:9a:6d:3b:8f:cb:0f:f8:a4:99:67:
         80:95:d8:eb:14:f9:de:8f:09:ec:f0:23:57:23:1b:14:9c:8b:
         93:d5:aa:df:64:dd:03:26:91:52:1e:8b:3d:a6:08:09:13:84:
         65:ee:3b:eb:c9:ba:3d:a9:8a:f0:aa:a9:7a:16:41:ac:38:62:
         3a:bb:89:b3:4f:74:0f:7f:da:34:ba:e5:f3:46:40:ce:40:7f:
         f5:df:e7:27:09:20:41:84:5c:08:bd:d7:1e:03:8f:bf:60:e4:
         d2:e3:19:0d:44:d0:6d:e7:2c:ca:a2:ea:cc:04:95:a5:38:23:
         4b:e9:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----