Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/VuRwNA_3r0pHKKOkJlDFMKjcFGY.roa
File:                     VuRwNA_3r0pHKKOkJlDFMKjcFGY.roa (raw, json)
Hash identifier:          j2OAMoMxxga/vlikXCTvH9Jqcb532Omwc4+37EJzSm8=
Subject key identifier:   56:E4:70:34:0F:F7:AF:4A:47:28:A3:A4:26:50:C5:30:A8:DC:14:66
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       37197193
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/VuRwNA_3r0pHKKOkJlDFMKjcFGY.roa
Signing time:             Sat 01 Jan 2022 11:59:56 +0000
ROA not before:           Sat 01 Jan 2022 11:59:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2832
IP address blocks:        193.10.255.0/24 maxlen: 24
                          2001:6b0:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924414355 (0x37197193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Jan  1 11:59:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56e470340ff7af4a4728a3a42650c530a8dc1466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:25:59:70:a4:fb:ce:e6:d4:7b:ee:46:cf:
                    a9:ba:3f:4e:c1:ab:30:13:b4:57:14:b2:9f:39:e3:
                    6f:05:43:59:d1:c9:5f:81:94:c9:75:df:d0:28:79:
                    87:c1:c4:08:ec:f4:bd:0c:60:84:f4:cb:00:48:32:
                    71:f4:6b:bf:61:68:8f:7f:42:c2:f3:53:b5:e0:88:
                    43:0a:21:b2:5f:9e:94:ee:f4:df:f7:93:e8:b2:6e:
                    cc:53:d1:77:d8:bb:a5:db:7b:1c:ff:4c:97:b2:34:
                    5e:89:25:a2:e3:5f:c6:1c:25:06:a7:ac:da:bd:f0:
                    34:c7:af:a2:f3:08:51:a8:29:33:d0:07:23:94:d1:
                    92:61:4b:b9:a2:b8:b8:fb:ac:b1:99:f3:4c:06:c3:
                    0c:92:89:cc:ef:03:91:c6:b7:0e:ef:0a:62:42:99:
                    d7:ee:da:c8:1e:69:c9:fb:ff:8c:26:2b:08:41:28:
                    91:ea:73:85:86:0d:5a:3c:b6:81:1c:47:16:4d:ec:
                    b2:6c:3d:86:b9:d7:86:f9:48:61:08:ea:5d:25:34:
                    5e:fa:f3:0d:99:ef:a3:42:95:16:7b:9f:c0:50:31:
                    b7:4c:31:3d:3e:8f:d0:ae:e7:8c:18:e1:a3:a4:af:
                    e4:d6:7c:a7:fb:d2:5b:4d:ef:d8:4f:dc:38:53:f2:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:70:34:0F:F7:AF:4A:47:28:A3:A4:26:50:C5:30:A8:DC:14:66
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/VuRwNA_3r0pHKKOkJlDFMKjcFGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.10.255.0/24
                IPv6:
                  2001:6b0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:3e:03:93:39:b4:f2:89:0b:db:f9:e1:1d:54:a2:d2:94:
         a3:20:1b:98:58:fb:a9:1a:b5:f5:80:85:83:c9:18:93:60:49:
         eb:2a:ec:f6:ff:ee:52:e2:97:6d:06:ba:f0:91:fe:4f:a3:ad:
         6d:62:10:2e:5d:e4:20:17:00:84:5b:50:62:7a:bb:6a:ad:16:
         16:13:20:02:fc:70:0d:3e:f3:15:f6:31:2c:89:0a:20:5f:2e:
         e5:ec:f2:7e:fe:28:2f:42:7b:a7:13:4f:49:51:f4:a6:a2:e7:
         53:ba:29:ed:00:4b:26:17:6d:54:e7:68:25:2a:ae:0e:ff:2b:
         ad:ba:8b:0a:00:c7:76:65:05:c6:87:c4:60:16:93:e5:82:99:
         b0:92:73:22:83:eb:9b:f4:c6:e1:92:85:19:c7:3c:ab:14:49:
         4a:03:24:e9:8b:ab:d7:16:70:11:f9:27:5a:60:6a:cb:f0:64:
         5d:a5:f5:4f:a4:f1:f1:35:b8:fe:a7:2b:be:f4:99:7b:ac:1f:
         ce:69:3a:2e:98:1a:a9:4d:e8:23:d5:38:07:ba:ca:71:64:b3:
         51:08:a3:7b:2d:e9:66:a6:8f:41:de:c3:3f:a7:69:76:95:5f:
         ef:63:3a:b6:84:50:46:a3:88:00:44:14:cb:1b:38:ae:1a:4f:
         a8:fe:47:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIENxlxkzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODAxZjIzY2U4MjFjMjY0ZDY3NzI3NTM2ZWMxODM1Mzc1OTRjNWYyMB4XDTIyMDEw
MTExNTk1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZlNDcwMzQwZmY3
YWY0YTQ3MjhhM2E0MjY1MGM1MzBhOGRjMTQ2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsTJVlwpPvO5tR77kbPqbo/TsGrMBO0VxSynznjbwVDWdHJ
X4GUyXXf0Ch5h8HECOz0vQxghPTLAEgycfRrv2Foj39CwvNTteCIQwohsl+elO70
3/eT6LJuzFPRd9i7pdt7HP9Ml7I0XoklouNfxhwlBqes2r3wNMevovMIUagpM9AH
I5TRkmFLuaK4uPussZnzTAbDDJKJzO8Dkca3Du8KYkKZ1+7ayB5pyfv/jCYrCEEo
kepzhYYNWjy2gRxHFk3ssmw9hrnXhvlIYQjqXSU0XvrzDZnvo0KVFnufwFAxt0wx
PT6P0K7njBjho6Sv5NZ8p/vSW03v2E/cOFPyO70CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRW5HA0D/evSkcoo6QmUMUwqNwUZjAfBgNVHSMEGDAWgBToAfI86CHCZNZ3
J1NuwYNTdZTF8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZBSHlQT2dod21UV2R5ZFRic0dEVTNXVXhmSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8x
L1Z1UndOQV8zcjBwSEtLT2tKbERGTUtqY0ZHWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
ZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8xLzZBSHlQT2dod21U
V2R5ZFRic0dEVTNXVXhmSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMEK/zAPBAIAAjAJAwcAIAEGsAAE
MA0GCSqGSIb3DQEBCwUAA4IBAQCmwj4Dkzm08okL2/nhHVSi0pSjIBuYWPupGrX1
gIWDyRiTYEnrKuz2/+5S4pdtBrrwkf5Po61tYhAuXeQgFwCEW1BiertqrRYWEyAC
/HANPvMV9jEsiQogXy7l7PJ+/igvQnunE09JUfSmoudTuintAEsmF21U52glKq4O
/yutuosKAMd2ZQXGh8RgFpPlgpmwknMig+ub9MbhkoUZxzyrFElKAyTpi6vXFnAR
+SdaYGrL8GRdpfVPpPHxNbj+pyu+9Jl7rB/OaToumBqpTegj1TgHuspxZLNRCKN7
Lelmpo9B3sM/p2l2lV/vYzq2hFBGo4gARBTLGziuGk+o/kcj
-----END CERTIFICATE-----