Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/4Jlp_C-XT64wEfzdD6rCp4I4fjs.roa
File:                     4Jlp_C-XT64wEfzdD6rCp4I4fjs.roa (raw, json)
Hash identifier:          +xFfwh7EjTAkJrrXVRznmPNnQqh1OfvYzJYvk0OroGY=
Subject key identifier:   E0:99:69:FC:2F:97:4F:AE:30:11:FC:DD:0F:AA:C2:A7:82:38:7E:3B
Certificate issuer:       /CN=15e0c079ebbee9453adf40783340016497710e08
Certificate serial:       0537FED5
Authority key identifier: 15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/4Jlp_C-XT64wEfzdD6rCp4I4fjs.roa
Signing time:             Sat 01 Jan 2022 12:59:12 +0000
ROA not before:           Sat 01 Jan 2022 12:59:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208805
IP address blocks:        45.84.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87555797 (0x537fed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15e0c079ebbee9453adf40783340016497710e08
        Validity
            Not Before: Jan  1 12:59:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e09969fc2f974fae3011fcdd0faac2a782387e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:a2:68:92:cd:93:5b:64:5c:48:7d:28:46:
                    bc:45:3d:10:17:8d:d7:c8:0c:0e:35:29:9f:62:b4:
                    ea:37:d0:79:aa:bd:96:fd:54:16:1b:22:0a:7c:39:
                    17:ef:23:61:6a:a8:65:0f:9d:3c:6b:59:54:e5:28:
                    56:1e:14:20:aa:62:43:62:3a:92:8d:7e:7c:05:5e:
                    48:ca:b1:5a:86:54:45:3a:2a:89:4e:4c:74:33:13:
                    20:5b:6d:3f:e6:87:d7:63:f1:ed:23:14:62:50:56:
                    d3:de:6b:ab:18:3c:14:1b:0a:a1:14:33:f8:b9:21:
                    d5:f4:ee:9a:10:0c:40:e5:f8:f5:5f:9e:e4:4a:7f:
                    36:09:67:5b:0a:fe:4a:5d:90:00:08:fc:5b:cd:8b:
                    77:01:67:fc:b9:95:72:df:49:e3:ac:ec:0a:5a:07:
                    d6:ce:28:23:40:a4:0a:e5:38:47:70:eb:df:b0:a7:
                    c8:b4:c9:99:a2:e8:91:80:4c:3d:61:6e:b8:80:f0:
                    81:2c:f6:23:19:ca:45:af:ef:18:bf:ff:08:f2:1d:
                    58:a6:85:1e:14:a3:7d:62:08:f0:23:35:c5:75:38:
                    51:1a:d8:17:fc:65:44:7c:7b:e8:a0:39:ac:46:11:
                    23:e0:eb:1d:4a:15:2e:6f:f6:18:1d:ea:f0:29:2b:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:99:69:FC:2F:97:4F:AE:30:11:FC:DD:0F:AA:C2:A7:82:38:7E:3B
            X509v3 Authority Key Identifier:
                keyid:15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/4Jlp_C-XT64wEfzdD6rCp4I4fjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:a7:66:3e:49:cd:bc:55:e9:b9:f5:f5:d7:60:6c:45:d9:d4:
         38:43:2a:5b:bf:c0:6d:6b:f5:cd:17:07:19:94:d8:6b:99:fc:
         86:b4:24:93:6b:ea:a1:a7:40:4c:4b:f4:35:a5:3a:31:60:8b:
         84:19:b1:0d:b5:d7:5a:d4:28:5b:5b:cd:70:2a:b8:77:97:39:
         ee:17:5b:01:67:08:f6:08:26:1e:2f:2d:73:7d:02:69:18:fd:
         56:15:0f:6b:b8:0c:85:40:01:8c:fd:42:28:70:71:f2:dc:94:
         92:78:1f:b7:fa:0b:c8:f7:ff:1b:cf:b9:49:17:11:6e:e6:13:
         f4:aa:9a:04:58:37:1f:7b:bf:73:1b:d0:14:fb:70:6e:c2:bb:
         2d:e4:ba:f0:5e:68:b1:e2:dc:c3:5b:f9:ab:fb:b7:98:13:b3:
         61:a8:ed:67:54:a6:0b:2a:cb:03:0b:5d:8e:83:ce:9d:f6:bd:
         a1:42:b2:ee:f5:03:bd:2f:06:16:de:59:9e:19:58:22:9b:24:
         5a:7e:ab:3f:1d:60:a3:60:49:71:98:ed:43:3b:dd:c4:2c:54:
         a3:59:72:ae:4d:60:ea:db:d9:6d:2b:3b:cf:dc:10:68:5b:18:
         4e:f9:d7:42:68:00:fd:1c:28:cb:f8:85:e0:a2:72:4a:7b:02:
         bd:ea:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----