Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SZCys-r_edccB3ftfg2dYbtEQEE.roa
File:                     SZCys-r_edccB3ftfg2dYbtEQEE.roa (raw, json)
Hash identifier:          6tDsNUCTqDNEMxke4mk8MiKXwX2BGREbIJuPKFbPIm4=
Subject key identifier:   49:90:B2:B3:EA:FF:79:D7:1C:07:77:ED:7E:0D:9D:61:BB:44:40:41
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1C4666D7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SZCys-r_edccB3ftfg2dYbtEQEE.roa
Signing time:             Sat 01 Jan 2022 07:55:42 +0000
ROA not before:           Sat 01 Jan 2022 07:55:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212397
IP address blocks:        212.111.199.0/24 maxlen: 24
                          2a01:5c40:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474375895 (0x1c4666d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  1 07:55:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4990b2b3eaff79d71c0777ed7e0d9d61bb444041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:fe:7b:a0:c2:b9:30:21:f6:ea:76:81:64:
                    f8:a6:f7:bc:ea:77:03:1d:25:6a:7d:f5:c7:dc:ba:
                    04:69:e0:38:5a:80:5e:5e:95:6a:6c:c5:ef:8a:19:
                    9f:58:55:88:01:b5:64:f3:f1:4f:54:df:a5:d1:3f:
                    f9:cc:82:94:35:99:d9:cf:16:96:97:a3:70:0c:61:
                    f0:72:e6:d6:d3:85:3d:d5:ef:e5:2e:37:1b:17:ed:
                    a1:38:0a:7e:34:82:d7:b5:d0:a3:e6:de:c3:01:2e:
                    32:79:f3:1d:fd:92:0f:6a:a4:5c:63:bb:24:e5:06:
                    49:42:f3:3c:7f:e1:25:d5:be:7d:ec:6a:aa:b2:e3:
                    32:ce:30:d4:3a:85:9d:23:ed:12:a1:b9:d2:9a:87:
                    df:4e:4f:71:1e:83:40:6c:1d:22:e2:59:17:fc:12:
                    ce:1e:99:c9:bb:ac:f0:c5:b4:fb:e4:96:e8:23:52:
                    47:aa:fc:f0:79:89:10:ea:1f:73:e6:e7:f2:64:1a:
                    09:89:bb:d2:4a:e5:db:85:bb:4d:14:b7:64:c9:db:
                    5a:d8:bc:4a:16:bf:50:24:68:e2:71:9b:70:14:40:
                    7d:28:57:64:ec:7f:dd:1b:f6:e1:b3:72:54:fe:b4:
                    bc:c6:83:df:d5:ea:22:35:e0:57:88:81:d9:01:6d:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:90:B2:B3:EA:FF:79:D7:1C:07:77:ED:7E:0D:9D:61:BB:44:40:41
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SZCys-r_edccB3ftfg2dYbtEQEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.111.199.0/24
                IPv6:
                  2a01:5c40:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:db:58:cc:31:d9:d7:41:74:d0:f7:fb:05:dc:92:3a:95:2e:
         17:d6:c3:28:17:45:81:9f:ad:cb:83:0f:f7:bd:7e:92:1b:54:
         88:92:96:5d:f3:ce:49:cd:e4:f2:50:ed:ee:ec:99:fb:b2:85:
         fe:a5:c1:13:c5:50:7a:3b:30:ff:eb:0b:49:e1:ca:87:85:da:
         8b:74:9a:fe:c4:6b:86:93:6e:bf:c3:9c:a3:be:56:04:aa:d1:
         26:0b:28:7e:97:6f:12:60:0a:a5:96:51:6e:99:8a:2a:a4:aa:
         d5:45:5d:6e:b5:99:0f:d9:e3:22:68:88:69:9c:87:a4:b8:2a:
         b6:d4:dd:5b:a1:46:6e:f3:f7:1b:20:05:1e:e6:10:2d:7f:3d:
         5b:f9:f0:0b:a5:90:d6:c3:53:5b:d5:bd:20:12:ed:9f:16:ee:
         6c:d7:98:8d:5a:98:ce:1a:bd:a8:7a:b4:be:f7:b7:27:dd:c9:
         0b:76:77:2f:68:76:6f:9b:b1:c8:6a:07:c1:cc:8b:72:a6:6a:
         67:27:c7:46:43:34:79:77:50:46:18:5a:83:c7:e3:3c:06:f6:
         59:37:be:90:45:8e:33:a6:02:8d:2c:05:e3:f5:69:ed:56:e4:
         ac:83:61:e8:61:b0:27:48:17:ce:94:d0:0e:4b:aa:2c:7a:07:
         ef:c2:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----