Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/zNhNt6BBe4ma1RROdAqBraY31Nk.roa
File:                     zNhNt6BBe4ma1RROdAqBraY31Nk.roa (raw, json)
Hash identifier:          mPwGoS/Cpu01GMtvNgBajay5EUxEEnhcyPs/k+bQnDs=
Subject key identifier:   CC:D8:4D:B7:A0:41:7B:89:9A:D5:14:4E:74:0A:81:AD:A6:37:D4:D9
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       03A119F2
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/zNhNt6BBe4ma1RROdAqBraY31Nk.roa
Signing time:             Sat 01 Jan 2022 10:54:33 +0000
ROA not before:           Sat 01 Jan 2022 10:54:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51619
IP address blocks:        195.210.60.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60889586 (0x3a119f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Jan  1 10:54:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ccd84db7a0417b899ad5144e740a81ada637d4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:34:e0:ac:65:65:d3:2b:db:2f:54:16:de:
                    bb:2b:82:54:c0:5e:98:d8:96:12:b3:c1:84:bb:ae:
                    2c:9c:cf:60:01:0f:31:e4:06:9d:a8:22:48:c0:72:
                    b0:00:34:1e:da:ad:97:13:f9:b6:d7:6c:0e:86:8e:
                    18:8d:10:32:d7:56:da:47:b7:e9:ff:02:38:04:f6:
                    fb:ab:df:35:a0:c2:fb:ae:e8:9e:c8:ef:84:71:7a:
                    89:56:7b:64:cc:8f:2c:28:21:9b:a0:0c:fa:31:40:
                    89:11:3d:64:9a:2e:ec:97:a9:d4:58:f1:5d:66:b0:
                    b7:a0:39:66:3a:43:32:91:b4:76:65:58:24:9f:bf:
                    eb:7a:48:8e:8f:a5:30:e0:dc:85:87:0e:3d:d2:09:
                    18:28:c6:72:cc:05:30:8e:da:1f:f8:e5:08:5b:77:
                    3c:3c:dc:27:dc:4e:76:b8:64:3c:47:e9:07:9d:a8:
                    ce:45:27:f8:74:35:b4:90:6e:21:81:e5:0b:11:82:
                    1b:d3:06:b8:c6:8b:e8:31:03:ae:61:46:c4:2d:df:
                    a6:68:f3:3c:a7:30:3d:4b:f1:09:0a:ef:00:e8:09:
                    63:cb:f6:08:b3:e5:bf:3c:42:89:df:ff:ca:cd:6c:
                    02:ee:bd:2a:2e:2a:47:12:db:cd:4c:61:28:6b:a9:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D8:4D:B7:A0:41:7B:89:9A:D5:14:4E:74:0A:81:AD:A6:37:D4:D9
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/zNhNt6BBe4ma1RROdAqBraY31Nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.210.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:60:e3:07:3f:1c:36:39:b3:ea:7e:3c:e3:11:89:71:5c:71:
         b6:00:ca:f5:5d:ea:5b:24:af:be:3c:2f:fb:ac:76:7b:9f:ba:
         da:e3:fe:96:d1:b0:26:68:58:2a:f5:8b:81:b6:92:c4:7d:24:
         f0:37:79:75:36:aa:33:42:50:2e:15:b7:17:ce:5a:3e:44:81:
         73:2d:59:da:3b:fb:fb:e2:4e:b3:e0:d9:96:51:e7:c8:80:60:
         39:c8:57:fc:0d:68:64:48:aa:16:d0:75:ad:e3:bf:6b:b8:01:
         b0:de:a9:32:bd:4f:df:cc:57:60:60:65:8d:0f:e8:c9:4e:68:
         41:65:37:6e:1c:e5:13:99:e1:e1:80:7e:45:3e:3c:c0:5d:75:
         2a:3e:8c:fe:07:17:8b:30:c3:d9:46:d3:b8:16:ef:00:61:38:
         93:8a:c1:94:8c:b3:1e:18:eb:5e:99:97:fb:bf:9b:c6:e0:b7:
         15:ca:fe:67:fd:92:7b:fd:94:b2:95:49:3a:5b:bd:7d:67:a3:
         f0:52:b4:60:11:34:33:02:8d:95:9c:d2:0c:d7:59:94:6d:84:
         22:8a:97:d0:f0:84:b1:4d:74:bd:ba:6f:65:c3:7c:9d:09:b6:
         82:ef:ee:63:53:4b:e5:9f:24:85:99:fa:dc:02:89:33:05:25:
         9c:bb:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----