Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/G8QFocQaC-ShqtZx6ky6m8OcLqk.roa
File:                     G8QFocQaC-ShqtZx6ky6m8OcLqk.roa (raw, json)
Hash identifier:          VOb9neXj/nCDhdKnXEHcO3fmvu7SGysvPSf6anLx+CA=
Subject key identifier:   1B:C4:05:A1:C4:1A:0B:E4:A1:AA:D6:71:EA:4C:BA:9B:C3:9C:2E:A9
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       0184F1CDB2613D60EF07B82C6070C2730B47
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/G8QFocQaC-ShqtZx6ky6m8OcLqk.roa
Signing time:             Thu 08 Dec 2022 12:55:00 +0000
ROA not before:           Thu 08 Dec 2022 12:55:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44605
IP address blocks:        93.113.132.0/23 maxlen: 23
                          2a03:9c20:2000::/48 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:cd:b2:61:3d:60:ef:07:b8:2c:60:70:c2:73:0b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Dec  8 12:55:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1bc405a1c41a0be4a1aad671ea4cba9bc39c2ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:04:65:e1:1c:51:a9:c0:2f:30:e0:b5:2e:
                    86:88:5f:92:a2:f8:06:43:a7:65:cf:05:c4:d4:ed:
                    f9:97:3c:8b:66:9b:85:41:f5:a8:61:44:26:c3:90:
                    cf:a8:58:25:14:36:15:36:1e:96:26:fb:e5:61:31:
                    73:57:0b:9c:a4:06:d6:f1:e6:18:dc:11:48:a2:32:
                    f4:6f:76:77:bd:64:a5:0b:d5:3e:a0:01:5c:f1:e1:
                    1d:01:44:9c:07:33:50:08:21:d1:1e:f7:ea:73:2e:
                    79:45:82:93:d4:26:dc:a0:ba:07:1f:03:16:68:7d:
                    68:bd:42:e1:5d:93:eb:90:00:22:16:97:24:de:f7:
                    6f:71:b1:cd:10:6d:bc:40:00:63:28:e7:c0:e4:6b:
                    73:44:fa:bd:9d:fd:2d:bc:d2:ff:16:ff:04:4b:e8:
                    17:0f:48:87:51:f3:51:76:a4:d6:21:bb:b6:ee:58:
                    dc:d2:c2:56:a0:e8:4f:ab:15:75:33:5b:d3:18:71:
                    f5:b7:47:92:93:b9:e6:86:17:ca:d9:f9:0d:f9:2b:
                    8b:98:1c:ee:d4:de:92:54:dd:f6:a0:33:c5:24:87:
                    7f:49:36:b2:34:a0:be:1c:93:6d:38:2f:e0:19:2e:
                    2e:5a:31:03:5a:97:81:06:67:a0:aa:bf:63:50:1b:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C4:05:A1:C4:1A:0B:E4:A1:AA:D6:71:EA:4C:BA:9B:C3:9C:2E:A9
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/G8QFocQaC-ShqtZx6ky6m8OcLqk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.132.0/23
                IPv6:
                  2a03:9c20:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:62:c4:17:ab:ef:47:ca:73:2d:80:21:33:88:b0:e7:e2:54:
         7f:03:2e:6e:66:26:96:d4:0d:c9:cc:99:5c:a3:5a:8c:83:4e:
         49:95:ea:61:db:66:34:7e:36:8a:c8:d0:37:e8:75:7b:1c:43:
         da:55:db:c2:43:34:dc:de:1f:ed:73:64:dc:72:19:86:b1:09:
         6f:5f:e3:a4:a4:75:d7:e9:27:88:90:51:22:2c:c6:cd:90:5b:
         38:44:89:72:4b:7d:74:12:60:a7:34:e5:d2:44:71:f2:0a:07:
         93:ef:aa:a1:79:5c:ff:df:db:cd:3a:bb:3b:f3:1b:83:60:ab:
         fb:09:7a:fa:d2:81:f1:e9:01:bc:1a:6c:01:05:c6:bd:22:74:
         53:30:cc:ad:82:5f:8f:7a:db:bb:da:53:e8:47:cb:49:30:fa:
         b2:54:ee:9d:2b:9a:11:d0:c4:8a:9f:d3:11:86:b8:2a:a1:78:
         36:a9:d0:d8:a6:c4:92:8d:fd:16:91:08:55:63:fd:3a:9a:7e:
         30:54:2e:15:94:9c:d4:d9:6a:d9:e9:da:3c:04:b4:1f:ae:9b:
         54:fd:60:1e:3d:2e:06:b8:3a:5b:10:b9:b9:9e:5c:3c:17:1d:
         75:60:76:ac:ce:e7:a2:f0:b4:e5:8f:13:e4:3d:4b:87:11:b4:
         b1:22:59:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTxzbJhPWDvB7gsYHDCcwtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3
OWRjMTYwHhcNMjIxMjA4MTI1NTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmM0MDVhMWM0MWEwYmU0YTFhYWQ2NzFlYTRjYmE5YmMzOWMyZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5QEZeEcUanALzDgtS6GiF+SovgG
Q6dlzwXE1O35lzyLZpuFQfWoYUQmw5DPqFglFDYVNh6WJvvlYTFzVwucpAbW8eYY
3BFIojL0b3Z3vWSlC9U+oAFc8eEdAUScBzNQCCHRHvfqcy55RYKT1CbcoLoHHwMW
aH1ovULhXZPrkAAiFpck3vdvcbHNEG28QABjKOfA5GtzRPq9nf0tvNL/Fv8ES+gX
D0iHUfNRdqTWIbu27ljc0sJWoOhPqxV1M1vTGHH1t0eSk7nmhhfK2fkN+SuLmBzu
1N6SVN32oDPFJId/STayNKC+HJNtOC/gGS4uWjEDWpeBBmegqr9jUBsdWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBvEBaHEGgvkoarWcepMupvDnC6pMB8GA1UdIwQY
MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt
ZDJiYmYzN2RhYmI0LzEvRzhRRm9jUWFDLVNocXRaeDZreTZtOE9jTHFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0
LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBXXGEMA8E
AgACMAkDBwAqA5wgIAAwDQYJKoZIhvcNAQELBQADggEBAFBixBer70fKcy2AITOI
sOfiVH8DLm5mJpbUDcnMmVyjWoyDTkmV6mHbZjR+NorI0DfodXscQ9pV28JDNNze
H+1zZNxyGYaxCW9f46SkddfpJ4iQUSIsxs2QWzhEiXJLfXQSYKc05dJEcfIKB5Pv
qqF5XP/f2806uzvzG4Ngq/sJevrSgfHpAbwabAEFxr0idFMwzK2CX49627vaU+hH
y0kw+rJU7p0rmhHQxIqf0xGGuCqheDap0NimxJKN/RaRCFVj/TqafjBULhWUnNTZ
atnp2jwEtB+um1T9YB49Lga4OlsQubmeXDwXHXVgdqzO56LwtOWPE+Q9S4cRtLEi
WYo=
-----END CERTIFICATE-----