Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/_hcGLMk5IUdMLY1Pq4I35gf2adM.roa
File:                     _hcGLMk5IUdMLY1Pq4I35gf2adM.roa (raw, json)
Hash identifier:          bgDPRHwBzOZCVLTJtvvplyqBlaxAtfjyCP1bFjYT7zg=
Subject key identifier:   FE:17:06:2C:C9:39:21:47:4C:2D:8D:4F:AB:82:37:E6:07:F6:69:D3
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       19453F15
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/_hcGLMk5IUdMLY1Pq4I35gf2adM.roa
Signing time:             Sat 01 Jan 2022 06:03:10 +0000
ROA not before:           Sat 01 Jan 2022 06:03:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56821
IP address blocks:        89.239.24.0/21 maxlen: 21
                          2a02:4007::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423968533 (0x19453f15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: Jan  1 06:03:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe17062cc93921474c2d8d4fab8237e607f669d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:e3:82:28:76:01:70:7d:57:b8:92:d2:3a:
                    0e:bc:fb:30:a1:23:bb:98:c2:c8:59:4d:f1:7f:c2:
                    49:5d:ec:4a:17:96:66:63:34:98:4f:ee:1b:0c:d1:
                    f4:92:00:a0:dc:01:29:fb:37:b8:35:4f:39:d3:b0:
                    18:6d:ee:e7:ca:e0:f4:0a:42:51:15:2c:4f:a1:9d:
                    1e:61:fa:f9:e1:32:2e:6d:18:4a:7a:31:6c:4c:14:
                    9c:b1:b6:e1:77:4a:d1:9c:bb:e3:64:c9:5f:12:03:
                    d5:41:20:a4:34:eb:7e:b4:89:b5:55:ef:c3:a5:ad:
                    8e:4e:11:d3:92:b7:e0:ec:ae:c1:99:35:5b:db:1c:
                    5c:1e:9f:ea:ef:50:24:2f:dc:fd:f9:0f:a9:e8:99:
                    27:6e:cf:dc:ec:d7:be:93:88:df:27:8f:94:d6:84:
                    27:83:37:99:6d:dc:50:82:0a:9b:8d:a3:ef:aa:67:
                    f1:5d:27:a0:86:9a:c6:5e:6f:ba:0e:a7:60:c7:5f:
                    03:d8:36:35:3a:00:1e:19:4c:83:ce:d2:60:b7:1f:
                    6f:e2:0f:56:86:ca:84:78:e4:40:00:b9:2d:58:f8:
                    ee:48:cd:4f:18:ac:b4:81:46:9d:07:45:9a:c4:2f:
                    2e:ff:54:95:b0:5b:ab:1c:54:8f:22:08:59:8a:f7:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:17:06:2C:C9:39:21:47:4C:2D:8D:4F:AB:82:37:E6:07:F6:69:D3
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/_hcGLMk5IUdMLY1Pq4I35gf2adM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.239.24.0/21
                IPv6:
                  2a02:4007::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:09:cf:4c:2a:60:b7:f8:48:c2:db:1b:a5:1a:64:44:77:2f:
         67:c5:e0:71:ff:02:c6:ad:2b:0d:97:ad:d1:28:78:9f:ac:67:
         b9:03:2e:59:53:db:cb:c5:5b:00:41:8d:24:cf:b8:cc:e7:dc:
         ad:e7:c1:4e:b3:fd:13:7f:04:8b:ce:0c:e9:84:7a:4f:64:d3:
         c4:60:0f:b0:9a:1a:ce:77:1e:4e:49:93:5b:64:37:87:11:19:
         f1:0c:91:5d:c3:7c:dc:4c:fb:ee:d9:92:35:08:8c:cc:10:44:
         af:2b:07:a3:fb:0a:9f:d9:43:1c:c3:60:f0:25:e7:d8:c4:ef:
         dd:37:46:a4:88:48:e7:63:bd:0f:97:9a:24:6e:af:0d:c7:73:
         af:56:43:d6:05:4e:16:78:d6:1a:df:fc:dd:28:05:ef:c5:ab:
         55:77:c0:88:e4:5c:ee:c1:05:c3:44:2d:fc:cd:1d:c0:c9:76:
         2a:1a:47:92:6c:a2:e3:dd:69:68:21:e8:1c:72:d1:cb:5b:76:
         83:62:be:37:31:a5:c1:5e:b6:50:1b:34:b5:89:75:e7:49:92:
         ff:01:20:21:a7:46:67:84:0f:0e:d9:f1:c4:a5:c8:ba:b9:44:
         a8:c5:ce:dd:66:d8:12:1b:e2:3b:2e:15:41:52:e3:60:26:b5:
         2e:8b:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----