Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/6Japd0K1U2PZ4T9O8tNklZj6xKQ.roa
File:                     6Japd0K1U2PZ4T9O8tNklZj6xKQ.roa (raw, json)
Hash identifier:          KWWu1H6HnmntE3FvMn+rcy+PBJ60NPJahb3VsgXQj4w=
Subject key identifier:   E8:96:A9:77:42:B5:53:63:D9:E1:3F:4E:F2:D3:64:95:98:FA:C4:A4
Certificate issuer:       /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial:       BE24
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/6Japd0K1U2PZ4T9O8tNklZj6xKQ.roa
Signing time:             Mon 31 Jan 2022 15:13:21 +0000
ROA not before:           Mon 31 Jan 2022 15:13:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31562
IP address blocks:        83.166.64.0/19 maxlen: 19
                          2a03:9600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48676 (0xbe24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
        Validity
            Not Before: Jan 31 15:13:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e896a97742b55363d9e13f4ef2d3649598fac4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:6d:bb:33:24:48:b3:02:0f:8b:7b:ab:c1:
                    bc:35:44:36:ab:6e:5e:1f:4e:e3:d3:9a:19:ea:93:
                    da:0d:eb:90:9a:0c:5a:87:45:84:30:3f:9d:8d:a9:
                    23:99:4d:ac:93:fe:c5:e0:cc:96:59:26:d7:5e:86:
                    97:bd:97:e8:7b:8c:3b:d3:f4:03:b4:34:e1:14:d5:
                    27:b0:1e:30:27:06:18:9f:1a:42:03:e9:c5:1b:9f:
                    2b:06:32:ba:87:b5:92:1b:21:ff:20:4b:03:24:8b:
                    91:63:dc:ff:4a:ee:23:6f:65:c6:eb:71:95:6e:cd:
                    6a:f5:20:f7:0d:8a:2d:53:bf:d8:57:37:f8:3c:ec:
                    e9:21:89:a7:f1:70:49:0a:84:92:f0:c3:f0:76:42:
                    f1:c1:0f:bf:ad:b7:2e:f1:57:7b:f7:e6:39:aa:f7:
                    be:61:0c:6c:6e:68:58:a3:9e:a1:77:1b:36:3e:34:
                    3d:e8:db:ee:b6:07:6f:6d:45:ac:c9:e1:33:88:12:
                    3a:8f:12:8f:de:c2:c2:fa:fe:7c:88:16:14:7f:7b:
                    82:1c:7d:a7:33:c2:4d:d2:a7:59:51:84:fb:45:f2:
                    3e:48:60:37:7b:fd:ae:13:2e:05:a9:16:75:1a:20:
                    ea:b5:65:94:5f:aa:d2:88:4f:ce:ea:8a:f8:68:3e:
                    84:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:96:A9:77:42:B5:53:63:D9:E1:3F:4E:F2:D3:64:95:98:FA:C4:A4
            X509v3 Authority Key Identifier:
                keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/6Japd0K1U2PZ4T9O8tNklZj6xKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.166.64.0/19
                IPv6:
                  2a03:9600::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:24:bc:5c:47:f7:1a:9e:3b:ae:d6:19:a0:18:5a:e0:f5:b8:
         4d:87:da:05:08:d4:80:bd:76:81:8d:9e:f5:53:76:f9:b9:b3:
         7f:ad:ba:4c:e8:ec:79:1f:ae:18:90:13:e7:c1:20:fe:50:a0:
         12:82:4d:4b:2d:14:dc:de:06:8f:fc:11:76:96:5a:b0:14:4a:
         6b:ff:05:fb:b1:69:b7:57:5a:3e:ce:39:ae:e2:07:b2:e0:1c:
         7d:a8:fc:8d:0a:b7:42:2b:88:32:02:8b:8b:89:44:a8:70:1f:
         3d:61:bb:1f:26:03:7e:ac:89:9c:02:5e:42:d1:05:bc:79:e7:
         e4:c5:7a:a3:6d:6e:cf:8b:3b:07:e1:b9:ff:28:b2:c5:b7:53:
         dd:67:c7:6a:86:91:31:bc:72:65:73:a0:df:ba:4f:f3:9a:40:
         28:5c:79:38:3b:16:4a:42:ee:3e:b4:d8:14:44:dc:d0:87:07:
         09:d0:0b:4f:a0:10:83:a2:ab:38:84:ef:d1:2a:f9:5e:ce:d2:
         e7:23:8a:99:ab:6c:90:42:f9:ec:88:2b:b5:af:d3:ba:a4:3b:
         74:bf:a4:52:bc:1c:f0:f7:6c:05:f7:d7:d5:21:23:ce:70:97:
         dd:50:68:d1:d8:12:f6:d8:58:e2:33:7a:99:42:b7:44:bb:08:
         06:0a:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----