Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/TORAJqRk3UdikkKLG_yShAXRrXY.roa
File:                     TORAJqRk3UdikkKLG_yShAXRrXY.roa (raw, json)
Hash identifier:          2VIVuQKXtX5/lxVCwIwAEJZ3FXriBc50Sb/VxDKzNCg=
Subject key identifier:   4C:E4:40:26:A4:64:DD:47:62:92:42:8B:1B:FC:92:84:05:D1:AD:76
Certificate issuer:       /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial:       0106A06A
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/TORAJqRk3UdikkKLG_yShAXRrXY.roa
Signing time:             Thu 19 May 2022 22:29:29 +0000
ROA not before:           Thu 19 May 2022 22:29:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59645
IP address blocks:        195.191.196.0/23 maxlen: 24
                          2a06:d1c0::/32 maxlen: 48
                          2a06:d1c0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17211498 (0x106a06a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
        Validity
            Not Before: May 19 22:29:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ce44026a464dd476292428b1bfc928405d1ad76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:09:e7:da:ce:fe:4f:63:69:f0:e3:4f:d0:
                    33:40:b8:38:56:a5:ff:99:22:30:1c:67:bc:77:ca:
                    6e:a9:79:86:0e:c9:d8:79:c1:57:c2:0d:a3:b1:63:
                    d3:be:8a:dc:e2:41:0e:8a:78:2a:82:5e:df:38:8e:
                    42:c8:62:63:4a:41:1b:28:97:81:f4:95:b3:29:3b:
                    ea:a6:71:4e:41:e4:be:46:70:68:6d:9a:94:e2:02:
                    1f:e8:27:b3:6e:bf:47:eb:1a:fc:a3:d4:fa:19:c8:
                    cc:b4:65:b3:56:c7:ac:f3:38:05:68:2b:77:26:ca:
                    26:9a:ca:60:4d:ff:fb:4d:c7:b9:50:92:40:35:03:
                    db:ad:e6:a9:e2:28:25:a0:54:bc:04:bd:e3:b8:0f:
                    90:9a:60:42:a1:f4:00:05:c8:ce:5e:07:10:65:a4:
                    bd:c2:e9:75:ff:81:7a:02:6a:d1:79:fc:1e:2e:d9:
                    02:9a:1f:12:52:5b:47:06:66:62:e9:c5:2f:6c:db:
                    41:c5:a8:ba:a5:57:7d:12:0f:c3:b0:07:10:f5:38:
                    27:6a:43:2e:bd:ee:85:bb:60:05:c4:ef:86:ee:35:
                    55:37:14:60:cd:6c:b8:1f:9b:95:3f:08:6e:03:89:
                    20:c8:63:ae:8b:5e:01:a5:56:ad:3a:e2:b8:02:9d:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:40:26:A4:64:DD:47:62:92:42:8B:1B:FC:92:84:05:D1:AD:76
            X509v3 Authority Key Identifier:
                keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/TORAJqRk3UdikkKLG_yShAXRrXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.191.196.0/23
                IPv6:
                  2a06:d1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:81:9b:f3:98:e9:67:4f:8d:f9:77:b2:0f:bf:7c:f3:c5:
         bc:73:41:51:5e:2f:23:93:12:8b:02:20:43:85:d4:a4:5b:c4:
         6d:f8:3a:85:ba:45:4e:7e:d7:de:92:4b:70:26:d4:bc:c1:7e:
         96:e9:ea:55:52:0a:5a:d7:95:9c:f7:80:91:67:58:ef:a5:1e:
         3d:f5:af:26:98:46:d2:b8:fe:16:5e:d2:7b:d0:29:eb:37:8f:
         11:f3:26:6f:35:34:b5:8e:4d:60:00:6c:5c:47:59:ce:64:9a:
         76:d2:c1:16:8a:b6:ff:4f:86:06:a8:fc:ad:fa:3b:9c:99:21:
         d9:14:ca:13:f0:c4:66:ee:4a:7f:90:0e:98:04:0e:98:bc:bc:
         15:ee:7b:80:25:bd:a5:ac:d3:83:c9:76:79:9d:56:62:87:ad:
         ce:15:f6:a6:12:25:50:fd:a2:1a:8d:57:21:6f:32:03:11:ba:
         ba:97:29:04:00:cc:90:1f:0e:ab:a8:29:c3:03:05:a2:f8:e4:
         d6:af:61:55:8b:5c:35:9f:62:0f:91:07:e0:92:79:d1:08:7a:
         f3:f5:dd:5c:7c:ea:a5:1f:63:8e:b4:1c:d6:d3:cf:95:3c:a0:
         fc:e8:bf:2b:34:42:36:2e:58:53:c5:e5:5b:3e:76:7d:c0:6c:
         de:a8:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----