Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gfgqSqQs9Sra6o6FQPTW-GysDLo.roa
File:                     gfgqSqQs9Sra6o6FQPTW-GysDLo.roa (raw, json)
Hash identifier:          H5ZpDG5Jgb1OYHyKDGNEuySCCUNsLwD33hiXK7jpf6Q=
Subject key identifier:   81:F8:2A:4A:A4:2C:F5:2A:DA:EA:8E:85:40:F4:D6:F8:6C:AC:0C:BA
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       080734EC
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gfgqSqQs9Sra6o6FQPTW-GysDLo.roa
Signing time:             Sat 01 Jan 2022 11:54:14 +0000
ROA not before:           Sat 01 Jan 2022 11:54:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61272
IP address blocks:        213.252.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134690028 (0x80734ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan  1 11:54:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81f82a4aa42cf52adaea8e8540f4d6f86cac0cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:f4:44:79:e3:44:7c:b0:6f:6b:f5:a4:97:
                    39:22:20:d6:d9:47:92:78:0d:df:b1:d0:a4:ee:fd:
                    54:02:65:89:c8:84:85:ef:a4:ca:37:95:24:a2:fa:
                    cf:c3:bb:b5:55:3d:c7:21:b6:59:53:09:18:e6:cd:
                    2a:97:2a:66:94:32:9f:cc:7d:29:c1:c5:b5:d8:f6:
                    d5:d1:ac:f2:4a:8f:2c:cb:73:a0:f2:50:b8:3f:01:
                    c8:ba:3a:38:99:55:75:72:c3:81:f6:af:ab:b4:dd:
                    90:12:8f:2f:b3:7b:da:8f:4b:b2:fc:a0:ad:ee:06:
                    a5:c1:d6:fd:39:e0:03:f4:8a:b6:7b:40:fd:68:32:
                    2a:2c:04:f4:d5:3c:3a:4d:b1:1b:92:9c:86:58:c1:
                    03:1b:d6:26:d7:c7:88:32:cb:e1:c3:76:7c:d7:a4:
                    78:b7:26:01:9f:54:41:fe:46:14:ac:21:a7:dd:fe:
                    69:f2:d4:2e:ee:10:22:2f:28:8a:85:2b:3e:3a:1e:
                    67:15:03:34:ac:e0:aa:d5:2b:6f:a3:e2:43:7d:b9:
                    66:00:4b:a8:e8:67:6d:d1:81:94:40:72:ca:88:af:
                    a2:f8:5e:1d:db:26:f6:f3:44:61:69:b3:bb:9e:ad:
                    fa:a6:e9:a1:06:d4:52:7d:73:2d:b4:94:b8:5c:76:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F8:2A:4A:A4:2C:F5:2A:DA:EA:8E:85:40:F4:D6:F8:6C:AC:0C:BA
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gfgqSqQs9Sra6o6FQPTW-GysDLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.252.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:94:a6:76:dc:ac:0c:54:40:c3:68:0a:63:e1:91:47:0a:fc:
         95:de:99:f4:3e:18:5e:c6:b8:03:27:c4:0c:d2:e2:fc:3d:65:
         bd:89:6d:d3:da:f4:2a:3a:ae:b2:7d:9a:34:c4:90:b8:91:fa:
         67:99:a3:50:c5:f9:c1:24:ce:85:5d:74:6d:41:f6:d3:28:11:
         8a:a7:03:00:77:25:92:26:d9:e6:d4:99:e5:87:d3:1a:8c:38:
         94:85:b3:51:11:26:3b:b8:ba:d5:1d:55:bf:e6:b6:d5:e0:2b:
         1e:b6:99:1c:4c:78:68:7c:44:87:9b:bb:64:0a:9b:80:4b:46:
         25:23:4f:5f:8f:ae:f6:1f:ad:08:23:13:72:32:c9:03:aa:07:
         6b:d3:cf:d5:f6:9c:82:c2:a3:81:c1:9a:8b:a1:32:e4:8d:f7:
         ac:d6:2f:bc:e8:33:11:1c:66:b6:90:d4:bd:2e:bb:51:e3:95:
         98:a3:c2:81:8c:c0:d1:86:d6:75:43:3c:59:19:2c:29:9c:17:
         40:da:60:fd:2c:c7:ee:2a:82:db:fc:1f:d5:50:c3:72:7d:69:
         f1:c7:2b:f7:da:06:48:df:0d:1a:b9:4a:be:cf:e9:35:dd:40:
         65:74:76:14:7b:bd:f3:94:1d:6f:56:5a:0c:9a:09:5d:ed:bb:
         f3:be:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----