Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/IuaEIQflGicN4yOkH74Xh-YtFfE.roa
File:                     IuaEIQflGicN4yOkH74Xh-YtFfE.roa (raw, json)
Hash identifier:          WVqTcrL8wIyVNwVpJqawYG7V+OS4Uf5wp0cGGx9451s=
Subject key identifier:   22:E6:84:21:07:E5:1A:27:0D:E3:23:A4:1F:BE:17:87:E6:2D:15:F1
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       045A445F
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/IuaEIQflGicN4yOkH74Xh-YtFfE.roa
Signing time:             Sat 01 Jan 2022 05:55:14 +0000
ROA not before:           Sat 01 Jan 2022 05:55:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        93.93.224.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73024607 (0x45a445f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Jan  1 05:55:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22e6842107e51a270de323a41fbe1787e62d15f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:b0:21:18:21:58:2b:c4:f1:73:ed:89:bf:
                    c5:53:3b:28:f1:af:7f:bb:1d:63:e0:78:16:73:06:
                    66:85:11:d1:7a:08:2e:56:21:72:82:63:32:ec:ed:
                    00:3f:2b:96:04:49:10:ef:3a:08:9e:df:6d:f9:6f:
                    20:f2:c5:4d:5d:86:a6:e1:17:b0:a3:4c:30:c5:36:
                    17:1d:0b:b7:f0:5b:bc:cf:14:71:04:af:ec:94:e6:
                    b9:c2:77:61:ed:bb:91:22:9f:2e:48:37:44:9d:48:
                    ac:fb:b6:de:c3:26:c2:2d:e0:aa:cf:4e:5b:c5:61:
                    ed:f8:e0:de:a5:4d:6f:7a:8f:e6:8e:c1:d2:a8:1a:
                    ed:6d:e2:d6:29:13:29:1f:91:bf:54:2d:23:12:1d:
                    50:e4:5e:0d:96:12:b7:07:06:a0:3e:9f:99:29:66:
                    42:fc:7b:4a:94:9f:f9:66:81:bf:cb:06:a7:d7:95:
                    97:3e:9f:98:3b:7b:a9:8b:22:c9:6c:5e:a4:e4:3b:
                    a6:ad:3a:b8:07:cb:da:1c:32:7d:1b:69:fc:07:7f:
                    5f:7c:68:7a:4b:f0:14:f9:5f:bb:7b:8f:b8:0a:6f:
                    01:66:db:57:95:9b:96:91:db:95:cf:18:00:d8:3b:
                    24:8c:98:42:b1:ba:15:f7:8d:f1:e2:f5:33:16:d9:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:84:21:07:E5:1A:27:0D:E3:23:A4:1F:BE:17:87:E6:2D:15:F1
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/IuaEIQflGicN4yOkH74Xh-YtFfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:96:f2:64:15:6a:38:0a:95:c1:c2:0e:7e:27:8b:4a:d2:
         4f:71:7f:da:bf:f9:3b:fc:eb:26:d6:41:ad:b1:c7:db:3e:a4:
         11:b8:2a:de:f7:d8:93:51:2a:2f:d4:30:1a:e8:6b:67:2e:3e:
         b9:d2:39:e4:7a:a2:f3:5e:76:54:a6:47:8f:5d:e4:47:08:14:
         10:bc:73:a8:c2:1e:36:a2:47:a1:cd:82:43:d2:86:ed:a6:77:
         45:a6:d9:64:72:1c:38:ac:e7:82:aa:c5:61:e9:ff:11:3e:eb:
         31:3a:91:8c:54:87:8d:ba:49:b6:16:07:f2:c7:f7:06:f2:75:
         19:6c:c4:37:09:4e:59:00:27:b5:13:a1:60:3a:da:24:a1:ff:
         af:19:77:2f:25:1b:bb:ef:eb:04:bf:8e:b3:86:14:8f:cf:78:
         24:66:87:32:19:4c:14:45:4a:e2:9b:ca:54:d9:9c:d8:4f:88:
         49:fa:e3:92:a1:89:fd:b7:ae:35:b9:89:31:c2:ec:cc:f6:6e:
         2f:07:76:e5:5e:9e:61:56:b2:7a:cf:1f:c7:ba:70:e2:d5:cb:
         a4:e5:d5:da:5e:99:54:b8:e5:86:67:1a:a7:e6:01:6e:9a:16:
         be:8d:97:f9:c9:db:a5:a3:a1:29:c4:13:d2:ae:8d:4d:59:7c:
         82:6c:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----