Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/SndgBadeaVEveerj1MwUs4foPgU.roa
File:                     SndgBadeaVEveerj1MwUs4foPgU.roa (raw, json)
Hash identifier:          WvTnR28IcQroer2XGiLM3bK8EO1S4V2UI737WxfYlHQ=
Subject key identifier:   4A:77:60:05:A7:5E:69:51:2F:79:EA:E3:D4:CC:14:B3:87:E8:3E:05
Certificate issuer:       /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial:       08F5D423
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/SndgBadeaVEveerj1MwUs4foPgU.roa
Signing time:             Sat 01 Jan 2022 02:59:36 +0000
ROA not before:           Sat 01 Jan 2022 02:59:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137
IP address blocks:        160.78.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150328355 (0x8f5d423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
        Validity
            Not Before: Jan  1 02:59:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a776005a75e69512f79eae3d4cc14b387e83e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:a3:11:1a:19:17:a5:fb:a8:fa:5e:23:13:
                    6a:9b:c1:d3:af:e2:7f:ae:e4:ed:84:39:af:22:f3:
                    f3:72:49:ce:dc:93:68:90:d2:14:ce:1f:b3:55:4a:
                    bc:a9:69:7d:e3:df:6b:1f:0d:7a:a2:3c:76:d3:7f:
                    00:8f:36:a5:cd:4a:d8:87:4a:66:25:7b:62:b6:b8:
                    24:de:fe:1d:22:3e:23:1f:a4:35:d4:ad:5b:f4:fe:
                    b3:09:5a:da:e4:53:ce:b3:49:04:00:53:d8:da:44:
                    e4:4d:e4:3a:50:d8:fd:7d:6c:82:6f:5f:45:03:3e:
                    81:5b:2e:6e:75:2e:64:72:ef:09:eb:35:c4:76:7a:
                    85:5c:38:e1:ee:d2:ab:19:5c:ad:4e:e1:b8:1b:67:
                    05:0a:38:09:2a:a8:ce:05:73:39:51:37:a4:a7:39:
                    e3:13:7a:98:34:2c:70:d3:e4:16:a1:fd:6f:18:0c:
                    7c:f8:7d:49:70:e4:3f:12:67:1f:e2:94:85:98:3c:
                    be:6f:7c:cf:3a:3b:ee:df:2f:fd:1e:1f:bb:98:02:
                    30:a7:4d:41:c9:95:69:05:eb:f1:f4:16:21:75:ca:
                    6d:7b:12:5f:c9:73:5b:a1:12:d7:55:0b:ba:ed:36:
                    59:bf:dd:60:f6:a5:7c:f6:55:9d:70:d6:be:41:0d:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:60:05:A7:5E:69:51:2F:79:EA:E3:D4:CC:14:B3:87:E8:3E:05
            X509v3 Authority Key Identifier:
                keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/SndgBadeaVEveerj1MwUs4foPgU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.78.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:af:43:56:7c:d0:eb:07:d3:93:70:03:f7:52:5f:6f:ca:84:
         8a:a5:02:9d:ef:d3:e8:d7:ea:e9:b7:60:91:d7:59:57:6f:83:
         40:6b:6c:ea:10:6a:e2:98:25:86:89:49:78:a9:36:28:c1:a8:
         7c:5d:99:c3:e7:b0:0e:51:9e:24:b4:12:1c:bd:8e:92:5f:ac:
         59:04:d5:f1:c8:9f:bf:04:0e:b1:bb:a3:72:5b:a0:51:cd:91:
         8a:18:03:51:41:d6:7a:8f:8f:85:a9:31:38:84:d4:d7:fb:3b:
         96:5a:ca:4a:80:bd:b4:9c:4c:5c:b0:b8:33:7b:77:dd:8f:dc:
         a2:82:cf:57:4b:14:d2:73:c8:42:04:1d:c9:bb:7b:b9:86:da:
         af:82:29:4e:b1:2d:22:df:1b:09:7b:a3:83:72:c2:83:18:0f:
         4e:fa:ec:7b:55:52:63:5d:f0:1f:4f:12:0f:41:38:eb:c2:8e:
         0c:fc:c7:f7:6c:82:8a:b9:b1:9e:98:57:8f:30:43:2f:25:89:
         5b:d7:fe:bf:05:97:15:ea:42:1a:5e:91:96:7f:86:cc:52:c3:
         c8:48:46:68:79:d8:ff:be:ea:18:8b:6b:71:f5:e7:38:3c:08:
         04:e7:4b:02:be:f4:82:1c:e1:af:ae:1c:3d:22:fd:07:99:49:
         7e:68:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----