Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/xt6kApr1nm0XDxMFMj0qyp3IGT8.roa
File:                     xt6kApr1nm0XDxMFMj0qyp3IGT8.roa (raw, json)
Hash identifier:          9GZdEm6GgEQA5w3ui47lXty7LpFASCqXtup+CMFoGYI=
Subject key identifier:   C6:DE:A4:02:9A:F5:9E:6D:17:0F:13:05:32:3D:2A:CA:9D:C8:19:3F
Certificate issuer:       /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial:       018268C73A9925BA0BE42CD3785FDB191F42
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/xt6kApr1nm0XDxMFMj0qyp3IGT8.roa
Signing time:             Thu 04 Aug 2022 12:14:23 +0000
ROA not before:           Thu 04 Aug 2022 12:14:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57317
IP address blocks:        185.105.112.0/22 maxlen: 24
                          2a06:3700::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:68:c7:3a:99:25:ba:0b:e4:2c:d3:78:5f:db:19:1f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
        Validity
            Not Before: Aug  4 12:14:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6dea4029af59e6d170f1305323d2aca9dc8193f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:83:c7:da:e8:52:97:c2:a6:65:e9:22:5c:
                    13:ca:71:f9:fc:f1:d3:43:19:f7:db:57:d9:b6:65:
                    be:ed:3e:6f:87:b7:66:46:20:99:d7:5d:c7:d8:2c:
                    61:f6:e6:86:80:8e:8c:c4:d6:de:9f:4e:76:e3:26:
                    70:94:b8:cf:db:09:89:21:a4:65:b0:28:e4:4b:63:
                    b5:4b:27:aa:11:28:bb:e2:6a:e0:1d:a2:13:a6:bd:
                    d2:bb:b2:29:6a:6d:12:b5:75:1e:06:c1:00:a6:5e:
                    fb:ad:7d:ec:12:cb:2d:01:4d:50:97:17:8c:68:b3:
                    e6:30:4d:de:34:db:8f:c4:34:73:e7:7c:7f:db:ae:
                    82:52:0b:e9:d1:27:7f:aa:0c:fc:0e:cc:59:7c:d3:
                    37:dd:09:e0:38:a1:dc:5c:db:ee:f4:58:f8:ff:85:
                    bd:0a:b2:d7:9a:22:df:58:d3:15:5d:16:94:39:88:
                    20:9f:91:d6:6c:86:01:68:22:5f:ce:11:1a:fd:2c:
                    91:b1:95:e1:88:ca:e5:f0:cb:ae:e0:69:f5:4f:75:
                    19:fc:c7:3c:e2:8c:af:4b:0f:bf:ec:d0:41:6a:36:
                    ff:1d:65:3c:fb:fc:77:d6:fe:fc:ea:27:6d:3a:07:
                    af:a3:a5:ea:48:48:7d:04:48:19:cf:e1:e0:58:1b:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DE:A4:02:9A:F5:9E:6D:17:0F:13:05:32:3D:2A:CA:9D:C8:19:3F
            X509v3 Authority Key Identifier:
                keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/xt6kApr1nm0XDxMFMj0qyp3IGT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.112.0/22
                IPv6:
                  2a06:3700::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:55:31:c3:e5:1b:07:dc:7f:e1:92:75:e1:35:30:20:d7:
         23:5a:4d:ba:b7:d0:39:47:87:d9:47:06:4e:78:7a:1f:c5:34:
         6c:ce:b3:74:4b:3b:ce:ae:3f:43:b1:b6:3d:e4:fa:68:ce:fe:
         e3:69:32:0b:31:90:b1:5f:4b:7c:8c:e7:ac:74:e0:73:42:cf:
         af:5f:0a:eb:ec:dd:7f:21:55:5c:12:9e:05:17:c4:51:54:74:
         8d:ec:a7:94:f2:32:c8:8e:ab:d2:79:ab:c0:22:e4:df:79:1a:
         97:28:74:82:a3:68:ad:f8:35:c7:04:3a:47:66:01:4e:18:0f:
         6c:a6:f6:f6:23:98:63:82:2e:02:8d:a3:23:03:47:eb:94:25:
         02:19:a2:b8:a4:81:5b:64:e1:c3:83:61:ef:05:8e:e4:a3:7a:
         09:bd:1f:79:8a:c8:37:00:89:e5:52:3f:83:10:9a:f4:f3:22:
         95:52:f8:3d:d5:c2:6c:b6:a5:d7:77:dd:a4:4a:92:ff:ba:5c:
         2d:64:52:7f:05:c8:88:6e:41:8d:2a:34:11:8e:b8:da:1f:d7:
         11:f1:f3:98:3e:b2:b1:26:6e:29:d4:bd:f5:cd:99:93:07:9e:
         d1:59:23:cc:d6:8b:00:8c:26:fb:31:30:1e:3f:90:1c:18:6a:
         7e:fa:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----