Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/BjtQ6sxnAnCdvZRcu_rvfiJm93M.roa
File:                     BjtQ6sxnAnCdvZRcu_rvfiJm93M.roa (raw, json)
Hash identifier:          nS7NOJqG/DY3NqFv9WFUickpn1EgsHQR+mE5c7BtBHk=
Subject key identifier:   06:3B:50:EA:CC:67:02:70:9D:BD:94:5C:BB:FA:EF:7E:22:66:F7:73
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       039D99A9
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/BjtQ6sxnAnCdvZRcu_rvfiJm93M.roa
Signing time:             Wed 15 Jun 2022 11:21:44 +0000
ROA not before:           Wed 15 Jun 2022 11:21:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212017
IP address blocks:        185.159.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60660137 (0x39d99a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: Jun 15 11:21:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=063b50eacc6702709dbd945cbbfaef7e2266f773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:41:51:2b:44:f9:ce:a2:f4:02:b8:6a:37:
                    a1:f1:08:cc:a6:b8:87:28:02:30:3c:7b:6c:91:8c:
                    e1:9b:7c:e2:79:91:03:fb:90:54:8c:71:06:64:af:
                    0a:a2:b0:6c:39:c2:dd:53:52:2f:d7:cd:47:4c:7d:
                    6f:99:d3:46:ac:d1:30:e2:99:3b:4e:e2:de:18:53:
                    cb:04:ef:25:8e:eb:a0:b0:b0:38:40:81:82:62:65:
                    31:df:24:35:42:b0:cf:d2:0c:13:55:f8:36:f9:49:
                    88:b5:a6:a9:ae:c1:48:4c:42:c4:e9:65:04:f8:0a:
                    d1:60:be:51:e8:17:21:30:0a:be:d4:48:98:3d:a8:
                    11:1c:3a:a9:c3:70:51:67:c8:87:d8:08:b4:eb:1b:
                    58:dc:2a:3e:cb:41:f8:60:62:b2:4b:4f:e9:64:27:
                    6a:44:32:1a:08:2b:fb:35:ee:b1:37:48:52:a6:d0:
                    23:78:ca:fa:8d:26:45:f0:19:ae:23:cd:1e:31:69:
                    9e:29:d4:1b:0c:7d:a3:61:9a:33:ce:7d:84:22:d7:
                    47:66:8a:31:c3:b8:e0:95:fd:82:cc:05:2d:fa:ad:
                    4a:a7:55:7a:19:5a:b9:61:f6:22:42:6c:94:a2:89:
                    65:7b:4b:c6:0a:c7:77:55:d4:7a:c6:c5:5a:ce:6f:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3B:50:EA:CC:67:02:70:9D:BD:94:5C:BB:FA:EF:7E:22:66:F7:73
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/BjtQ6sxnAnCdvZRcu_rvfiJm93M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:bb:d5:83:b7:d0:88:c1:73:da:01:df:b6:e6:8f:a4:48:e5:
         96:d6:e3:0d:be:85:38:d8:e1:ae:3b:57:16:eb:37:03:d1:5e:
         da:ef:cf:c2:31:9d:1a:4f:c0:d3:55:f7:df:6b:b7:47:68:41:
         5b:79:79:87:e7:1b:af:5b:21:63:10:ed:89:6e:06:30:bd:cc:
         56:51:9b:bd:44:3f:f5:73:25:a7:77:f2:9b:8e:9b:34:77:dc:
         1a:5f:c8:ce:a2:5a:fe:83:26:73:f5:97:7a:33:aa:e0:ef:e1:
         6e:f4:80:5e:7d:47:f2:0f:31:46:79:2d:30:9c:64:d4:27:7a:
         58:31:3a:d8:9b:0c:11:03:33:04:af:83:ac:4e:9d:f1:e5:97:
         5f:db:e5:a6:82:6f:0b:4f:1f:d5:03:a0:51:d2:f1:20:36:ca:
         98:21:1e:44:a0:38:0e:8f:b6:30:c0:20:4c:c6:d6:32:23:6d:
         c2:31:83:13:21:ac:7e:e4:12:af:22:f6:9a:28:2a:76:26:e2:
         64:46:1a:77:5a:d3:ac:ff:97:1a:a8:9e:3e:20:04:70:c4:0a:
         d9:ab:75:6e:a0:4e:63:8b:b6:87:e6:95:f0:d7:f9:92:45:65:
         46:f5:ec:50:35:f8:72:36:e1:d3:91:f1:b7:4f:fa:3a:b7:af:
         70:76:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----