Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/QblQrUtGqDEsbEjQApwiT4goDtU.roa
File:                     QblQrUtGqDEsbEjQApwiT4goDtU.roa (raw, json)
Hash identifier:          ENjpmw8k41OXBxpOsLFufkbDH1tXVkMbsm7GyB4Es8o=
Subject key identifier:   41:B9:50:AD:4B:46:A8:31:2C:6C:48:D0:02:9C:22:4F:88:28:0E:D5
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       01868E00
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/QblQrUtGqDEsbEjQApwiT4goDtU.roa
Signing time:             Tue 11 Jan 2022 17:38:35 +0000
ROA not before:           Tue 11 Jan 2022 17:38:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210051
IP address blocks:        195.245.84.0/24 maxlen: 24
                          2a0d:c5c0::/32 maxlen: 32
                          2a09:a280::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25595392 (0x1868e00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Jan 11 17:38:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=41b950ad4b46a8312c6c48d0029c224f88280ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:16:c8:75:2b:2f:47:bb:c6:c3:0c:cb:3f:
                    6f:11:5a:e5:d7:8a:18:c7:d8:72:c4:50:e3:6f:1d:
                    a9:af:68:b4:7a:54:93:4a:23:2d:1b:de:b5:b2:e3:
                    02:52:7d:21:c8:29:96:19:8f:66:0a:8b:d5:e0:9c:
                    f0:b6:ca:be:f4:cd:af:a9:6c:36:65:a7:f8:bb:4f:
                    de:14:36:a1:a9:24:21:14:0e:52:35:a6:ed:e6:fa:
                    70:74:c1:1d:74:f1:28:b6:80:f6:5c:42:04:d2:8c:
                    b3:13:63:d8:36:9a:c3:31:dc:df:07:8a:99:74:b9:
                    57:6f:6a:c1:fe:3a:c3:f1:28:7f:a7:b4:a3:18:90:
                    66:46:d7:ca:f6:c9:7b:ab:87:c7:1c:4e:e4:ee:2a:
                    58:23:5b:a5:29:3b:d8:65:8b:5a:f5:7d:fb:1d:d0:
                    e5:6c:74:b3:a0:9d:97:e0:62:0e:3f:54:20:e3:45:
                    44:48:7e:cf:74:54:4b:6a:e9:74:e1:9e:d7:b7:9f:
                    89:0d:ef:3a:74:37:2b:33:73:25:58:52:0f:3b:bd:
                    b3:66:32:24:0c:05:fe:48:9c:84:df:91:86:44:00:
                    f0:b4:61:37:1f:f6:99:7d:30:fa:e6:5c:cb:db:e8:
                    d6:83:cf:de:92:b7:6a:09:27:76:c8:03:72:57:12:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:50:AD:4B:46:A8:31:2C:6C:48:D0:02:9C:22:4F:88:28:0E:D5
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/QblQrUtGqDEsbEjQApwiT4goDtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.245.84.0/24
                IPv6:
                  2a09:a280::/29
                  2a0d:c5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:84:97:05:48:d6:83:77:f8:63:aa:e0:ee:fc:c7:f6:12:d6:
         7a:5d:e8:a0:22:2e:bd:9e:54:90:91:30:4b:6e:8b:24:f4:dc:
         c7:b6:bc:08:25:72:a7:84:03:51:9d:97:f8:e0:88:b4:7e:dc:
         ff:58:28:9b:b2:8d:4b:75:88:1e:d1:70:4d:27:5f:79:05:85:
         a5:45:96:95:51:81:31:c6:b2:67:95:50:73:55:9d:75:9f:c9:
         b1:f0:c9:9a:8f:0d:08:ab:67:f4:52:f2:8b:e0:0c:f1:c0:74:
         a1:25:31:fb:2f:68:d0:cb:65:4f:09:85:69:26:c4:e1:df:61:
         03:b4:96:03:22:27:3c:a3:75:f1:81:68:93:10:7b:75:0d:db:
         1f:d5:18:4d:c7:91:8d:c3:aa:3a:5c:b2:60:2e:f0:e7:6f:2b:
         8f:40:6b:4d:a8:a5:c6:7e:e6:68:58:d3:94:0d:7f:63:bc:3a:
         83:2d:c0:24:19:cd:c4:42:ae:4e:38:03:1c:3e:d1:41:81:b2:
         d2:a4:c4:fa:96:d9:91:07:b1:bc:e1:2d:78:30:83:8b:9c:da:
         a2:5a:01:2c:0c:7b:35:4e:af:b3:65:98:06:d5:f1:bc:d1:a1:
         93:d3:70:28:2d:00:25:a7:aa:76:06:52:41:78:77:d2:ee:97:
         7a:e2:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----