Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/h0XnKYs7cvtQxZsMD67CDGu79w0.roa
File:                     h0XnKYs7cvtQxZsMD67CDGu79w0.roa (raw, json)
Hash identifier:          9oQuT3Fq9pBJp6fL2WLurisZu7fB7A7QV+bnbP6jBpI=
Subject key identifier:   87:45:E7:29:8B:3B:72:FB:50:C5:9B:0C:0F:AE:C2:0C:6B:BB:F7:0D
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       02A44D66
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/h0XnKYs7cvtQxZsMD67CDGu79w0.roa
Signing time:             Thu 05 May 2022 11:36:56 +0000
ROA not before:           Thu 05 May 2022 11:36:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        194.28.97.0/24 maxlen: 24
                          2a0c:b641:150::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44322150 (0x2a44d66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: May  5 11:36:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8745e7298b3b72fb50c59b0c0faec20c6bbbf70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:f0:3f:00:2b:13:50:91:cf:a6:04:4a:08:
                    b9:26:90:aa:fa:9b:aa:ac:c3:8a:8f:99:23:26:0f:
                    45:dc:86:e7:fe:b3:11:96:19:43:b4:30:fb:10:88:
                    fa:11:d0:33:5b:5d:f1:27:7a:67:06:b1:4e:08:53:
                    f0:8d:27:70:4e:16:0c:36:54:44:35:8b:c7:5e:75:
                    51:c0:2f:4e:59:8a:9b:41:31:8c:9d:51:e7:f8:76:
                    e2:60:8a:86:8f:39:fa:1b:35:d3:16:07:31:e1:e8:
                    22:e9:b3:c2:8c:f0:33:26:7a:02:2d:29:a3:4f:cc:
                    ba:21:a2:16:1e:b8:cb:fc:d5:a0:9c:00:c3:0e:b0:
                    6f:1d:bc:4c:5d:59:1e:6a:1b:3f:63:80:a4:33:76:
                    6e:22:65:56:b9:46:a5:c5:74:0b:35:87:2a:f2:08:
                    ab:57:6e:3f:76:fa:86:a1:1a:5a:07:6a:08:78:c1:
                    a3:1d:10:ff:42:f0:8e:55:0c:2a:03:f0:b2:a2:dd:
                    46:ae:8a:01:7f:45:ff:1a:7b:3a:c5:6c:9d:61:d2:
                    19:22:f2:48:c1:93:41:7e:b7:e3:c4:1b:87:de:63:
                    11:62:4b:d6:56:54:68:1a:2b:5d:66:36:d8:64:0d:
                    20:7c:1c:3e:5a:64:3f:26:b0:8e:f1:e2:9d:a6:d2:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:E7:29:8B:3B:72:FB:50:C5:9B:0C:0F:AE:C2:0C:6B:BB:F7:0D
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/h0XnKYs7cvtQxZsMD67CDGu79w0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.28.97.0/24
                IPv6:
                  2a0c:b641:150::/44

    Signature Algorithm: sha256WithRSAEncryption
         07:04:f1:5a:f6:f4:73:93:85:d4:7f:0f:0a:4e:8d:14:f0:87:
         07:03:f0:37:a6:2c:bc:64:00:38:f5:7b:c0:56:06:db:11:0c:
         18:b0:b4:a3:64:f1:9f:01:c6:85:8c:41:b4:2f:4d:6d:3e:77:
         09:88:e2:fb:a6:df:19:d0:93:99:b2:ee:95:c5:79:08:99:0c:
         ea:67:4e:b6:ca:a5:8a:40:8d:69:9a:00:7d:01:9b:2d:ab:3f:
         55:e8:e3:6a:99:b7:4d:cd:f0:94:d0:04:4e:12:f2:04:17:fd:
         57:b2:e6:8a:f4:6c:96:49:cf:d7:9d:4a:8c:24:b4:87:0e:35:
         1a:5d:a9:6b:9d:c2:76:27:34:4f:10:2e:12:ec:c7:25:ea:d2:
         5c:84:13:be:c2:5d:cd:2a:11:55:8a:54:96:d8:27:2a:0c:1c:
         f9:05:41:ea:10:cf:c2:5c:d9:55:0d:7f:d4:6b:fa:99:89:03:
         3f:84:c7:96:a2:a3:c2:06:9f:25:bd:87:74:4c:77:6d:84:32:
         3c:8f:ae:e6:7a:4a:99:2e:84:6a:47:8d:ee:35:66:37:56:85:
         24:55:34:fc:02:cb:75:c1:7c:14:ea:cd:39:58:8d:77:23:ee:
         cd:5d:c2:d9:dd:83:07:a2:8c:f1:d0:48:a0:54:c1:34:36:d1:
         2d:59:7a:b2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAqRNZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MB4XDTIyMDUw
NTExMzY1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODc0NWU3Mjk4YjNi
NzJmYjUwYzU5YjBjMGZhZWMyMGM2YmJiZjcwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANVl8D8AKxNQkc+mBEoIuSaQqvqbqqzDio+ZIyYPRdyG5/6z
EZYZQ7Qw+xCI+hHQM1td8Sd6ZwaxTghT8I0ncE4WDDZURDWLx151UcAvTlmKm0Ex
jJ1R5/h24mCKho85+hs10xYHMeHoIumzwozwMyZ6Ai0po0/MuiGiFh64y/zVoJwA
ww6wbx28TF1ZHmobP2OApDN2biJlVrlGpcV0CzWHKvIIq1duP3b6hqEaWgdqCHjB
ox0Q/0LwjlUMKgPwsqLdRq6KAX9F/xp7OsVsnWHSGSLySMGTQX6348Qbh95jEWJL
1lZUaBorXWY22GQNIHwcPlpkPyawjvHinabSHA0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSHRecpizty+1DFmwwPrsIMa7v3DTAfBgNVHSMEGDAWgBQFl2gBNj03V4YV
Lk0GHnXIvrNQWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8x
L2gwWG5LWXM3Y3Z0UXhac01ENjdDREd1Nzl3MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
MmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFl
R0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMIcYTAPBAIAAjAJAwcEKgy2QQFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAHBPFa9vRzk4XUfw8KTo0U8IcHA/A3piy8ZAA4
9XvAVgbbEQwYsLSjZPGfAcaFjEG0L01tPncJiOL7pt8Z0JOZsu6VxXkImQzqZ062
yqWKQI1pmgB9AZstqz9V6ONqmbdNzfCU0AROEvIEF/1XsuaK9GyWSc/XnUqMJLSH
DjUaXalrncJ2JzRPEC4S7Mcl6tJchBO+wl3NKhFVilSW2CcqDBz5BUHqEM/CXNlV
DX/Ua/qZiQM/hMeWoqPCBp8lvYd0THdthDI8j67mekqZLoRqR43uNWY3VoUkVTT8
Ast1wXwU6s05WI13I+7NXcLZ3YMHoozx0EigVME0NtEtWXqy
-----END CERTIFICATE-----