Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/9LUXnHC-F4wi3qFkWEJC09k2CUQ.roa
File:                     9LUXnHC-F4wi3qFkWEJC09k2CUQ.roa (raw, json)
Hash identifier:          3Y7yzLZm/QGoQYmHGqBqCwwlRyUPTErJMdeWzIrb9J4=
Subject key identifier:   F4:B5:17:9C:70:BE:17:8C:22:DE:A1:64:58:42:42:D3:D9:36:09:44
Certificate issuer:       /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial:       01825E1EB73CD6E0979081001B33814042F0
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/9LUXnHC-F4wi3qFkWEJC09k2CUQ.roa
Signing time:             Tue 02 Aug 2022 10:34:07 +0000
ROA not before:           Tue 02 Aug 2022 10:34:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212384
IP address blocks:        45.12.104.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5e:1e:b7:3c:d6:e0:97:90:81:00:1b:33:81:40:42:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
        Validity
            Not Before: Aug  2 10:34:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4b5179c70be178c22dea164584242d3d9360944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:8b:9d:32:9c:9d:93:82:ca:5e:78:2a:1c:
                    b4:93:34:f3:e4:f7:fd:6c:2c:af:78:b2:9b:6a:4f:
                    3a:75:4f:f2:7c:14:6f:7b:bf:2d:11:33:e5:08:ef:
                    3a:cf:9c:9b:0a:19:37:c9:93:08:77:f1:1f:48:44:
                    a6:79:a8:e8:28:dc:a7:39:2a:52:b9:e3:94:ac:1b:
                    55:8d:b8:2f:c3:6d:17:29:9f:ed:01:f8:b2:48:49:
                    3a:df:ff:ea:7b:6b:0d:28:bf:49:a3:bd:29:23:07:
                    0f:17:c3:be:3b:30:b8:df:3b:f4:cd:7a:e9:c6:84:
                    17:0d:8d:a1:c8:6e:d0:b2:81:61:32:03:34:61:6b:
                    af:25:55:c7:de:0c:23:a6:7e:3d:9e:58:20:90:f3:
                    80:33:4e:f6:9b:4c:0f:b4:95:0d:70:da:b6:83:7d:
                    e1:d3:ba:79:e6:4c:72:5e:e8:11:f4:d0:1d:22:c7:
                    36:9d:a1:b0:8b:b5:66:15:10:2d:b7:cc:db:9f:5e:
                    8f:3a:1d:ab:eb:a2:4e:da:f4:cc:28:e9:60:02:59:
                    67:77:c8:8b:3d:3a:44:62:83:7d:2d:06:94:df:48:
                    c7:cc:7f:d6:8b:78:24:92:60:df:06:99:2e:f1:dc:
                    c5:18:ce:cb:90:16:c8:12:e9:e4:9b:0c:b7:c9:21:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:17:9C:70:BE:17:8C:22:DE:A1:64:58:42:42:D3:D9:36:09:44
            X509v3 Authority Key Identifier:
                keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/9LUXnHC-F4wi3qFkWEJC09k2CUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:47:98:7c:dd:f1:5d:45:8f:36:7f:cf:e4:04:d3:ef:47:d0:
         de:30:66:b5:db:bd:ed:f3:25:be:ec:1c:aa:e5:d6:98:51:c5:
         49:26:5f:c8:b9:b4:b2:ba:47:df:f6:17:08:ee:82:01:a2:39:
         98:93:b7:67:3f:98:c9:bc:9e:45:26:17:64:1a:d3:0a:40:05:
         a7:b4:4a:8d:27:ab:ac:b5:c7:ac:b7:96:0b:d6:dc:99:0d:c3:
         0c:ad:f6:ed:7b:36:f2:e9:90:da:53:a1:c8:2c:53:9d:9e:2a:
         00:31:b6:10:48:ab:f5:d3:b3:23:7a:6e:19:4f:dc:fc:d2:cb:
         25:65:fb:b2:46:84:f0:a8:84:3e:51:a3:17:fa:5e:57:11:9c:
         57:7c:cc:0c:ea:04:dc:a5:16:ff:21:68:77:35:12:ba:88:db:
         24:c9:e9:0d:9a:43:af:78:2e:3e:f0:5c:86:9c:a5:23:41:18:
         56:20:b3:78:50:99:b5:d3:3e:39:d8:cb:07:6d:d0:5d:f5:f7:
         41:3c:b3:f9:43:af:50:8c:f6:d6:e8:6c:48:d2:c6:8f:e0:06:
         20:c8:51:ca:8a:1b:40:09:72:00:53:2a:06:c7:51:55:77:a3:
         8f:ba:b8:4d:de:9f:61:15:65:ce:7f:77:d1:81:fc:6b:25:d4:
         89:85:03:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJeHrc81uCXkIEAGzOBQELwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0
NjExYWQwHhcNMjIwODAyMTAzNDA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGI1MTc5YzcwYmUxNzhjMjJkZWExNjQ1ODQyNDJkM2Q5MzYwOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKuLnTKcnZOCyl54Khy0kzTz5Pf9
bCyveLKbak86dU/yfBRve78tETPlCO86z5ybChk3yZMId/EfSESmeajoKNynOSpS
ueOUrBtVjbgvw20XKZ/tAfiySEk63//qe2sNKL9Jo70pIwcPF8O+OzC43zv0zXrp
xoQXDY2hyG7QsoFhMgM0YWuvJVXH3gwjpn49nlggkPOAM072m0wPtJUNcNq2g33h
07p55kxyXugR9NAdIsc2naGwi7VmFRAtt8zbn16POh2r66JO2vTMKOlgAllnd8iL
PTpEYoN9LQaU30jHzH/Wi3gkkmDfBpku8dzFGM7LkBbIEunkmwy3ySHHCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPS1F5xwvheMIt6hZFhCQtPZNglEMB8GA1UdIwQY
MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct
YzVkODk1MDgxOGVjLzEvOUxVWG5IQy1GNHdpM3FGa1dFSkMwOWsyQ1VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj
LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQxoMA0G
CSqGSIb3DQEBCwUAA4IBAQAAR5h83fFdRY82f8/kBNPvR9DeMGa1273t8yW+7Byq
5daYUcVJJl/IubSyukff9hcI7oIBojmYk7dnP5jJvJ5FJhdkGtMKQAWntEqNJ6us
tcest5YL1tyZDcMMrfbtezby6ZDaU6HILFOdnioAMbYQSKv107Mjem4ZT9z80ssl
ZfuyRoTwqIQ+UaMX+l5XEZxXfMwM6gTcpRb/IWh3NRK6iNskyekNmkOveC4+8FyG
nKUjQRhWILN4UJm10z452MsHbdBd9fdBPLP5Q69QjPbW6GxI0saP4AYgyFHKihtA
CXIAUyoGx1FVd6OPurhN3p9hFWXOf3fRgfxrJdSJhQMy
-----END CERTIFICATE-----