Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/uytiuKieEMtG_hAfjbTuXpxvUIs.roa
File:                     uytiuKieEMtG_hAfjbTuXpxvUIs.roa (raw, json)
Hash identifier:          0JrCxm8zBHBQWHdC1DIXSUOXdQB13twZelZIhRqMA2s=
Subject key identifier:   BB:2B:62:B8:A8:9E:10:CB:46:FE:10:1F:8D:B4:EE:5E:9C:6F:50:8B
Certificate issuer:       /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial:       0B4AAA1E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/uytiuKieEMtG_hAfjbTuXpxvUIs.roa
Signing time:             Tue 31 May 2022 08:28:19 +0000
ROA not before:           Tue 31 May 2022 08:28:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        91.103.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189442590 (0xb4aaa1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
        Validity
            Not Before: May 31 08:28:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb2b62b8a89e10cb46fe101f8db4ee5e9c6f508b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:71:5a:97:3d:13:4f:27:8e:65:17:e1:ad:68:
                    6a:df:45:d1:34:57:0a:f0:35:5e:48:96:6b:19:ce:
                    c2:5e:55:0c:d9:ab:a1:d0:80:91:66:46:72:5c:ec:
                    d2:f7:3a:3c:f0:91:08:90:b9:61:bf:94:2b:9f:d3:
                    db:7b:ed:4e:2c:f5:cf:28:14:cf:c1:b1:35:e5:50:
                    5f:4d:32:ac:8f:55:ce:f5:1b:9f:f3:9e:04:b2:6c:
                    00:87:52:d8:fb:22:fd:38:93:24:3b:da:80:9f:e8:
                    cf:c6:d6:e1:6b:e5:c0:86:ff:cf:81:de:fa:82:c4:
                    c9:d7:29:4c:e6:e4:bf:f7:8c:b2:a3:33:c4:dd:64:
                    23:c6:61:d9:04:ac:0e:3b:8d:7a:c6:b2:20:2e:f7:
                    51:8f:c8:58:89:9f:ea:08:cf:65:10:53:6e:8a:1e:
                    44:85:72:2e:31:10:2a:f6:39:25:6c:91:d4:bd:0f:
                    e6:4e:f2:ec:a9:7c:69:f3:cf:f8:b0:30:1f:0a:2e:
                    ab:2d:62:49:09:24:56:64:1a:4f:34:ca:19:0c:08:
                    00:ef:47:b1:2d:ea:38:e6:32:ef:41:6e:86:70:cb:
                    c4:15:31:a1:f0:cf:d3:cf:8d:5b:f6:97:9e:6e:f1:
                    f2:c8:de:43:61:43:11:73:14:2c:7f:0c:04:70:da:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:62:B8:A8:9E:10:CB:46:FE:10:1F:8D:B4:EE:5E:9C:6F:50:8B
            X509v3 Authority Key Identifier:
                keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/uytiuKieEMtG_hAfjbTuXpxvUIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:69:8e:ba:e0:95:e6:c1:9c:a8:9f:d8:70:b4:8f:da:c4:43:
         bd:c5:81:12:1c:b4:c3:e8:6d:5f:fd:e2:84:71:ba:8f:f7:6f:
         c9:36:67:e5:55:fe:07:4a:ee:c5:af:91:d4:38:ac:2d:6c:5a:
         7c:71:4b:b4:19:06:c4:83:fe:14:c2:76:62:e0:6b:5c:88:d6:
         64:9c:a7:30:58:29:d7:58:08:54:1d:63:52:37:6d:87:a0:f1:
         0b:c4:bf:4a:fe:e7:a2:8b:02:e4:23:77:e1:33:79:4a:82:af:
         df:9d:69:de:76:3e:e4:0b:fc:ef:b6:24:bd:8d:4a:df:f8:c5:
         91:22:aa:42:92:26:81:9e:bb:29:f3:d7:36:12:2b:9d:ae:e7:
         68:ed:90:b5:ba:ac:50:a3:a1:3d:5e:a6:8c:46:65:c8:af:16:
         c6:cd:59:0b:21:c1:c6:83:62:da:f5:03:89:40:ee:0e:d6:a0:
         8e:30:47:13:4f:97:6b:a3:ee:5d:15:3b:69:6e:03:45:ed:95:
         6d:ce:f3:f6:73:46:6d:de:58:02:2d:1f:45:82:6a:60:8a:6c:
         4d:ad:bc:ac:2d:ea:68:2f:b5:16:3f:3d:e2:61:e6:f7:dc:86:
         db:4b:f1:21:43:cc:94:f2:aa:a1:3d:a9:02:c8:34:2e:4a:a3:
         76:b3:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----