Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/k6TshUet3WdPGrGJ1qTkkh4D0zY.roa
File:                     k6TshUet3WdPGrGJ1qTkkh4D0zY.roa (raw, json)
Hash identifier:          MOa36LW0QdQkIF6IHEnFBe9U5vlMuPNVt+vmkOdirhY=
Subject key identifier:   93:A4:EC:85:47:AD:DD:67:4F:1A:B1:89:D6:A4:E4:92:1E:03:D3:36
Certificate issuer:       /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial:       D9BD
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/k6TshUet3WdPGrGJ1qTkkh4D0zY.roa
Signing time:             Tue 24 May 2022 11:57:13 +0000
ROA not before:           Tue 24 May 2022 11:57:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44486
IP address blocks:        185.115.205.0/24 maxlen: 24
                          2a12:ea80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55741 (0xd9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
        Validity
            Not Before: May 24 11:57:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93a4ec8547addd674f1ab189d6a4e4921e03d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:10:87:2c:24:87:7a:59:ff:42:ef:10:14:
                    21:50:64:ba:6a:cb:cd:3b:9e:be:b6:8d:70:95:25:
                    98:d3:11:6b:70:04:42:c8:2c:ee:f8:1d:de:fb:e7:
                    5f:16:8c:f6:6d:91:52:91:aa:33:6d:74:4c:36:66:
                    51:ec:7b:c8:9f:85:81:87:9c:23:d6:7a:8c:10:35:
                    77:9b:33:61:4c:dd:bd:7c:5d:69:f5:bb:e4:72:5a:
                    34:3e:11:44:57:80:45:37:98:6c:54:62:02:6c:14:
                    92:09:35:03:07:9d:69:aa:42:a8:ae:c4:70:9f:0a:
                    d2:2b:f8:8a:1c:88:df:1b:c6:eb:d3:f1:9c:f2:08:
                    2e:93:95:17:fb:6c:09:7c:e9:bd:0f:5a:73:b1:a0:
                    90:3e:94:cd:a8:13:94:2d:16:42:3f:92:da:8a:2f:
                    64:06:b3:ce:f7:33:44:fb:5f:cf:eb:86:f1:ba:b4:
                    b2:b7:d5:87:b5:d7:f4:1e:9a:3b:45:24:55:27:b8:
                    90:44:08:33:01:b9:aa:c1:86:22:4c:20:b3:c3:e0:
                    4f:6f:d7:9b:4f:b7:08:96:48:aa:81:41:e5:e5:d2:
                    0e:3d:89:03:f8:9d:e2:80:01:99:98:81:a2:81:20:
                    30:3d:b4:31:3a:4a:9c:f9:4f:20:39:54:9f:78:52:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:EC:85:47:AD:DD:67:4F:1A:B1:89:D6:A4:E4:92:1E:03:D3:36
            X509v3 Authority Key Identifier:
                keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/k6TshUet3WdPGrGJ1qTkkh4D0zY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.205.0/24
                IPv6:
                  2a12:ea80::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:8f:6c:1d:7a:c1:63:68:c8:39:be:39:a2:d6:1a:9d:b4:df:
         3f:35:66:7e:0e:2b:47:c9:66:4a:a2:03:0c:9c:2c:c1:d4:e0:
         8d:7e:e2:ea:25:89:44:87:ac:d8:b1:e0:43:a5:03:3a:aa:6a:
         3c:3b:a9:e3:c8:dc:4b:b5:dd:d4:14:81:e2:bb:a7:8f:90:b0:
         2e:24:7e:1e:b7:17:f0:17:00:9f:d4:1e:12:25:46:23:c0:ee:
         57:20:46:68:7a:85:75:96:34:14:45:e5:14:c3:1d:02:71:ce:
         89:ae:45:78:cd:80:ab:a9:bf:fc:12:79:ea:d4:d4:fe:12:58:
         df:1e:d8:80:cb:b9:94:16:58:f2:60:84:b0:93:fe:18:2a:db:
         90:c7:22:47:fa:4d:b0:2a:de:2f:e3:d6:8f:c3:ca:3b:a0:b3:
         59:ae:8f:44:7f:ad:f0:82:ea:9f:0f:1e:44:ad:e2:fa:8d:96:
         32:e9:b4:b2:25:bb:bc:2a:45:f7:7c:fc:72:c8:e5:cf:85:9a:
         24:fd:75:df:ff:a7:d7:c5:8c:fb:4a:a0:2c:e5:6c:08:34:01:
         60:a7:1f:23:f7:39:2a:10:92:15:53:d5:fc:d7:d4:4d:6b:dc:
         2f:8a:93:3e:6a:54:4d:12:66:94:00:17:6c:af:90:59:2e:9f:
         55:cb:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----