Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RauXsAie8CfmuCaEWJI3jkpH4FA.roa
File:                     RauXsAie8CfmuCaEWJI3jkpH4FA.roa (raw, json)
Hash identifier:          su2/RRemzuhFM6UlBpPyKHuFZ9B68S9zKgVsmZXN+/U=
Subject key identifier:   45:AB:97:B0:08:9E:F0:27:E6:B8:26:84:58:92:37:8E:4A:47:E0:50
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       014A129F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RauXsAie8CfmuCaEWJI3jkpH4FA.roa
Signing time:             Sat 01 Jan 2022 01:00:19 +0000
ROA not before:           Sat 01 Jan 2022 01:00:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211851
IP address blocks:        45.154.99.0/24 maxlen: 24
                          2a0c:b641:620::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21631647 (0x14a129f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 01:00:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45ab97b0089ef027e6b826845892378e4a47e050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:55:cc:52:64:e8:b0:e9:54:41:86:ba:ac:
                    72:e7:ab:c5:57:08:62:9d:50:fd:08:10:b0:f2:d5:
                    fb:c1:0c:c2:74:7b:1f:e4:37:bc:73:4b:62:ed:91:
                    a9:34:b9:98:7e:90:0f:01:1a:05:4c:74:33:aa:1b:
                    54:b8:c5:d2:6b:d4:c4:83:28:92:ad:73:d4:ff:e6:
                    67:cd:a6:13:79:a7:d0:1e:41:90:bd:78:3a:2d:fa:
                    e7:bc:0e:8b:63:e6:2a:71:bc:6f:bf:9c:52:69:06:
                    2e:3c:65:bb:30:81:92:61:f7:bc:6a:72:4f:62:b4:
                    77:e4:f6:33:60:e9:80:87:80:72:83:44:b4:e2:9b:
                    23:f2:4b:15:1f:a5:42:35:c6:47:bc:cb:77:bc:ba:
                    02:f6:de:f1:79:6d:49:6a:7e:58:de:22:18:83:b4:
                    b1:66:55:b1:26:e9:e2:71:5c:63:69:6e:09:d3:e0:
                    b7:6c:97:61:e9:0b:86:5d:f7:46:c5:42:ff:a9:64:
                    d5:42:de:e3:ff:ac:b9:24:e8:7d:11:eb:ee:c2:75:
                    c2:05:75:cb:4e:d8:8b:fe:b8:88:05:eb:be:09:33:
                    8f:c3:2a:e1:11:d6:61:19:0b:3a:07:63:34:e4:fc:
                    ad:94:98:ee:e3:96:91:b9:81:2f:ea:7a:4a:b2:50:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:97:B0:08:9E:F0:27:E6:B8:26:84:58:92:37:8E:4A:47:E0:50
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RauXsAie8CfmuCaEWJI3jkpH4FA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.99.0/24
                IPv6:
                  2a0c:b641:620::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:82:01:bf:42:b4:12:e0:97:25:e2:d3:31:6a:5b:b9:21:75:
         fd:45:c0:35:77:7d:cc:3b:42:8f:fa:ed:ff:8f:56:40:4f:91:
         b8:04:3e:14:8a:f9:1d:da:02:2c:60:cc:b5:46:72:26:0d:52:
         59:fb:f7:43:43:00:b1:ae:64:f6:2c:a9:6d:1b:a4:c0:d3:23:
         6d:22:4e:2f:78:98:67:36:4a:13:42:26:38:81:9a:d3:4e:ec:
         5f:73:61:dd:23:5a:25:9c:1c:0f:0a:74:a0:82:cf:5e:17:9e:
         ed:c8:99:bc:e9:4f:fc:af:d6:2e:d4:6b:c4:8b:0f:9f:e4:66:
         ca:1e:27:9d:dc:bf:22:e6:3a:e0:5c:18:c4:f9:ba:8f:4e:86:
         c8:b6:37:d4:42:94:e2:de:c5:c9:37:2c:5d:08:f9:6e:7e:91:
         52:7a:ab:23:e3:24:e3:34:63:26:62:d4:95:fc:8d:4f:ad:90:
         c3:af:0a:b1:4c:66:63:03:77:bc:c4:81:83:5b:0e:4b:e0:f3:
         03:a2:e4:24:d2:b3:34:b0:db:94:11:2f:6a:1f:49:69:71:66:
         07:d5:52:9e:e0:fc:7a:82:96:d5:92:70:1c:c8:1e:f0:15:42:
         65:5a:31:c1:80:e1:46:c7:40:4f:e3:7b:3f:7e:9b:42:3f:a5:
         d3:55:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----