Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/YSyt_4-HapTay7A_jQUwcjQOag4.roa
File:                     YSyt_4-HapTay7A_jQUwcjQOag4.roa (raw, json)
Hash identifier:          btXrl22GLqUmZfUYxO2SRaqF4IOQw/dKbxK5xLKF91U=
Subject key identifier:   61:2C:AD:FF:8F:87:6A:94:DA:CB:B0:3F:8D:05:30:72:34:0E:6A:0E
Certificate issuer:       /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial:       083B516C
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/YSyt_4-HapTay7A_jQUwcjQOag4.roa
Signing time:             Mon 31 Jan 2022 17:32:47 +0000
ROA not before:           Mon 31 Jan 2022 17:32:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208621
IP address blocks:        45.92.36.0/24 maxlen: 24
                          45.92.38.0/24 maxlen: 24
                          45.92.37.0/24 maxlen: 24
                          45.92.39.0/24 maxlen: 24
                          2a0e:1bc7::/35 maxlen: 35
                          2a0e:1bc0:2000::/35 maxlen: 35
                          2a0e:1bc0:4000::/35 maxlen: 35
                          2a0e:1bc0:6000::/35 maxlen: 35
                          2a0e:1bc0::/35 maxlen: 35
                          2a0e:1bc1::/35 maxlen: 35
                          2a0e:1bc1:2000::/35 maxlen: 35
                          2a0e:1bc5::/35 maxlen: 35
                          2a0e:1bc4::/35 maxlen: 35

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138105196 (0x83b516c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
        Validity
            Not Before: Jan 31 17:32:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=612cadff8f876a94dacbb03f8d053072340e6a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:fa:be:93:4e:4f:1d:8f:85:1a:4f:bf:7a:
                    35:a8:dc:db:a8:e0:d3:56:5c:6e:7c:86:03:1c:ca:
                    31:98:f8:ff:0e:3d:35:58:97:3f:1e:27:57:37:dc:
                    b2:2d:1f:a7:64:1d:d9:ed:20:30:89:fd:cf:2a:b3:
                    e3:00:41:ad:15:43:de:83:1b:74:93:34:81:be:b6:
                    7b:e9:dc:1b:ae:e6:4e:9f:df:af:cd:bf:ac:a1:eb:
                    0e:41:68:d5:75:c2:e3:2f:4e:7e:b6:de:d9:76:50:
                    eb:b8:fc:3b:70:69:e0:cd:19:a2:89:0d:56:32:9b:
                    f0:41:e4:ee:aa:be:eb:f1:c1:c3:29:58:51:a3:b1:
                    76:fe:7b:68:6c:25:39:c5:62:7f:23:4a:03:72:18:
                    ad:45:20:02:ce:1d:6a:e2:c2:fe:f6:f1:e8:7e:cc:
                    d4:e5:9c:ef:87:de:1d:22:73:cb:38:fa:7f:6e:cf:
                    58:04:dc:10:ee:fd:b2:8b:4d:8f:40:95:01:26:11:
                    02:07:ff:2d:65:a9:80:b4:50:eb:c1:f4:6f:f5:92:
                    b9:8d:64:58:43:a7:18:90:96:cc:00:bd:76:36:cc:
                    f8:40:4e:e1:38:20:7e:03:e1:60:9f:82:97:19:dd:
                    86:a9:9d:51:87:34:0b:b0:a0:8c:ce:a5:29:3a:36:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2C:AD:FF:8F:87:6A:94:DA:CB:B0:3F:8D:05:30:72:34:0E:6A:0E
            X509v3 Authority Key Identifier:
                keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/YSyt_4-HapTay7A_jQUwcjQOag4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.36.0/22
                IPv6:
                  2a0e:1bc0::/33
                  2a0e:1bc1::/34
                  2a0e:1bc4::/35
                  2a0e:1bc5::/35
                  2a0e:1bc7::/35

    Signature Algorithm: sha256WithRSAEncryption
         51:88:28:29:0f:92:12:ab:cc:46:cc:98:62:8d:5b:6e:1b:cd:
         80:99:10:ac:87:97:9b:7d:94:33:27:cc:4d:18:6d:a6:11:dd:
         d2:11:27:f3:59:cf:60:10:f4:2d:08:12:89:72:9a:97:f6:f6:
         c3:83:cd:30:49:af:a1:de:47:9a:35:18:84:58:96:70:21:58:
         bf:05:13:52:eb:25:f1:88:0a:a4:1d:d9:03:80:b0:0c:9b:1b:
         86:ea:d4:66:c1:e1:98:68:37:c3:da:af:9b:09:8c:a8:da:7f:
         55:67:bb:3a:09:6f:df:da:12:6d:34:a8:df:7a:b6:3b:8a:88:
         d9:c7:9d:30:da:04:08:9b:5a:6b:23:5e:e0:fb:ed:82:0e:44:
         f9:20:e9:c3:79:df:8b:65:1f:42:97:95:36:fc:b4:05:51:cf:
         18:84:03:7c:44:a8:55:3d:46:f9:70:86:24:f3:23:1f:a9:44:
         c8:6a:82:88:fd:bf:0a:01:df:91:ab:72:22:c9:bc:8a:c5:5b:
         db:db:a6:f7:19:28:ca:c9:3b:ca:ed:3d:58:be:7f:8e:ad:20:
         7d:81:e3:70:7b:62:a2:8c:c6:30:3b:ab:e7:d1:05:b9:2f:39:
         9d:26:90:74:10:1d:24:0c:c5:36:5a:88:a8:f3:58:92:60:6f:
         18:97:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----