Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/ahJ9ct8hqT65UhjrmuazrABP5gQ.roa
File:                     ahJ9ct8hqT65UhjrmuazrABP5gQ.roa (raw, json)
Hash identifier:          T0yPcWNapaCIqezo6R/Qqvr5zQ1khSd2izcBjd/N8ps=
Subject key identifier:   6A:12:7D:72:DF:21:A9:3E:B9:52:18:EB:9A:E6:B3:AC:00:4F:E6:04
Certificate issuer:       /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial:       07B52630
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/ahJ9ct8hqT65UhjrmuazrABP5gQ.roa
Signing time:             Sat 01 Jan 2022 09:54:58 +0000
ROA not before:           Sat 01 Jan 2022 09:54:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12586
IP address blocks:        91.199.8.0/24 maxlen: 32
                          2001:67c:2f84::/48 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129312304 (0x7b52630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
        Validity
            Not Before: Jan  1 09:54:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a127d72df21a93eb95218eb9ae6b3ac004fe604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:06:24:dd:88:e6:b0:ff:90:ec:a9:4a:26:
                    c9:1f:db:9f:1b:75:cf:f3:1c:cd:ae:33:30:08:7a:
                    46:ed:e8:a4:a6:dc:31:31:be:a4:2e:94:8b:fb:a6:
                    19:4c:5c:a3:fe:9e:cf:7c:9a:93:ef:2b:a0:26:ba:
                    05:69:dd:e9:40:b8:97:84:f0:bd:cc:ee:48:bf:8d:
                    b6:02:7f:54:82:88:16:78:90:cb:22:aa:93:f4:cf:
                    fb:8c:a2:a3:7c:d3:de:d0:67:31:b1:40:ff:c6:64:
                    2f:fc:8f:74:2b:5c:64:f3:f7:4e:8d:c0:c8:e9:89:
                    0e:5a:2a:17:d5:d2:f9:08:86:75:71:0a:2f:11:6e:
                    d1:84:81:f4:3a:0d:13:94:85:66:39:cf:00:87:08:
                    e2:c3:c9:be:66:82:74:5a:44:9a:14:94:b9:de:51:
                    a2:8c:3d:1a:76:3b:12:44:5e:ff:44:fe:75:15:2c:
                    aa:a7:cd:0c:a4:9a:c1:59:25:5d:24:78:47:10:7f:
                    3e:60:84:77:1a:9b:8d:1d:9c:12:36:9a:46:16:30:
                    17:87:cb:3d:85:c1:8a:75:37:98:2c:77:f7:fc:41:
                    1f:7a:9b:96:8b:cf:84:57:5d:77:0c:a3:ef:7b:c4:
                    7e:c7:71:45:14:63:a0:10:3c:b5:eb:1e:77:e4:9e:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:12:7D:72:DF:21:A9:3E:B9:52:18:EB:9A:E6:B3:AC:00:4F:E6:04
            X509v3 Authority Key Identifier:
                keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/ahJ9ct8hqT65UhjrmuazrABP5gQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.8.0/24
                IPv6:
                  2001:67c:2f84::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:66:90:c9:e7:b2:a5:c7:3b:b8:87:4b:82:62:97:e5:c8:25:
         a3:c6:cf:69:ca:55:13:7e:71:30:9a:e3:8c:61:5b:5a:17:2f:
         f8:1a:4a:05:5f:c2:4f:d3:27:c0:b2:b1:ee:b8:e5:c3:d0:6b:
         77:f5:31:ab:0a:24:01:f8:c1:0f:ea:e5:94:ce:14:a4:7e:65:
         d7:50:e7:bb:ed:c8:d6:d5:8e:0b:e2:af:33:c5:3d:68:11:b4:
         4a:66:8b:94:04:e8:ca:ff:65:14:29:b7:b8:f3:45:ef:bc:02:
         f4:71:4c:5c:78:32:09:5c:83:ed:a4:e9:da:3e:a4:eb:22:0e:
         71:7f:fb:88:3a:be:fa:5c:87:f7:58:a6:ce:0d:f9:e7:36:42:
         42:ab:d0:44:38:43:83:21:a3:5e:f6:e1:ef:cd:98:ab:c7:9e:
         57:1c:06:4e:74:53:6e:f6:3d:1d:e8:44:7a:77:6f:9c:25:10:
         81:86:88:17:2e:1c:d8:cb:91:1a:4e:a8:95:e0:03:d2:eb:56:
         e0:03:27:87:5a:08:b9:8f:ea:80:6f:b4:65:48:5b:5a:76:2f:
         65:ac:d3:41:7d:a8:4c:73:11:9d:64:52:a5:36:42:e5:f9:24:
         e9:7b:dd:7e:a7:63:74:50:9a:a2:84:87:3c:db:a9:1d:54:bf:
         d8:9e:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----