Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/j3JkQ2OGRSKjnK2G0X19F3YMVoU.roa
File:                     j3JkQ2OGRSKjnK2G0X19F3YMVoU.roa (raw, json)
Hash identifier:          OwjLBd0vkaKFF3Y6jmyIk9m5+SJh060flG7e23BR2vY=
Subject key identifier:   8F:72:64:43:63:86:45:22:A3:9C:AD:86:D1:7D:7D:17:76:0C:56:85
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       1551EDC9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/j3JkQ2OGRSKjnK2G0X19F3YMVoU.roa
Signing time:             Tue 07 Jun 2022 15:51:04 +0000
ROA not before:           Tue 07 Jun 2022 15:51:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41171
IP address blocks:        193.37.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357690825 (0x1551edc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jun  7 15:51:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f72644363864522a39cad86d17d7d17760c5685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:ba:b4:8b:d3:8c:16:9a:ab:e5:e3:9a:2c:
                    40:5d:e3:64:c7:62:9b:c8:96:b2:5f:58:9b:81:bb:
                    48:61:1b:7e:41:7c:99:8d:55:61:cb:56:52:3b:cc:
                    69:ba:0a:e2:ed:7e:f8:9d:74:7c:61:4f:f4:bf:66:
                    e1:15:4e:8f:9a:28:9b:c3:d7:dd:9b:f6:c5:82:16:
                    c1:a3:d9:30:b6:33:90:6a:15:fd:71:76:34:a0:c9:
                    59:bd:ae:8d:79:93:bc:f3:83:2b:43:05:cc:38:e0:
                    c2:09:74:86:de:cb:88:08:bf:73:ed:d3:ab:b7:89:
                    6f:29:17:47:94:49:8f:02:95:88:ad:e1:ab:28:c9:
                    5b:7e:c5:29:f5:8c:6a:a5:66:76:26:be:96:62:07:
                    d9:2f:35:1b:04:bc:13:e8:e1:a6:54:44:a1:55:a5:
                    e0:bb:e5:fb:f7:5f:00:55:64:e8:dd:29:28:85:b9:
                    85:63:43:1b:c4:5c:f9:90:ad:97:41:e1:1f:56:7d:
                    fa:27:a3:20:43:62:70:81:96:35:95:cd:c0:8d:18:
                    a2:34:bc:d6:38:bf:e2:32:78:30:60:49:71:9b:ac:
                    93:04:ad:73:3a:95:79:0e:35:cb:b9:55:33:f4:16:
                    28:03:04:a8:00:0d:6d:ee:01:7f:37:72:0c:95:f7:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:64:43:63:86:45:22:A3:9C:AD:86:D1:7D:7D:17:76:0C:56:85
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/j3JkQ2OGRSKjnK2G0X19F3YMVoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:38:51:cc:26:27:3c:05:a2:f7:8e:b9:07:a9:56:51:59:e2:
         c0:fb:69:e3:e9:5f:e3:b8:d3:16:8a:2b:8f:64:dc:f9:9b:77:
         57:4e:bb:65:7b:95:e5:39:d8:35:cf:1b:1b:c1:c8:ef:81:8f:
         44:1b:f8:8f:0e:2d:d6:fb:ca:a5:05:5b:52:e3:ee:02:7e:ac:
         68:39:c8:e9:37:33:b1:70:ba:a9:5f:00:1a:e4:04:c9:7e:d9:
         22:38:b6:c7:38:06:5f:e0:6f:84:49:e1:05:fc:8a:24:22:72:
         1e:fe:d0:4a:3d:c3:ec:dc:98:6c:ee:db:77:de:ba:d9:da:2f:
         1d:ef:28:f2:74:f1:c6:c8:bc:74:20:d5:65:7c:cc:d2:e3:1d:
         c5:41:a6:35:ef:d7:38:95:80:41:93:65:c2:01:11:30:71:a4:
         c8:70:7d:99:07:06:04:65:df:79:ad:c5:e0:4e:e8:f4:fe:2e:
         91:e0:1c:43:c7:b5:28:20:73:f0:43:3b:c9:15:79:12:e7:bf:
         64:9c:eb:17:49:d9:22:e8:e5:c2:b7:d9:6d:12:ad:f0:f9:44:
         8f:b7:d7:19:af:37:30:50:01:6d:2c:c2:4e:c4:76:03:ec:fe:
         c9:20:9b:77:81:5e:5b:4d:ff:99:a9:6d:e1:0f:20:f3:cc:50:
         8b:66:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----