Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/KWg-lXWVayzTkttqNugkpaNZNfE.roa
File:                     KWg-lXWVayzTkttqNugkpaNZNfE.roa (raw, json)
Hash identifier:          ii1i1WO5mQN/zzXVC3ex3lJ5aJ/2RcmaccP61nCCc70=
Subject key identifier:   29:68:3E:95:75:95:6B:2C:D3:92:DB:6A:36:E8:24:A5:A3:59:35:F1
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       38108BA2
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/KWg-lXWVayzTkttqNugkpaNZNfE.roa
Signing time:             Fri 11 Mar 2022 18:53:51 +0000
ROA not before:           Fri 11 Mar 2022 18:53:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60261
IP address blocks:        178.79.216.0/23 maxlen: 23
                          2a02:3d0:a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940608418 (0x38108ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: Mar 11 18:53:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=29683e9575956b2cd392db6a36e824a5a35935f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:d2:31:a9:76:c9:96:d7:6d:35:9e:20:e6:
                    32:2b:69:61:3c:fd:ea:05:b6:e7:50:de:43:7d:53:
                    62:b7:5e:52:16:20:69:aa:7a:2b:f2:1c:52:3e:4c:
                    11:dd:97:ba:28:ef:52:c6:16:fc:fe:48:cd:7c:03:
                    0f:07:ae:22:46:ff:a2:10:a8:0e:5e:e3:67:30:f1:
                    32:08:cb:e9:66:9e:50:23:56:b7:61:39:ac:12:74:
                    c2:86:52:94:f4:ed:ed:6d:76:4d:8b:92:20:fb:db:
                    01:61:b3:29:ae:44:57:1d:44:5e:85:ca:1b:ce:44:
                    4c:3e:3b:e4:7c:fe:20:34:a5:65:4a:3b:cc:95:d0:
                    25:15:59:4c:f8:3f:8a:da:f1:87:9d:a3:86:62:30:
                    02:a2:d1:c0:68:f3:70:2c:41:e2:06:58:10:96:a2:
                    c5:03:a0:91:b9:d1:b4:7c:0b:44:69:4c:66:6a:aa:
                    24:f9:24:52:0d:cf:1f:e0:f4:49:fc:b6:60:4f:69:
                    a4:25:b6:ac:49:98:65:a2:26:6c:94:af:c8:eb:25:
                    75:9b:1c:1d:3b:d0:04:d0:c9:73:95:71:5d:e9:88:
                    28:6d:23:6c:21:ae:d8:70:81:93:7e:60:11:ba:87:
                    58:91:4d:8e:14:76:7f:48:62:2c:7d:0a:44:4c:a4:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:68:3E:95:75:95:6B:2C:D3:92:DB:6A:36:E8:24:A5:A3:59:35:F1
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/KWg-lXWVayzTkttqNugkpaNZNfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.79.216.0/23
                IPv6:
                  2a02:3d0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:70:23:79:84:28:bf:fb:e9:2b:8e:c6:1e:db:20:04:7c:1d:
         a0:b8:81:69:5b:28:7c:1d:89:50:17:5a:c5:61:e9:96:82:66:
         65:15:84:0f:48:b5:5a:e1:73:08:e2:9f:78:4b:15:fa:b5:7c:
         4d:64:d4:60:7e:ec:81:4f:76:7e:36:40:0f:d0:06:c9:10:27:
         25:e0:9c:33:f9:4e:5f:a4:81:ff:45:16:49:4b:7b:4b:4a:82:
         50:4d:d6:5b:c7:3e:38:49:e9:ce:7b:82:20:ea:09:39:42:6c:
         7b:8e:5c:52:80:12:fb:a4:04:f0:e2:b7:f5:09:86:d0:a2:43:
         3f:82:97:89:44:64:13:ba:d0:8a:14:c9:08:3b:72:9d:5f:c0:
         79:0c:c0:1e:ce:df:a2:27:40:01:50:1a:b3:8d:95:90:84:ed:
         4e:03:9f:ae:d4:04:c3:e2:7b:7b:b5:53:98:e1:e3:b3:e7:95:
         c8:a9:b9:bc:b2:55:12:97:bb:8d:33:53:f0:59:10:5d:e0:9c:
         6a:fd:62:d3:7f:2f:a0:49:df:8c:9d:27:af:bf:98:a6:01:77:
         d8:20:06:3b:ea:3c:b0:1c:c1:cd:ce:1c:04:15:56:10:35:21:
         e9:25:96:c6:bc:ff:3a:17:87:4f:69:fe:2f:99:ac:1b:bf:b6:
         4b:50:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----