Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/HtoTclIGy5piGfPA_w6dcoXOjRY.roa
File:                     HtoTclIGy5piGfPA_w6dcoXOjRY.roa (raw, json)
Hash identifier:          vGc54ekpkM27BGiWYnHAJqslCxa2tjwjgptDkL5nTSw=
Subject key identifier:   1E:DA:13:72:52:06:CB:9A:62:19:F3:C0:FF:0E:9D:72:85:CE:8D:16
Certificate issuer:       /CN=7819b096edf8760e8e500f94169bc00378ae9475
Certificate serial:       0237ACE3
Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/HtoTclIGy5piGfPA_w6dcoXOjRY.roa
Signing time:             Sat 01 Jan 2022 10:02:21 +0000
ROA not before:           Sat 01 Jan 2022 10:02:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51294
IP address blocks:        178.23.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37203171 (0x237ace3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475
        Validity
            Not Before: Jan  1 10:02:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1eda13725206cb9a6219f3c0ff0e9d7285ce8d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:ae:27:ac:2a:6d:c8:03:d4:eb:a6:6c:f3:
                    b7:0a:41:35:96:09:bb:fd:53:1c:62:75:56:4b:1b:
                    bc:14:d0:f1:38:7e:59:f1:17:41:9e:db:b4:fd:6c:
                    48:51:da:89:68:83:ff:6d:e7:11:8e:95:58:02:6f:
                    65:eb:a4:4f:07:f1:68:27:15:68:f4:2d:96:83:8c:
                    13:2b:03:0c:65:1d:87:e3:d9:28:50:48:14:b1:9d:
                    17:7d:2b:dc:eb:c6:dd:54:ab:f5:bb:ef:5a:e6:6f:
                    04:1d:80:9a:ad:77:22:b1:35:e1:5e:0a:03:1e:ee:
                    07:ee:48:2d:91:4c:1f:0b:f8:da:1c:40:d9:3b:d0:
                    98:c4:ea:77:1a:59:d8:64:45:4c:15:a9:d3:cf:4f:
                    29:86:80:f1:3b:a5:eb:62:85:d6:7c:76:92:d9:6a:
                    af:db:18:50:f4:57:f0:42:8b:0b:01:08:9a:47:32:
                    47:ee:e2:7d:9b:0a:de:d6:4d:a1:c2:95:5f:a8:5a:
                    23:d3:80:83:52:23:3b:be:6e:98:f1:fd:fb:38:0e:
                    82:cf:69:5d:a0:69:fe:c0:78:1b:0f:b8:46:2e:95:
                    12:3b:d8:44:ad:42:75:2b:a1:23:1e:04:b0:77:28:
                    b1:82:24:40:c2:7a:da:15:08:38:f6:ab:ba:72:79:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:13:72:52:06:CB:9A:62:19:F3:C0:FF:0E:9D:72:85:CE:8D:16
            X509v3 Authority Key Identifier:
                keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/HtoTclIGy5piGfPA_w6dcoXOjRY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.23.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:73:b7:a7:f9:2e:84:87:ec:4e:23:a0:40:96:c5:79:d8:e0:
         84:6c:8d:6a:97:9b:08:7d:23:a1:3f:24:ad:a5:c2:8d:ba:6f:
         19:25:f8:c3:5e:f3:9d:ec:ba:2d:ff:9d:2d:23:f4:19:04:55:
         c6:06:05:60:13:d2:4e:e4:72:45:c6:2e:0e:fd:b2:88:14:b6:
         2f:8f:a7:42:73:a7:fe:31:a1:14:03:72:e2:03:ba:34:a3:5b:
         a3:d5:cb:31:de:61:ca:2c:9b:30:ba:6d:8f:18:07:55:fc:c2:
         d9:6f:c1:52:bb:b5:0a:9e:db:02:40:68:86:eb:e8:43:b9:9d:
         c7:0a:c7:7e:70:9b:0c:e2:d0:80:20:f3:a1:a5:12:3a:73:0f:
         ef:c6:d9:a3:81:71:49:7c:5f:e6:b7:ad:5d:1f:86:d3:9b:31:
         40:cf:75:80:47:6e:e9:bc:b3:5b:0e:39:1d:10:44:89:3b:fe:
         b4:c2:10:68:de:7f:41:39:8b:5e:81:69:50:ed:6e:9e:30:e9:
         76:41:0a:55:de:13:e9:59:40:0b:05:bc:1f:6b:63:5c:81:96:
         c6:32:46:8a:4f:2c:05:73:a3:e3:ff:c7:e4:91:9e:6b:96:da:
         f5:32:51:7d:fa:63:53:a3:82:ff:2d:ea:b2:85:a9:5e:2a:39:
         86:2b:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----