Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/TfP9dUMRkEzMNiU9NeKH1ixSxTM.roa
File:                     TfP9dUMRkEzMNiU9NeKH1ixSxTM.roa (raw, json)
Hash identifier:          UQhCi5S4fth1Txwu8UZg8pN+AXe3rytSU8ksuLE6odM=
Subject key identifier:   4D:F3:FD:75:43:11:90:4C:CC:36:25:3D:35:E2:87:D6:2C:52:C5:33
Certificate issuer:       /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial:       049B0190
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/TfP9dUMRkEzMNiU9NeKH1ixSxTM.roa
Signing time:             Sat 01 Jan 2022 11:53:46 +0000
ROA not before:           Sat 01 Jan 2022 11:53:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197768
IP address blocks:        31.133.104.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77267344 (0x49b0190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
        Validity
            Not Before: Jan  1 11:53:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4df3fd754311904ccc36253d35e287d62c52c533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:6a:5e:ba:6f:5b:e6:fa:e3:fc:81:70:68:
                    7b:00:72:08:41:f7:9b:17:6a:cc:52:ba:df:5a:c2:
                    51:50:95:87:66:8f:3c:0c:b8:f7:ac:c8:9b:33:21:
                    b2:9a:a9:78:3f:f6:eb:44:8e:9b:9d:4c:5e:f7:6d:
                    ac:05:69:f3:b0:23:7f:7e:b6:ff:0c:d5:b9:45:ab:
                    02:43:1e:39:92:c7:4b:fb:17:13:ff:23:19:95:ce:
                    d3:d6:5e:25:bc:a6:f9:2f:65:b4:a7:8c:75:76:a1:
                    9f:19:fb:9f:84:c6:ab:0f:80:b3:61:03:77:91:5d:
                    aa:3f:40:2e:c2:25:66:94:3c:a4:f0:1b:26:a6:99:
                    75:19:18:e5:35:1a:a4:ff:4b:cc:1b:27:0c:3d:de:
                    f4:3a:57:0c:ec:d7:ce:a3:0e:f6:f7:a2:22:ce:13:
                    d4:c0:24:56:8c:6f:42:26:d4:10:a2:89:1b:b1:61:
                    73:a9:6f:75:d1:04:c9:55:61:30:34:72:29:19:d5:
                    f4:77:e7:41:08:7b:23:35:82:b3:a0:f3:6e:ba:03:
                    b8:18:1a:7b:94:c1:11:91:c0:7a:01:bd:3b:2d:86:
                    d4:42:a8:e4:64:ff:ec:91:bd:02:cc:99:95:6b:08:
                    82:e4:f1:5d:5e:12:17:a9:2b:ec:78:67:9c:ef:84:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:FD:75:43:11:90:4C:CC:36:25:3D:35:E2:87:D6:2C:52:C5:33
            X509v3 Authority Key Identifier:
                keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/TfP9dUMRkEzMNiU9NeKH1ixSxTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.133.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:5a:0d:e0:8d:43:12:c1:43:cb:1e:9e:f6:ea:d6:7e:10:
         57:6c:cc:fe:17:20:ce:b5:84:50:ba:37:dd:89:7b:0c:ac:ed:
         13:5b:db:a7:c4:06:08:34:d1:10:a2:49:b8:8b:f2:4e:01:75:
         cb:88:8a:70:69:1f:60:b1:b7:2a:99:9a:23:63:94:1c:80:ab:
         36:7f:ab:cb:c2:55:28:05:c9:77:85:f0:2c:26:05:50:fa:3d:
         e8:04:b6:9e:f3:98:96:4f:fa:c4:56:4d:2d:43:00:3e:83:e0:
         50:97:c8:51:d5:4e:7a:6c:34:a1:d0:86:cc:a2:f0:a4:7d:61:
         9c:b0:95:75:38:7e:bd:c8:17:6f:b0:98:72:6d:a2:1a:c5:45:
         0d:97:b0:c4:48:de:0a:4a:3b:01:3d:f8:97:3a:48:22:55:5d:
         a6:fd:82:31:8c:14:02:f4:ae:cd:91:d3:f7:b7:6f:65:99:75:
         85:43:53:60:6d:69:79:4c:92:45:9d:5a:ca:35:48:49:27:f5:
         9e:11:3b:61:ed:70:c5:a9:92:d0:d8:83:41:25:6e:b9:59:d8:
         18:f2:5c:90:47:75:d6:8a:e2:6a:dd:1a:a4:81:4a:cd:a9:8a:
         b4:f0:d1:9e:7d:1c:96:0c:39:d2:8c:44:26:06:73:1e:71:7d:
         c9:e7:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----