Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/oB1ARuRJpLe03GLAaNUFX4gt-UU.roa
File:                     oB1ARuRJpLe03GLAaNUFX4gt-UU.roa (raw, json)
Hash identifier:          9OBeT8e8KX2iZcGaJIgN6IZZIvTr7sYvSgeeRWTxs4w=
Subject key identifier:   A0:1D:40:46:E4:49:A4:B7:B4:DC:62:C0:68:D5:05:5F:88:2D:F9:45
Certificate issuer:       /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial:       13019F65
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/oB1ARuRJpLe03GLAaNUFX4gt-UU.roa
Signing time:             Sat 01 Jan 2022 01:53:53 +0000
ROA not before:           Sat 01 Jan 2022 01:53:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60444
IP address blocks:        185.30.216.0/22 maxlen: 22
                          2a00:b760::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318873445 (0x13019f65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
        Validity
            Not Before: Jan  1 01:53:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a01d4046e449a4b7b4dc62c068d5055f882df945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:8f:31:d3:4e:8a:9b:bf:8e:a3:0c:bd:a1:
                    b2:bc:8e:1f:d1:27:a3:a1:1d:76:ae:dd:b3:77:f3:
                    84:f0:4a:ae:6b:52:73:7a:93:4e:12:a4:5c:4a:d5:
                    f8:4d:ec:ea:ca:7c:88:5c:16:fd:b0:09:9c:d8:ba:
                    b0:00:2e:21:2a:15:90:7e:74:84:00:b2:88:01:d5:
                    59:43:af:2a:51:1a:03:62:82:56:9b:65:c9:f0:9b:
                    5e:30:55:88:7b:09:45:97:dc:33:0f:4f:40:9c:1b:
                    d2:3b:7f:5c:b3:09:b5:81:61:03:62:ca:44:90:1d:
                    57:e1:33:97:91:a2:a0:e0:34:70:d2:7d:3d:c6:f6:
                    7c:fb:77:24:9e:14:3c:9f:5f:8c:b2:a5:c3:21:91:
                    55:db:f3:fe:d4:45:88:4c:39:38:1a:5c:60:cb:4d:
                    fb:bb:d2:2e:dc:f4:9b:25:d2:be:b6:06:ff:43:d2:
                    c3:b8:88:a5:48:9a:2a:4d:32:e5:10:7a:b2:4d:7a:
                    d0:4a:eb:6d:ed:6e:40:a1:a0:12:cf:bd:29:54:f0:
                    dc:bd:7c:ad:49:7e:aa:2e:a6:6f:c1:ce:48:4c:09:
                    8f:5f:7e:79:9b:b9:f4:c5:63:5d:dd:b9:5b:56:d4:
                    73:a5:0d:f7:fd:8a:97:84:bb:1d:75:ea:f6:a8:a2:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1D:40:46:E4:49:A4:B7:B4:DC:62:C0:68:D5:05:5F:88:2D:F9:45
            X509v3 Authority Key Identifier:
                keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/oB1ARuRJpLe03GLAaNUFX4gt-UU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.216.0/22
                IPv6:
                  2a00:b760::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:71:b6:45:ba:20:30:0a:14:bf:5e:8b:7b:4c:ab:5f:7b:
         1b:42:55:d8:55:04:01:8f:32:a8:7f:6b:39:d8:49:d3:2f:cd:
         66:a4:c6:00:43:0c:c3:01:eb:cc:ac:73:37:f4:94:68:4c:de:
         88:20:7c:ea:44:00:c9:e2:63:6d:af:44:9e:45:8c:ba:4b:35:
         d8:39:91:6f:7c:0f:8f:94:ea:38:b1:2d:f7:41:05:cd:34:23:
         6d:d9:ce:dc:54:bc:8f:fa:8c:1a:b0:d7:4f:f2:71:e6:44:51:
         c3:dc:35:79:07:cc:ee:9c:2c:15:03:bd:ae:44:15:05:92:a5:
         f2:21:ab:d7:e3:99:72:3c:a7:bc:d7:7f:d1:de:82:51:27:2d:
         7e:a3:42:95:57:f8:0b:99:c7:43:0b:7f:bc:b0:ac:ec:7e:13:
         c1:be:87:3f:d7:90:fc:fd:16:99:7e:45:75:e2:b7:c6:27:7c:
         0c:24:ab:b7:f2:4d:aa:d7:fa:b5:75:1b:fe:04:37:2e:05:e3:
         f0:06:ca:92:7b:0c:82:e4:f5:02:6c:ea:17:41:b6:2b:2a:18:
         a8:c2:8d:a0:bc:d0:89:9b:c6:3d:98:76:64:d8:c6:b1:96:db:
         a8:9f:2a:4d:4f:99:d3:5c:8f:a1:0a:43:fa:29:d5:68:8d:42:
         92:ee:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----