Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FQDg_jdje8o6T9vZnMOVjreGERI.roa
File:                     FQDg_jdje8o6T9vZnMOVjreGERI.roa (raw, json)
Hash identifier:          uwM/w1fQFYz5eVpnLk6dBcx19F5wL2oY4DHEd30qzII=
Subject key identifier:   15:00:E0:FE:37:63:7B:CA:3A:4F:DB:D9:9C:C3:95:8E:B7:86:11:12
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1C40004C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FQDg_jdje8o6T9vZnMOVjreGERI.roa
Signing time:             Sat 01 Jan 2022 07:55:38 +0000
ROA not before:           Sat 01 Jan 2022 07:55:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203323
IP address blocks:        195.178.146.0/24 maxlen: 24
                          2a01:5c40:c000::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473956428 (0x1c40004c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  1 07:55:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1500e0fe37637bca3a4fdbd99cc3958eb7861112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:b4:48:a1:23:b9:f7:13:83:11:c5:70:1e:
                    a3:0c:96:37:d8:37:eb:1b:fe:d3:14:33:81:13:5c:
                    28:18:9f:da:74:86:6e:24:7d:6e:5e:04:9b:b8:5a:
                    02:26:2f:07:d5:f1:88:91:8a:ce:70:9a:1d:56:d9:
                    7c:61:a4:de:28:c3:45:3c:41:4c:cf:0d:4d:e6:34:
                    6c:80:6a:21:44:a5:57:7c:84:2f:b0:70:d8:1f:06:
                    b4:c5:82:ab:af:18:6e:1c:7b:ff:49:85:c3:e5:02:
                    91:20:a6:6c:aa:97:44:a6:81:e3:c8:1c:b9:24:bf:
                    76:87:f2:de:a0:cb:df:ad:f4:97:93:96:16:6b:9d:
                    a9:75:e8:e9:e0:90:f9:64:76:08:f1:8a:01:f0:cb:
                    06:07:f1:34:85:81:a0:ed:09:e6:32:2b:a1:6d:1c:
                    e0:d9:38:66:32:68:53:c1:56:80:5f:77:c3:ec:75:
                    10:b4:ab:6a:0f:06:5d:4c:30:20:1a:c5:f7:ef:bc:
                    3b:36:61:b1:c8:cb:59:ca:ac:27:b9:a4:d9:9d:af:
                    a3:4e:d6:5f:63:bc:92:67:32:52:12:6e:a0:d0:0b:
                    de:90:16:96:80:d8:69:12:a9:04:0b:dd:88:ca:46:
                    27:18:4c:ee:6c:bc:90:0b:53:72:78:c3:4d:3d:d2:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:E0:FE:37:63:7B:CA:3A:4F:DB:D9:9C:C3:95:8E:B7:86:11:12
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FQDg_jdje8o6T9vZnMOVjreGERI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.146.0/24
                IPv6:
                  2a01:5c40:c000::/64

    Signature Algorithm: sha256WithRSAEncryption
         44:8f:5c:bd:74:3a:7a:7d:24:c7:60:ac:bd:1f:17:cd:5d:c2:
         49:64:f6:50:3a:29:b8:36:1b:79:82:3a:7f:bf:34:57:43:12:
         cb:72:ad:04:9e:6f:f2:a3:d9:2d:50:52:eb:2b:5f:5d:46:10:
         e3:14:48:77:67:44:ad:70:51:16:32:d4:7e:d6:cc:1f:1d:e3:
         92:91:00:c9:02:16:38:1f:92:32:4a:75:02:10:5e:d6:ce:c4:
         5b:6d:35:0b:19:c3:87:6b:26:28:7d:ab:da:17:48:52:9b:e0:
         c4:27:46:30:d9:64:d7:d2:e7:b6:3c:67:98:fa:0e:b0:2f:41:
         29:1a:50:86:9a:a9:e2:77:4c:8b:08:c1:85:f1:b5:35:26:2b:
         ce:20:e4:5c:90:e9:8d:44:97:49:55:c1:16:74:82:65:2d:cd:
         39:fd:b0:8f:72:f0:f3:f8:ef:14:af:d7:fa:74:ad:d4:05:2c:
         b0:e8:86:a9:cb:d7:98:2b:4d:2d:81:d4:99:69:45:ce:37:7f:
         70:d5:5b:d8:fd:34:b3:1d:a9:38:38:12:0c:82:d0:09:e6:6f:
         a7:51:1f:f8:de:c6:4a:2b:dc:2e:6d:8d:bc:ec:3a:93:9a:f2:
         f3:f5:9e:42:d5:1b:48:83:66:d2:d5:0b:b7:ea:7a:60:6a:7a:
         25:61:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----