Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/6pX7QBpOidOnQUh6zg4MB2QueHM.roa
File:                     6pX7QBpOidOnQUh6zg4MB2QueHM.roa (raw, json)
Hash identifier:          2wZq16wDi8Kzl/0HuRwa6gMiiCt14HPS3l8z/jTKNWs=
Subject key identifier:   EA:95:FB:40:1A:4E:89:D3:A7:41:48:7A:CE:0E:0C:07:64:2E:78:73
Certificate issuer:       /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial:       0182C9AA93CE5843B23872B18626879D936A
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/6pX7QBpOidOnQUh6zg4MB2QueHM.roa
Signing time:             Tue 23 Aug 2022 07:46:15 +0000
ROA not before:           Tue 23 Aug 2022 07:46:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210664
IP address blocks:        185.150.88.0/22 maxlen: 22
                          2a05:4b40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:aa:93:ce:58:43:b2:38:72:b1:86:26:87:9d:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
        Validity
            Not Before: Aug 23 07:46:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea95fb401a4e89d3a741487ace0e0c07642e7873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:9a:ae:a2:96:79:0b:36:d5:53:0e:5d:3e:
                    15:21:34:85:be:5c:46:80:96:39:89:bd:c0:73:02:
                    30:2d:db:13:2f:0e:74:63:47:12:37:df:87:95:cf:
                    96:1d:d9:3d:64:88:66:09:3d:bf:39:bb:23:c0:6a:
                    ff:4b:12:b8:b0:98:09:1e:a4:ee:05:1d:97:5b:1c:
                    e3:c0:2a:8e:b6:41:81:98:66:10:d5:db:68:a2:8d:
                    81:51:7a:28:c8:5d:bf:08:6c:64:70:b7:da:bd:9f:
                    6b:2f:20:3a:de:3c:25:6d:31:8a:17:89:9d:40:69:
                    44:5d:01:6a:be:6f:38:07:6a:6c:7a:9f:47:e7:27:
                    5a:30:21:6e:d6:e1:3c:5a:21:36:4c:8f:b0:cc:b2:
                    eb:2d:08:a4:77:5c:d6:d0:07:cc:c4:bf:e9:f2:06:
                    6f:e9:03:1c:93:75:dd:e4:ed:a8:eb:a4:da:bb:87:
                    0d:65:cf:b5:21:0d:f7:43:bd:14:54:6a:6a:9b:06:
                    62:6f:a2:ec:ed:e6:86:14:21:ff:ad:2c:da:9f:bb:
                    af:4f:96:32:a6:ac:ec:08:26:da:ee:4b:23:10:cb:
                    7e:10:db:77:72:05:19:a5:82:fe:f4:74:d6:b4:e2:
                    bf:c5:b2:ab:16:0c:41:63:eb:3e:b2:62:9c:be:7b:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:FB:40:1A:4E:89:D3:A7:41:48:7A:CE:0E:0C:07:64:2E:78:73
            X509v3 Authority Key Identifier:
                keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/6pX7QBpOidOnQUh6zg4MB2QueHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.88.0/22
                IPv6:
                  2a05:4b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:bd:18:e9:d7:83:bb:d5:b7:1d:45:cf:65:1c:fe:60:0f:c5:
         9c:59:66:09:1e:62:fb:4d:df:11:ed:08:a5:f7:37:f3:f4:c7:
         a2:ff:ff:0a:f9:75:13:0c:93:15:e9:3b:77:b4:7a:03:ca:64:
         d4:ba:bd:5b:fd:ed:14:03:c6:ce:4e:f5:b1:60:4f:8b:d3:5f:
         c2:a6:bf:ee:fa:bf:fa:18:ad:c9:75:e7:7a:e1:da:0e:fa:d2:
         12:70:75:49:f1:7c:51:2f:78:b6:95:62:94:04:cc:24:25:94:
         04:6e:85:89:20:d9:20:c4:57:be:ab:d5:79:9f:84:2a:39:ee:
         5e:8b:06:d6:68:90:af:60:d0:e5:56:29:b5:30:06:cf:73:8e:
         f8:7f:30:ed:b2:35:b1:c7:08:4b:35:aa:b2:53:d2:f7:bf:44:
         d6:4f:36:b9:75:46:7a:63:c7:16:fd:bd:3b:b1:af:8b:62:29:
         af:1f:96:e8:9a:32:11:b1:46:22:64:85:27:e3:42:e5:b9:13:
         37:ac:b0:54:31:81:b9:4e:ba:be:89:9c:4c:0b:fe:0d:5b:dc:
         f5:93:5e:12:92:2b:c4:dd:f3:c7:30:54:33:64:1b:dc:18:17:
         05:16:ea:0f:74:f7:9d:79:00:21:dc:5d:51:73:a0:d7:7c:6a:
         20:bd:15:e2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYLJqpPOWEOyOHKxhiaHnZNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1
MWMyN2UwHhcNMjIwODIzMDc0NjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTk1ZmI0MDFhNGU4OWQzYTc0MTQ4N2FjZTBlMGMwNzY0MmU3ODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHWarqKWeQs21VMOXT4VITSFvlxG
gJY5ib3AcwIwLdsTLw50Y0cSN9+Hlc+WHdk9ZIhmCT2/ObsjwGr/SxK4sJgJHqTu
BR2XWxzjwCqOtkGBmGYQ1dtooo2BUXooyF2/CGxkcLfavZ9rLyA63jwlbTGKF4md
QGlEXQFqvm84B2psep9H5ydaMCFu1uE8WiE2TI+wzLLrLQikd1zW0AfMxL/p8gZv
6QMck3Xd5O2o66Tau4cNZc+1IQ33Q70UVGpqmwZib6Ls7eaGFCH/rSzan7uvT5Yy
pqzsCCba7ksjEMt+ENt3cgUZpYL+9HTWtOK/xbKrFgxBY+s+smKcvntkjQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOqV+0AaTonTp0FIes4ODAdkLnhzMB8GA1UdIwQY
MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt
Yjc1NzhiMTBiYTdlLzEvNnBYN1FCcE9pZE9uUVVoNnpnNE1CMlF1ZUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl
LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZZYMA0E
AgACMAcDBQAqBUtAMA0GCSqGSIb3DQEBCwUAA4IBAQC+vRjp14O71bcdRc9lHP5g
D8WcWWYJHmL7Td8R7Qil9zfz9Mei//8K+XUTDJMV6Tt3tHoDymTUur1b/e0UA8bO
TvWxYE+L01/Cpr/u+r/6GK3Jded64doO+tIScHVJ8XxRL3i2lWKUBMwkJZQEboWJ
INkgxFe+q9V5n4QqOe5eiwbWaJCvYNDlVim1MAbPc474fzDtsjWxxwhLNaqyU9L3
v0TWTza5dUZ6Y8cW/b07sa+LYimvH5bomjIRsUYiZIUn40LluRM3rLBUMYG5Trq+
iZxMC/4NW9z1k14SkivE3fPHMFQzZBvcGBcFFuoPdPedeQAh3F1Rc6DXfGogvRXi
-----END CERTIFICATE-----