Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/UDXQi4O7amAV5ZBiHMHWoVeceD8.roa
File:                     UDXQi4O7amAV5ZBiHMHWoVeceD8.roa (raw, json)
Hash identifier:          wetcObi+bH4PXq3MAm6fPp4TQrWlD1I7x0ChMYlbVfY=
Subject key identifier:   50:35:D0:8B:83:BB:6A:60:15:E5:90:62:1C:C1:D6:A1:57:9C:78:3F
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       01844907F7CAF5FAC6A9A6CBE72E030F6587
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/UDXQi4O7amAV5ZBiHMHWoVeceD8.roa
Signing time:             Sat 05 Nov 2022 18:22:49 +0000
ROA not before:           Sat 05 Nov 2022 18:22:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202265
IP address blocks:        45.87.161.0/24 maxlen: 24
                          45.87.160.0/24 maxlen: 24
                          2a04:5b81:1fff::/48 maxlen: 48
                          2a04:5b80:53::/48 maxlen: 48
                          2a04:5b86:1::/48 maxlen: 48
                          2a04:5b81:1000::/40 maxlen: 40
                          2a04:5b87:1::/48 maxlen: 48
                          2a04:5b84:1::/48 maxlen: 48
                          2a04:5b81:2010::/44 maxlen: 44
                          2a04:5b81:2060::/44 maxlen: 44
                          2a04:5b82::/44 maxlen: 44
                          2a04:5b82:8::/48 maxlen: 48
                          2a04:5b80:200::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:49:07:f7:ca:f5:fa:c6:a9:a6:cb:e7:2e:03:0f:65:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Nov  5 18:22:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5035d08b83bb6a6015e590621cc1d6a1579c783f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:2f:6d:fe:e8:45:18:31:f4:2c:2d:7d:b2:
                    fb:cc:1a:f3:f0:fc:37:8f:7e:10:b6:d1:ba:ed:71:
                    f2:ad:72:6e:d4:20:fd:4e:6c:34:27:d8:ab:26:f5:
                    f3:8e:a4:d1:c5:76:32:77:d5:04:63:8f:ba:ba:5f:
                    1b:0a:4f:d6:9c:0e:ba:fd:e9:86:80:61:3e:ac:29:
                    b4:2c:1b:d6:9c:d9:d7:5b:1b:32:44:51:68:94:df:
                    42:3c:04:4e:76:c4:f1:50:48:af:13:95:dd:09:74:
                    e8:66:37:5d:b0:b1:fd:ed:1f:f2:0c:c0:70:02:76:
                    ae:d3:0e:2a:66:b1:60:5b:56:3e:8c:b9:39:9e:2b:
                    31:cc:a1:48:01:84:b0:55:c7:93:23:dd:1a:da:ee:
                    e4:83:c3:dc:62:c3:c9:ed:53:70:2f:b9:2f:7d:d8:
                    50:f0:c9:54:a5:e3:d0:32:07:5f:43:13:3a:88:53:
                    fb:4b:2c:9a:94:f3:f0:7c:5d:16:b1:8a:7a:10:eb:
                    e5:ad:c5:45:e0:42:ff:c0:e2:36:ab:c1:40:f3:47:
                    d1:21:47:31:14:93:e1:05:03:ca:e3:ec:9c:cf:85:
                    bc:71:ee:62:e7:dd:4d:01:ec:62:0d:8e:e7:09:d1:
                    42:fd:35:c8:81:a1:70:69:cb:42:42:b3:ee:51:cf:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:D0:8B:83:BB:6A:60:15:E5:90:62:1C:C1:D6:A1:57:9C:78:3F
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/UDXQi4O7amAV5ZBiHMHWoVeceD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.160.0/23
                IPv6:
                  2a04:5b80:53::/48
                  2a04:5b80:200::/48
                  2a04:5b81:1000::/40
                  2a04:5b81:1fff::/48
                  2a04:5b81:2010::/44
                  2a04:5b81:2060::/44
                  2a04:5b82::/44
                  2a04:5b84:1::/48
                  2a04:5b86:1::/48
                  2a04:5b87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:02:14:28:9d:d3:c2:6b:92:7a:af:2c:4f:c6:04:9f:89:
         5f:7d:ef:89:29:bd:53:32:63:69:1e:6d:74:1d:20:81:cb:e6:
         3e:8f:9e:27:04:03:7e:9c:f6:6c:3b:c7:0b:66:f2:76:ae:3f:
         33:2f:d9:6c:33:9d:53:3f:fc:38:23:c4:37:90:05:7d:b9:27:
         55:5a:81:df:76:b7:5e:f4:99:42:86:02:38:db:07:eb:83:88:
         17:3a:d5:77:13:61:13:22:ba:dc:43:63:ae:be:d3:40:28:c2:
         16:da:67:d4:26:4d:62:2c:e1:87:9a:96:12:f8:10:27:64:4f:
         44:71:75:86:78:c9:bf:dd:44:b7:cd:db:03:ba:74:3d:32:bc:
         67:7e:c7:b6:b7:f8:28:bf:3a:fd:c6:89:e7:8d:51:3d:82:e6:
         72:00:b5:f0:62:4c:ca:ae:1f:54:b6:3a:ea:75:01:21:a0:92:
         a4:6f:3a:64:6c:06:a6:4c:41:1a:62:68:d8:f2:ee:6b:e5:68:
         a4:bc:5c:fc:71:93:65:46:6d:f4:36:69:22:d6:d8:4e:a5:4b:
         c3:ef:60:40:f5:d0:3b:aa:41:cb:9c:3c:97:02:62:cb:c3:27:
         a0:ea:d6:07:53:2d:bf:06:17:5e:0d:49:5f:46:fd:4a:3a:be:
         ea:5e:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----