Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P-vNgPdDMBtPmWY_m6WfsjrA3Oc.roa
File:                     P-vNgPdDMBtPmWY_m6WfsjrA3Oc.roa (raw, json)
Hash identifier:          jfqIwOnwx7v7Gw9TlWMT2dnfEe8n3U8DG1A0CpZWRtk=
Subject key identifier:   3F:EB:CD:80:F7:43:30:1B:4F:99:66:3F:9B:A5:9F:B2:3A:C0:DC:E7
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27C69156
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P-vNgPdDMBtPmWY_m6WfsjrA3Oc.roa
Signing time:             Sat 01 Jan 2022 16:08:51 +0000
ROA not before:           Sat 01 Jan 2022 16:08:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56361
IP address blocks:        31.148.104.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667324758 (0x27c69156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3febcd80f743301b4f99663f9ba59fb23ac0dce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:4b:89:5f:13:38:22:a0:23:30:df:3b:2c:
                    0a:fb:85:b6:99:fe:79:e0:cb:09:02:c9:8a:2a:fd:
                    60:25:2e:5c:b7:45:a2:2d:5d:5a:57:39:f6:85:cc:
                    c9:1c:f5:00:16:5c:7d:1b:cb:74:8e:38:d1:f7:e4:
                    6c:9b:7a:9d:36:e7:fb:2c:e2:ff:df:4e:a6:fe:02:
                    2c:a7:35:76:3d:a4:41:a8:57:f8:e4:3b:05:39:26:
                    e5:b9:b0:8d:15:eb:28:9c:92:88:0a:97:7e:e7:b6:
                    cd:77:b0:09:3b:9d:05:81:1d:14:92:7d:ee:95:ea:
                    0f:be:08:cf:9a:c4:4a:6d:72:13:6e:ef:c2:f0:e3:
                    47:45:5c:a6:82:69:f8:fc:23:8b:46:e5:0d:e1:18:
                    48:ba:5c:44:1b:91:de:ba:b9:64:97:c9:82:e4:c3:
                    fa:78:18:54:05:56:29:9b:e6:7b:69:84:b7:3a:34:
                    22:a9:72:0a:08:c8:32:30:fa:56:6d:55:81:38:a9:
                    ce:40:e4:91:46:92:59:26:4a:c2:0c:af:e9:13:c9:
                    20:f5:87:e0:20:66:09:f0:14:bc:11:1a:d7:48:e1:
                    cb:fc:42:46:3e:17:01:82:0a:8e:dd:f7:72:dd:90:
                    eb:73:d5:38:05:b0:19:4a:64:26:1b:33:9f:54:00:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EB:CD:80:F7:43:30:1B:4F:99:66:3F:9B:A5:9F:B2:3A:C0:DC:E7
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P-vNgPdDMBtPmWY_m6WfsjrA3Oc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:a1:97:ac:c2:70:27:d3:8b:80:4a:6f:10:ce:9b:9f:64:38:
         18:c4:48:a9:04:b6:ec:90:d6:b2:d8:86:1e:47:9d:a8:58:bb:
         7a:3a:52:d5:cd:af:7d:b9:0a:80:d1:a2:f0:10:d0:70:c3:1a:
         f4:ff:b8:f6:9c:7a:af:df:dc:1a:56:57:0d:df:60:15:11:4c:
         97:19:16:25:03:80:23:de:de:4c:66:ea:e0:df:32:f9:84:8d:
         42:53:31:90:98:10:74:d1:51:06:db:5f:38:94:40:36:7c:d4:
         4b:ff:19:26:91:14:49:24:a7:45:32:80:a6:46:f0:6b:03:b3:
         32:1b:99:9d:14:54:98:0b:69:70:c2:38:35:91:1a:42:9a:a3:
         1d:02:c9:0c:30:2d:39:3d:4f:82:44:bf:c9:a6:cb:2a:c6:b5:
         a9:cc:f0:8c:42:2b:c6:d5:78:bb:ef:eb:db:e4:2d:87:42:da:
         60:e8:bb:10:81:4e:94:18:3f:9d:34:91:3f:04:91:4e:ad:a2:
         67:fa:7e:0b:47:aa:4d:52:a3:40:0a:c0:b0:8f:17:6b:8f:e1:
         98:a1:64:c1:36:c8:2c:1f:7a:1e:d5:6c:d9:34:b9:80:6e:a5:
         8e:3a:4f:f3:55:73:48:b4:62:ec:71:68:16:c7:72:6c:6e:42:
         8a:92:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----