Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/LL7upxhmwtf2-s5F0P5IVq_Bu_o.roa
File:                     LL7upxhmwtf2-s5F0P5IVq_Bu_o.roa (raw, json)
Hash identifier:          iSwdWGoewbMqqG1KwrlUyviJR1wVOCsQ8cwdZsbc0r8=
Subject key identifier:   2C:BE:EE:A7:18:66:C2:D7:F6:FA:CE:45:D0:FE:48:56:AF:C1:BB:FA
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       0181EE0EB4C7FE4F05E9CAC59D4BA7BDE85F
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/LL7upxhmwtf2-s5F0P5IVq_Bu_o.roa
Signing time:             Mon 11 Jul 2022 16:19:09 +0000
ROA not before:           Mon 11 Jul 2022 16:19:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        31.223.200.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ee:0e:b4:c7:fe:4f:05:e9:ca:c5:9d:4b:a7:bd:e8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Jul 11 16:19:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2cbeeea71866c2d7f6face45d0fe4856afc1bbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:dd:a8:94:ed:44:fe:c1:83:ec:23:58:0d:
                    a5:0f:56:f4:41:f9:de:5d:dc:79:47:2e:9c:a8:6e:
                    a7:98:e9:5b:05:37:d5:c7:a0:fa:02:b6:8f:b7:93:
                    29:53:37:93:33:c4:a1:36:ff:ba:0c:88:a4:0e:f2:
                    8b:1d:37:09:5b:70:4b:76:b6:1e:56:d2:f5:19:bb:
                    f5:8a:80:e7:21:ad:8e:0b:95:6c:d9:ff:4a:ee:99:
                    fc:e5:8c:72:4b:46:84:3d:fe:14:46:ad:bd:b1:06:
                    4e:09:cd:6c:79:05:3b:11:d6:06:b4:28:dd:2c:de:
                    a1:ef:79:ab:e5:a4:76:d7:c1:76:fe:1a:9a:db:e8:
                    3e:ed:d6:27:3b:4e:13:5b:c5:c0:9d:f4:8e:b3:e2:
                    03:4c:b9:30:30:9c:a5:92:c3:1e:37:5d:35:29:f9:
                    c9:03:c9:44:3e:66:24:4c:78:14:91:e3:71:eb:26:
                    86:45:7c:99:56:ae:8e:74:f9:57:29:08:59:c1:93:
                    2b:1a:9e:08:2a:45:3e:5c:95:55:80:17:84:0f:fe:
                    f5:96:58:18:42:cb:9b:9e:0e:fd:8a:fd:7b:42:7e:
                    06:f0:b0:e2:60:be:c7:5c:83:d8:a1:25:53:68:45:
                    8b:87:a9:db:c2:c6:65:9c:9f:e1:87:64:64:3f:6c:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:EE:A7:18:66:C2:D7:F6:FA:CE:45:D0:FE:48:56:AF:C1:BB:FA
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/LL7upxhmwtf2-s5F0P5IVq_Bu_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.223.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:33:2d:df:65:a5:e6:b1:06:7b:e7:75:6c:d0:7f:1d:4c:b2:
         b8:c3:59:37:a9:b1:32:c4:62:ef:d2:42:1a:6e:4f:56:6a:c6:
         e6:3c:1e:17:bf:21:9a:33:7f:6a:47:ac:79:aa:af:a0:78:c6:
         06:10:56:ae:db:41:dc:ae:94:42:ef:78:5d:db:cb:8a:dc:82:
         8a:3b:8d:07:8a:f6:3c:d2:07:5d:7b:17:78:09:22:e6:da:f4:
         b3:72:fb:43:fa:24:45:18:3d:52:69:9a:eb:48:75:a5:01:d7:
         86:1a:f8:45:8c:75:39:87:e9:69:04:b1:33:5d:c6:52:c1:58:
         04:5c:ac:d6:13:32:fb:68:82:19:e0:f0:5c:1b:5f:25:52:d5:
         cd:59:22:dc:a0:ae:b2:6c:30:d2:03:c7:6d:08:3c:48:67:f1:
         99:e6:ac:a1:df:15:c9:17:21:12:90:da:8f:2b:a4:77:73:0a:
         b6:81:84:37:2f:3a:1b:d2:05:e9:77:6f:96:33:75:0f:48:79:
         1b:f1:3e:0f:4a:a5:2b:99:c5:2d:35:70:6d:aa:51:af:d8:97:
         32:6b:26:75:a9:b0:f2:5a:c4:f0:4f:37:e9:91:cb:bb:e8:0b:
         e2:ed:48:30:fe:82:10:61:46:0e:dc:45:68:af:c2:1e:88:5f:
         0d:83:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----