Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/6xWWlesi3eVgIrkvp2TkLGNCDNs.roa
File:                     6xWWlesi3eVgIrkvp2TkLGNCDNs.roa (raw, json)
Hash identifier:          vhyvo+XjQOYm6FcB2q7aUOgl+Z+BR/yBclEiZyR+qRw=
Subject key identifier:   EB:15:96:95:EB:22:DD:E5:60:22:B9:2F:A7:64:E4:2C:63:42:0C:DB
Certificate issuer:       /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial:       0548F5E4
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/6xWWlesi3eVgIrkvp2TkLGNCDNs.roa
Signing time:             Sat 01 Jan 2022 06:04:07 +0000
ROA not before:           Sat 01 Jan 2022 06:04:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196782
IP address blocks:        95.143.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88667620 (0x548f5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
        Validity
            Not Before: Jan  1 06:04:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb159695eb22dde56022b92fa764e42c63420cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:e6:0c:5d:c6:73:12:b3:20:cf:d9:b3:88:
                    8c:2c:7d:2d:ed:5c:02:f3:dc:ec:ef:52:be:8a:09:
                    67:84:05:34:27:ce:e5:63:89:e3:10:30:89:ef:55:
                    8c:74:f7:63:c6:68:50:62:00:d7:51:f6:0f:46:08:
                    f3:85:46:aa:b4:19:04:aa:3d:79:e9:8e:67:96:92:
                    91:51:57:c5:e2:df:d6:82:16:25:7e:af:69:2e:bb:
                    be:3c:06:37:13:16:20:16:43:d9:9d:fb:b9:cc:81:
                    85:61:bf:8c:0e:09:87:63:6e:74:db:19:65:06:93:
                    9c:27:8d:fc:ae:3e:6a:36:14:68:46:40:89:a4:e0:
                    b7:19:9b:3d:fc:50:6f:2d:b5:78:33:89:0d:44:3e:
                    70:4f:bd:ea:7e:5c:0a:98:9d:d6:82:e2:2f:a2:7f:
                    1b:ea:8c:f4:e5:ee:4a:0c:77:6f:b9:f3:5b:8a:9d:
                    de:27:ea:02:a4:c4:fa:72:1f:e9:63:a9:e5:87:d0:
                    b8:8a:74:85:dc:78:9d:7b:55:3a:d6:91:6e:ec:cc:
                    ac:57:0c:0e:54:24:be:ea:3e:eb:ae:1a:55:df:ff:
                    57:a8:81:29:fd:71:ed:94:45:1f:20:b4:9d:84:fe:
                    e1:82:ad:0d:31:94:76:59:ce:3e:17:ac:d8:43:57:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:96:95:EB:22:DD:E5:60:22:B9:2F:A7:64:E4:2C:63:42:0C:DB
            X509v3 Authority Key Identifier:
                keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/6xWWlesi3eVgIrkvp2TkLGNCDNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.143.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:cb:4c:37:48:60:fd:c9:e3:89:a6:16:bd:fe:7f:6c:42:ee:
         01:c7:47:a5:03:82:56:8e:74:14:be:b0:75:57:88:b4:1a:49:
         ea:27:b1:a4:74:df:aa:a2:11:6c:5a:e9:38:5b:fb:f3:51:2c:
         0d:a0:c5:80:39:2d:f5:0e:a1:d7:d6:d5:07:ed:98:57:92:3a:
         79:1d:1e:8a:52:d1:72:59:fa:4d:85:11:88:f8:30:42:f5:b8:
         5d:ec:8d:b9:23:8f:1c:a9:d4:0c:9d:ea:8b:bb:90:8a:50:9c:
         66:db:07:3e:14:9e:ce:01:7d:3e:d8:ff:84:44:09:da:5f:64:
         b4:73:bf:14:54:b4:c7:aa:52:6f:e5:30:24:e1:08:39:3a:45:
         db:18:75:2f:65:d7:15:4b:cd:14:09:71:71:7f:b1:0d:5e:53:
         59:a6:89:ef:0a:2d:17:f3:82:42:05:8b:d4:40:44:fd:e5:e8:
         16:97:a8:ab:9c:0e:f7:28:4c:51:60:0e:44:76:e0:8c:0f:42:
         a8:20:53:95:01:4f:ec:ea:de:07:83:27:b3:d8:1b:00:c6:48:
         8e:eb:31:88:32:5d:f7:8b:88:ff:07:e9:43:b7:9d:4f:08:39:
         64:81:8e:d6:d4:b8:79:b2:a7:88:a8:10:22:20:36:e1:d5:be:
         53:bb:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----