Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/_vJLuA-xgVTlgcARqj2BTtJzP2E.roa
File:                     _vJLuA-xgVTlgcARqj2BTtJzP2E.roa (raw, json)
Hash identifier:          grr+UY7QD/YBBiyzVdow5cUeSwDEluAn4qWw+gQMxsI=
Subject key identifier:   FE:F2:4B:B8:0F:B1:81:54:E5:81:C0:11:AA:3D:81:4E:D2:73:3F:61
Certificate issuer:       /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial:       AFA4
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/_vJLuA-xgVTlgcARqj2BTtJzP2E.roa
Signing time:             Tue 08 Mar 2022 18:21:27 +0000
ROA not before:           Tue 08 Mar 2022 18:21:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29397
IP address blocks:        91.224.240.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44964 (0xafa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
        Validity
            Not Before: Mar  8 18:21:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fef24bb80fb18154e581c011aa3d814ed2733f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:a1:9f:e8:8f:02:49:8c:b1:b7:97:d0:fe:
                    ee:67:f4:64:1a:d8:cb:1a:b8:d9:ab:24:01:0c:cb:
                    f4:37:8d:8b:4d:39:25:31:6b:49:08:09:2e:18:ef:
                    f6:a2:4f:50:8e:db:4a:4b:f8:28:53:b2:4f:eb:ec:
                    14:3f:c8:c5:5a:55:dd:60:1e:3a:e6:0f:f8:04:9b:
                    60:fc:ae:ec:97:3e:dd:c5:9d:84:8d:ec:ac:ba:6d:
                    4c:36:54:9a:c5:91:d0:d7:10:44:14:1e:97:76:52:
                    78:db:36:ce:c2:af:d4:0a:59:bf:fa:d8:29:b4:ed:
                    96:2e:d2:aa:2a:1f:3c:00:1c:e0:fc:69:02:36:53:
                    63:94:52:53:e7:30:24:eb:b7:5b:7d:51:cd:73:ff:
                    5f:21:e6:4a:76:d2:f5:74:48:39:47:90:a8:e8:c1:
                    a6:1b:d5:c9:60:fd:e7:b7:66:e7:b7:33:b0:20:db:
                    51:54:24:f2:2f:36:fc:8c:2e:c6:3a:81:08:80:41:
                    e1:2c:ab:50:ed:c5:0c:61:a2:5e:d2:d1:5d:3e:9e:
                    90:5e:4d:23:12:ea:18:e9:66:2f:ec:3d:a3:4a:45:
                    0c:4f:fb:92:7b:d0:42:4b:43:27:1d:3c:0c:b1:44:
                    8f:74:02:03:4f:af:d7:77:b4:d8:25:e9:11:cb:95:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F2:4B:B8:0F:B1:81:54:E5:81:C0:11:AA:3D:81:4E:D2:73:3F:61
            X509v3 Authority Key Identifier:
                keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/_vJLuA-xgVTlgcARqj2BTtJzP2E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:bc:a3:ac:33:06:d9:f8:16:ff:4a:be:23:4d:50:f3:76:
         21:1a:3a:1c:49:57:9d:b4:05:55:af:92:9c:9c:80:a1:d4:bc:
         0c:61:16:06:7b:63:33:7b:41:37:4f:6f:dd:06:0a:83:4c:58:
         80:f0:a8:5a:5b:f8:47:1f:b2:3e:e2:ec:48:0a:b5:57:2f:74:
         fb:3a:3f:2a:f8:90:92:62:02:86:70:ca:52:be:2b:75:f5:31:
         1f:55:96:51:28:d7:22:61:cb:1d:3d:94:5a:60:4b:61:a3:46:
         86:06:f8:ca:0d:c5:9e:4b:b6:f0:e0:b9:9e:e8:b1:d6:20:df:
         41:3f:b7:38:35:28:e2:3c:85:e2:2b:36:e9:b6:62:da:8c:a7:
         38:e0:7c:85:6b:74:86:69:32:0c:55:1c:41:1a:66:29:62:bf:
         6f:05:4d:c9:f6:db:80:05:11:91:cf:60:db:38:e8:77:f9:8c:
         61:1c:a3:3f:49:35:a3:ac:98:eb:be:b0:3d:77:67:88:f7:67:
         77:94:be:f1:0e:ee:9a:fd:4c:bf:00:27:35:36:83:a2:76:01:
         31:a0:87:e0:4b:9b:21:80:0e:2c:b1:c5:83:9f:39:9f:cb:c1:
         06:11:d7:77:14:28:78:61:47:16:04:6f:a5:21:a3:56:3d:ba:
         91:f0:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----