Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FqEDregaTBA-T_og8KgXeRa8sCM.roa
File:                     FqEDregaTBA-T_og8KgXeRa8sCM.roa (raw, json)
Hash identifier:          Ct+5llAEJ6uJGvCzA94MQK3j6iCgKntBiG1dvL8ypdU=
Subject key identifier:   16:A1:03:AD:E8:1A:4C:10:3E:4F:FA:20:F0:A8:17:79:16:BC:B0:23
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       07144D6F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FqEDregaTBA-T_og8KgXeRa8sCM.roa
Signing time:             Mon 07 Mar 2022 10:12:36 +0000
ROA not before:           Mon 07 Mar 2022 10:12:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        188.209.128.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118771055 (0x7144d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Mar  7 10:12:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16a103ade81a4c103e4ffa20f0a8177916bcb023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:41:25:65:c8:84:4a:b8:e6:37:f0:1e:d8:
                    68:25:79:04:3b:82:7f:02:e6:67:c4:d2:29:c9:7e:
                    0d:26:71:a1:07:86:06:36:05:ab:43:2b:c3:cb:d8:
                    aa:d3:e2:23:34:58:fb:18:4f:fe:62:b1:88:1b:4f:
                    ea:f2:6b:9d:6c:2e:88:64:91:6b:ab:7d:fd:c9:9f:
                    aa:05:2f:cb:e2:cb:0c:88:59:85:c1:c6:38:b9:51:
                    90:5d:d0:9e:ba:32:a9:5a:1e:a9:8c:c2:9c:7c:1b:
                    09:5f:48:d0:3f:c8:e8:9a:c2:d2:f0:62:fa:e4:ee:
                    6e:f2:14:7d:8c:a9:40:d0:f0:54:82:11:16:a3:d9:
                    28:0e:55:07:09:b7:32:a5:64:82:bd:39:d9:18:46:
                    f7:17:c5:d2:b4:f6:14:21:a8:24:bd:aa:ab:e7:eb:
                    cc:ab:8d:fe:6b:f5:5e:11:dc:cb:ec:56:fd:8c:5a:
                    de:6c:95:a8:a5:fb:cc:d1:09:30:d9:b1:57:51:03:
                    3d:aa:ec:dd:fe:e6:f8:aa:13:55:56:a7:4e:f6:27:
                    bb:f8:2a:55:d8:ba:83:21:0a:d8:83:15:36:05:3c:
                    fe:83:30:43:92:f9:6d:f6:1e:6a:55:f0:d2:20:9b:
                    4b:a3:b1:fa:44:e4:b0:f9:1d:b4:a7:d1:8f:fd:b4:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:03:AD:E8:1A:4C:10:3E:4F:FA:20:F0:A8:17:79:16:BC:B0:23
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FqEDregaTBA-T_og8KgXeRa8sCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:5b:e1:1d:53:40:de:60:86:b3:d9:fe:fb:22:6a:bb:f8:
         78:a9:3c:6b:f9:5f:c4:23:8e:1c:a4:a7:1d:6c:1b:7e:fb:2a:
         21:ad:af:f7:7f:42:a4:30:03:ec:6f:cc:c2:88:9b:36:65:f5:
         87:5a:4c:b3:78:51:64:f8:c3:bc:48:9c:58:a9:a9:49:db:98:
         96:79:8f:51:2a:f4:d9:91:64:9b:a7:52:d9:6b:39:59:6e:69:
         e5:b3:ec:db:1b:94:8b:ed:3f:45:19:28:96:4c:1e:1f:a3:ae:
         32:95:18:e9:0f:f4:28:ce:c2:24:19:0d:72:cf:57:c8:4f:a6:
         e5:ed:38:c7:61:1e:16:af:95:76:a8:64:bf:87:95:8b:e6:16:
         8b:6a:96:17:b8:9d:2c:ac:74:73:60:27:40:f9:af:b7:e8:61:
         f6:8c:42:60:9a:1b:8e:30:32:0d:54:1d:5f:7f:12:ca:b4:03:
         c8:26:54:d6:8e:ab:92:1d:eb:dc:73:c3:18:13:4b:d0:16:46:
         c7:0b:1f:40:5c:0b:60:29:30:2d:3a:bd:7e:2d:29:81:27:cb:
         75:3d:8c:df:69:76:9b:12:9d:f1:fc:71:fd:9c:48:91:27:21:
         72:fe:99:40:70:80:9e:77:20:ec:9d:66:31:04:ca:e0:35:95:
         52:67:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----