Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/fBW4RUk08iHs6ZT8MXDGsihMdcE.roa
File:                     fBW4RUk08iHs6ZT8MXDGsihMdcE.roa (raw, json)
Hash identifier:          CUAVVT+uYFWiAxCdDQ26TB2GZ1OlgIyj3K29tVEBWYk=
Subject key identifier:   7C:15:B8:45:49:34:F2:21:EC:E9:94:FC:31:70:C6:B2:28:4C:75:C1
Certificate issuer:       /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial:       023C1B8C
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/fBW4RUk08iHs6ZT8MXDGsihMdcE.roa
Signing time:             Sat 01 Jan 2022 10:00:25 +0000
ROA not before:           Sat 01 Jan 2022 10:00:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60086
IP address blocks:        185.59.0.0/22 maxlen: 22
                          2a02:66a0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37493644 (0x23c1b8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
        Validity
            Not Before: Jan  1 10:00:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c15b8454934f221ece994fc3170c6b2284c75c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:de:ae:e9:11:60:66:f0:a3:fc:cd:23:4a:
                    5d:1b:0a:5d:8c:6f:5f:ec:0d:05:35:a8:7a:08:ed:
                    67:a2:73:f5:02:24:20:d8:f9:81:bd:de:4c:a7:95:
                    98:d6:45:d0:60:23:c7:54:9c:6b:1b:c0:09:b6:5f:
                    0d:41:0b:36:4c:20:a3:7e:23:03:82:9b:5c:20:35:
                    28:e3:af:22:12:eb:95:39:ec:14:b5:ba:9b:1e:bf:
                    1c:24:ce:88:cd:77:a8:b5:a7:b0:fb:09:cf:c3:5f:
                    df:cf:a8:51:e4:f2:8f:fe:13:83:35:41:93:86:38:
                    05:49:54:90:96:b8:3d:34:4a:ff:c4:d0:07:91:68:
                    9c:3f:0b:ad:ab:46:16:27:f6:3e:f6:df:8a:d5:dd:
                    ba:bf:c6:e1:aa:9b:cd:20:a5:20:44:5f:cc:07:0a:
                    23:8f:e0:c3:02:09:8d:70:d8:8d:13:6e:c3:a1:27:
                    36:a7:14:36:b6:2d:2c:c5:ee:7e:09:ef:a5:f0:68:
                    7b:75:b4:c9:bc:17:31:e4:b5:3d:93:c3:8d:44:e5:
                    74:3b:14:f1:f9:2c:f4:16:cc:0a:06:1a:ef:a4:ff:
                    8d:c9:df:cc:ac:dd:f2:13:bf:29:16:60:11:d8:89:
                    4b:24:a7:a3:e5:50:58:42:4e:6a:26:15:d8:42:e7:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:B8:45:49:34:F2:21:EC:E9:94:FC:31:70:C6:B2:28:4C:75:C1
            X509v3 Authority Key Identifier:
                keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/fBW4RUk08iHs6ZT8MXDGsihMdcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.59.0.0/22
                IPv6:
                  2a02:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:94:1f:99:18:54:67:c5:93:a5:e8:5d:3d:c9:0d:f8:cf:
         eb:e5:6e:92:50:25:a8:cf:66:ff:ad:e1:69:f8:24:6d:f9:f4:
         02:8d:9f:9f:bd:a7:ba:56:77:a7:f8:74:4b:db:db:09:74:83:
         c8:52:43:00:50:4e:1a:c5:4f:24:23:40:0c:6c:b9:8a:63:20:
         8b:b0:32:22:0c:2d:4d:ca:2f:e1:1a:70:00:f9:22:06:d8:0e:
         d7:dc:89:51:66:68:60:75:95:58:0f:ca:c8:41:cd:46:59:74:
         bd:a3:16:50:68:26:d5:f0:27:f0:20:66:da:ec:bb:1e:84:fa:
         12:22:18:2c:2d:28:cd:fd:ec:b9:6c:b6:1e:fc:a4:9f:07:96:
         7b:70:58:ce:b3:5a:cd:b8:5d:55:e0:7e:fd:31:e4:98:e2:1b:
         6d:0a:47:d5:53:6d:6d:06:ce:40:c1:f6:5b:f2:35:c7:46:8d:
         8e:27:48:f3:16:b7:40:88:d7:db:67:94:24:e2:a4:a3:cf:86:
         3d:15:ab:dd:ea:96:c8:58:b3:17:0b:08:90:88:45:6c:47:d6:
         e0:a0:ff:77:07:19:db:5d:f8:c5:07:9f:d2:52:b6:45:3e:52:
         2a:65:ca:0c:65:bf:f6:43:28:64:56:5d:d9:ec:98:7c:3e:00:
         b2:92:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----