Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/PTYDSmiGUW8oPZkkcL-xgEdU9X0.roa
File:                     PTYDSmiGUW8oPZkkcL-xgEdU9X0.roa (raw, json)
Hash identifier:          RQcaHbJnmIcBFSezaCmEBQRiCqxuHD41N7zhL0b7bgU=
Subject key identifier:   3D:36:03:4A:68:86:51:6F:28:3D:99:24:70:BF:B1:80:47:54:F5:7D
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       17E305CB
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/PTYDSmiGUW8oPZkkcL-xgEdU9X0.roa
Signing time:             Sat 28 May 2022 17:27:45 +0000
ROA not before:           Sat 28 May 2022 17:27:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        45.84.240.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400754123 (0x17e305cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: May 28 17:27:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d36034a6886516f283d992470bfb1804754f57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:04:5d:83:e4:16:4d:46:5a:a8:50:6e:5e:
                    2a:52:8e:6a:ae:bd:52:b3:7b:8c:24:75:53:e0:2d:
                    61:a4:dd:92:95:8a:21:96:25:ac:8f:b3:73:5c:32:
                    a6:60:28:67:14:4b:6f:2a:b5:bc:46:4b:5f:6c:cf:
                    cf:74:69:10:92:c2:3f:b8:aa:7f:e8:b2:4c:b6:2e:
                    5e:a9:40:62:13:93:55:8e:a1:5b:f0:56:a2:cc:3d:
                    2b:76:76:07:cf:16:49:ea:02:bf:c3:0c:88:1c:67:
                    3e:a3:36:cb:13:25:8a:3d:11:64:e4:7e:2b:23:12:
                    2e:4f:2b:d6:6e:b6:80:8e:a4:fc:fd:9d:fd:54:87:
                    54:0c:ff:9a:91:4c:d3:92:18:fa:b4:18:7b:41:80:
                    8c:ce:49:43:ff:94:e8:ab:42:bd:f6:ec:b4:0b:f3:
                    22:ba:0b:d7:95:c8:d7:0a:fb:0c:c7:d0:35:e1:05:
                    af:fe:f3:9e:58:2e:97:c6:00:79:78:35:be:a6:51:
                    82:35:be:f1:ab:98:53:8a:25:c4:56:4c:0c:86:3f:
                    5b:60:8e:1b:74:39:9b:c2:1f:4b:80:fa:f7:08:81:
                    f7:f9:57:72:0a:55:25:38:7c:7c:a8:0b:da:4b:d9:
                    23:cc:54:7d:24:f3:6b:4d:0b:cf:c5:a2:57:ca:ae:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:36:03:4A:68:86:51:6F:28:3D:99:24:70:BF:B1:80:47:54:F5:7D
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/PTYDSmiGUW8oPZkkcL-xgEdU9X0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:e4:58:8c:a5:21:7b:14:88:7e:85:14:3f:a7:11:0b:84:42:
         2e:19:c0:6d:e8:9e:ba:3d:c4:73:62:3f:bf:1d:2a:bf:57:71:
         f7:4c:91:90:b6:04:32:06:35:1c:d3:49:48:3e:61:f9:45:d1:
         eb:de:d0:ef:94:9e:04:c5:13:78:a8:be:13:bc:0c:08:c6:dc:
         9d:aa:a0:2c:aa:c4:5f:b8:79:9e:83:be:83:2d:27:f4:ad:35:
         a7:57:e0:72:57:8e:8e:5a:37:89:82:31:8b:38:d8:b5:df:cb:
         b1:97:04:af:dc:a1:14:2e:12:bc:db:9d:ad:a5:d2:4e:36:26:
         38:85:e1:bd:42:c4:35:11:e4:63:41:12:d8:bb:a7:77:2b:ac:
         7f:65:05:19:d0:75:4b:c6:cb:2d:76:12:e2:65:c6:7c:73:80:
         83:7e:02:a4:dc:07:0b:cc:47:78:73:e4:06:60:17:ab:f8:c9:
         6b:56:46:cd:91:2d:ba:45:45:15:e2:46:d5:a5:7d:6e:84:73:
         81:56:8e:e3:32:80:d4:80:16:54:45:e7:63:73:83:41:f7:11:
         33:bd:a5:15:c8:01:33:e9:a3:5c:5d:ca:aa:f2:08:11:ec:b8:
         4c:2b:32:02:02:98:32:40:4f:c1:b8:28:8e:9f:6d:bc:e1:33:
         84:0d:09:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF+MFyzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTUxNjA1YjY3NWVjZTRlMGZjZTcxNzVhZTMxYTkzZmE4MjcyYmE2MB4XDTIyMDUy
ODE3Mjc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2QzNjAzNGE2ODg2
NTE2ZjI4M2Q5OTI0NzBiZmIxODA0NzU0ZjU3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKH1BF2D5BZNRlqoUG5eKlKOaq69UrN7jCR1U+AtYaTdkpWK
IZYlrI+zc1wypmAoZxRLbyq1vEZLX2zPz3RpEJLCP7iqf+iyTLYuXqlAYhOTVY6h
W/BWosw9K3Z2B88WSeoCv8MMiBxnPqM2yxMlij0RZOR+KyMSLk8r1m62gI6k/P2d
/VSHVAz/mpFM05IY+rQYe0GAjM5JQ/+U6KtCvfbstAvzIroL15XI1wr7DMfQNeEF
r/7znlgul8YAeXg1vqZRgjW+8auYU4olxFZMDIY/W2COG3Q5m8IfS4D69wiB9/lX
cgpVJTh8fKgL2kvZI8xUfSTza00Lz8WiV8quZ+0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ9NgNKaIZRbyg9mSRwv7GAR1T1fTAfBgNVHSMEGDAWgBQFUWBbZ17OTg/O
cXWuMak/qCcrpjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JWRmdXMmRlems0UHpuRjFyakdwUDZnbks2WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvMjhlYTQ1LTdkMzAtNDZkZi04ZjJhLTA3NzlmNDhlY2VhMC8x
L1BUWURTbWlHVVc4b1Baa2tjTC14Z0VkVTlYMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
MjhlYTQ1LTdkMzAtNDZkZi04ZjJhLTA3NzlmNDhlY2VhMC8xL0JWRmdXMmRlems0
UHpuRjFyakdwUDZnbks2WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1U8DANBgkqhkiG9w0BAQsFAAOC
AQEATeRYjKUhexSIfoUUP6cRC4RCLhnAbeieuj3Ec2I/vx0qv1dx90yRkLYEMgY1
HNNJSD5h+UXR697Q75SeBMUTeKi+E7wMCMbcnaqgLKrEX7h5noO+gy0n9K01p1fg
cleOjlo3iYIxizjYtd/LsZcEr9yhFC4SvNudraXSTjYmOIXhvULENRHkY0ES2Lun
dyusf2UFGdB1S8bLLXYS4mXGfHOAg34CpNwHC8xHeHPkBmAXq/jJa1ZGzZEtukVF
FeJG1aV9boRzgVaO4zKA1IAWVEXnY3ODQfcRM72lFcgBM+mjXF3KqvIIEey4TCsy
AgKYMkBPwbgojp9tvOEzhA0JJQ==
-----END CERTIFICATE-----