Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/BecfbqOz_mk-vbo-XbtYijN0dZc.roa
File:                     BecfbqOz_mk-vbo-XbtYijN0dZc.roa (raw, json)
Hash identifier:          vgNTRpXmK3IadudP4ii6jlY+7hfcqcLAoIFM811je/s=
Subject key identifier:   05:E7:1F:6E:A3:B3:FE:69:3E:BD:BA:3E:5D:BB:58:8A:33:74:75:97
Certificate issuer:       /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial:       6F76
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/BecfbqOz_mk-vbo-XbtYijN0dZc.roa
Signing time:             Thu 05 May 2022 09:46:12 +0000
ROA not before:           Thu 05 May 2022 09:46:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201248
IP address blocks:        185.80.240.0/22 maxlen: 22
                          2a05:83c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28534 (0x6f76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
        Validity
            Not Before: May  5 09:46:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05e71f6ea3b3fe693ebdba3e5dbb588a33747597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:d1:07:99:86:04:8b:a5:18:f0:47:ff:02:
                    a3:e9:d6:5a:c8:6e:fc:62:f2:ed:54:44:46:4b:c4:
                    23:66:53:c6:b6:35:d6:75:63:0a:ca:04:8f:9d:f4:
                    b4:f9:67:39:69:be:f6:45:d9:6d:b6:5e:3c:3f:67:
                    aa:f1:4d:56:8c:70:ab:05:b3:88:49:81:77:2b:fc:
                    d2:a1:36:38:5d:9c:3e:e7:db:41:3a:2d:24:dd:1b:
                    0f:48:47:4a:a7:0d:5d:72:c1:39:a9:ae:5b:71:31:
                    16:82:70:7b:ce:db:b3:0a:a5:4e:83:d4:30:c0:dd:
                    db:36:11:68:cb:55:60:f4:04:a8:e2:12:83:ec:cb:
                    8c:01:3e:c4:40:e7:cd:89:09:c7:f9:82:06:5a:49:
                    3d:f5:84:9b:d9:4d:e8:52:8c:08:f7:72:64:ec:3c:
                    a7:c7:17:b6:ed:26:12:c2:e1:04:12:5e:a6:94:a9:
                    c0:f6:6c:6c:70:54:62:e5:f0:d0:68:1c:12:c4:32:
                    ff:f6:e8:24:ab:f3:2f:fd:47:70:68:91:64:a8:b0:
                    d4:5a:cf:2c:15:76:94:b3:82:94:fb:23:85:f9:f2:
                    59:60:6a:24:a3:dd:96:8c:02:97:60:8f:06:23:ae:
                    eb:2a:bb:2c:b2:e9:c1:a7:de:26:73:6a:d6:8a:ab:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:1F:6E:A3:B3:FE:69:3E:BD:BA:3E:5D:BB:58:8A:33:74:75:97
            X509v3 Authority Key Identifier:
                keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/BecfbqOz_mk-vbo-XbtYijN0dZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.240.0/22
                IPv6:
                  2a05:83c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:11:05:73:90:74:f6:3b:73:46:b8:9b:a0:dd:aa:9d:e2:
         92:be:bf:8b:b4:ab:02:c2:54:2f:5c:4a:9d:4a:75:da:07:75:
         a5:db:d6:ed:33:c8:8e:29:57:f7:ab:43:b3:e6:6b:79:9e:16:
         13:cf:8d:d5:fc:05:f0:37:96:2d:78:5f:5c:47:c8:87:43:d2:
         36:9d:d8:fe:8c:4f:e2:1e:33:e6:88:66:53:1c:eb:92:85:d4:
         4c:6f:ab:31:96:1e:4c:54:f5:1b:4f:0d:6f:31:b3:9a:89:59:
         22:2e:57:1f:86:70:7a:c6:84:96:d9:e9:83:c8:19:83:bd:25:
         e3:bb:09:93:9a:02:23:5c:cb:0f:90:11:81:7e:7e:83:07:38:
         60:0a:51:b6:a9:c2:18:74:15:ff:16:9d:58:26:0b:f8:92:1d:
         d0:b2:57:26:8f:93:4a:46:16:89:75:46:5a:91:16:73:c5:37:
         6c:5d:61:fc:05:79:87:01:b1:a0:83:66:be:44:e4:f7:44:d9:
         85:51:27:6c:36:9a:3a:d2:f1:0b:8e:32:2b:96:96:33:b5:37:
         a9:39:50:21:3d:11:33:23:f0:6c:08:2f:bb:85:1a:57:9b:fe:
         7c:07:2f:2e:bf:12:e8:a6:1d:03:2d:05:b2:db:2d:da:f0:23:
         cf:e2:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----