Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/Ow4tNhqLTKyH-TBC67c8BPpjj9M.roa
File:                     Ow4tNhqLTKyH-TBC67c8BPpjj9M.roa (raw, json)
Hash identifier:          c/1RUwuvxuTidn0uZ6M41EPY7kC0pFB7eo6ju1ckC0k=
Subject key identifier:   3B:0E:2D:36:1A:8B:4C:AC:87:F9:30:42:EB:B7:3C:04:FA:63:8F:D3
Certificate issuer:       /CN=7a216261df2a50fc560487abedb9f83dc4530400
Certificate serial:       0100748D
Authority key identifier: 7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/Ow4tNhqLTKyH-TBC67c8BPpjj9M.roa
Signing time:             Mon 07 Mar 2022 17:31:21 +0000
ROA not before:           Mon 07 Mar 2022 17:31:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        146.19.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16807053 (0x100748d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a216261df2a50fc560487abedb9f83dc4530400
        Validity
            Not Before: Mar  7 17:31:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b0e2d361a8b4cac87f93042ebb73c04fa638fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:f6:92:87:54:47:51:eb:b7:2e:c4:37:e2:
                    67:de:91:4b:49:6e:ab:c9:af:8e:cf:e1:c6:62:99:
                    81:94:5c:9c:23:80:9f:b1:31:a1:34:f8:c7:83:6f:
                    bb:c2:e7:97:4b:35:b6:a8:fa:7c:e2:09:11:33:64:
                    8e:7d:87:3f:34:c5:a2:a1:c1:3a:5a:25:1f:46:5b:
                    8c:9a:3d:02:07:94:aa:3b:82:08:0a:f0:73:ba:4f:
                    e1:80:ad:8c:eb:eb:1d:a6:dc:65:31:4d:d0:19:e2:
                    a3:26:e0:69:f3:59:13:6b:e4:f7:69:22:2c:5a:11:
                    42:bf:f4:b8:43:aa:1d:9d:4d:e9:ad:f7:ed:2a:e7:
                    91:05:5e:18:1c:26:a9:76:b9:78:5b:26:80:08:c3:
                    de:38:7a:84:5e:9d:70:5c:a5:f8:b2:9a:97:f1:df:
                    e3:8c:70:d4:f3:9f:2b:f1:a6:16:b9:67:4e:80:ad:
                    1f:99:a1:33:a9:a6:84:c8:15:8a:c4:e5:a5:3f:a9:
                    66:da:5f:c1:39:ee:df:e8:86:2b:07:5c:10:f1:9f:
                    5f:8b:6d:cd:a5:3e:d3:0d:46:79:73:0d:c9:79:e4:
                    d5:67:c4:5e:8e:3b:65:fe:f5:df:3c:96:4d:a4:2a:
                    0f:64:59:2a:6b:26:33:15:83:0d:74:0c:70:6c:4d:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0E:2D:36:1A:8B:4C:AC:87:F9:30:42:EB:B7:3C:04:FA:63:8F:D3
            X509v3 Authority Key Identifier:
                keyid:7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/Ow4tNhqLTKyH-TBC67c8BPpjj9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/eiFiYd8qUPxWBIer7bn4PcRTBAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:02:91:65:98:6f:f3:c9:db:77:a7:3d:2c:55:3b:9c:53:67:
         ef:4b:28:33:37:b6:fe:2d:39:79:62:59:d3:c3:a5:39:18:ad:
         46:59:7b:6f:b2:c5:a1:6e:77:bb:d1:a0:1b:74:ec:b5:57:9e:
         8c:ac:21:e2:3e:fc:64:0b:ae:f9:2a:3d:c2:c7:8f:b0:83:63:
         4e:14:97:28:a4:19:93:bc:a5:8f:6b:fe:17:0f:a6:dc:9e:02:
         87:2c:a8:69:29:27:ac:63:ea:07:84:9a:f2:8a:ca:21:e2:de:
         92:1f:1d:27:90:04:0f:cd:ba:53:78:f4:98:a5:36:70:4a:59:
         33:d8:a1:12:a2:9a:2f:75:1f:64:62:05:bf:ed:d8:82:0e:40:
         e9:66:53:c4:2d:d0:0a:71:4b:88:69:91:e9:92:53:65:65:8e:
         3c:90:e3:ba:28:3d:7d:6d:a7:16:4f:18:55:36:0c:17:f5:10:
         a5:2e:60:1d:d7:d5:34:4d:e1:4d:8c:02:bb:64:f9:4d:97:be:
         32:02:a4:16:7d:43:e7:c3:d3:6e:81:84:c0:c9:ad:61:86:2e:
         55:96:f4:b9:b3:35:c0:0e:c1:1a:0e:5c:47:4c:d9:93:b9:6b:
         35:1d:f9:d5:8a:07:d3:33:a9:1a:2f:a4:92:3a:e4:c4:dc:30:
         c8:60:93:15
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQB0jTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTIxNjI2MWRmMmE1MGZjNTYwNDg3YWJlZGI5ZjgzZGM0NTMwNDAwMB4XDTIyMDMw
NzE3MzEyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2IwZTJkMzYxYThi
NGNhYzg3ZjkzMDQyZWJiNzNjMDRmYTYzOGZkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALmj9pKHVEdR67cuxDfiZ96RS0luq8mvjs/hxmKZgZRcnCOA
n7ExoTT4x4Nvu8Lnl0s1tqj6fOIJETNkjn2HPzTFoqHBOlolH0ZbjJo9AgeUqjuC
CArwc7pP4YCtjOvrHabcZTFN0BnioybgafNZE2vk92kiLFoRQr/0uEOqHZ1N6a33
7SrnkQVeGBwmqXa5eFsmgAjD3jh6hF6dcFyl+LKal/Hf44xw1POfK/GmFrlnToCt
H5mhM6mmhMgVisTlpT+pZtpfwTnu3+iGKwdcEPGfX4ttzaU+0w1GeXMNyXnk1WfE
Xo47Zf713zyWTaQqD2RZKmsmMxWDDXQMcGxNl9MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ7Di02GotMrIf5MELrtzwE+mOP0zAfBgNVHSMEGDAWgBR6IWJh3ypQ/FYE
h6vtufg9xFMEADAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VpRmlZZDhxVVB4V0JJZXI3Ym40UGNSVEJBQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvNTUxZDY5LTU3MjEtNDQ0OC1iMmQ3LTRhNWZjNGMwNWVlNy8x
L093NHROaHFMVEt5SC1UQkM2N2M4QlBwamo5TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
NTUxZDY5LTU3MjEtNDQ0OC1iMmQ3LTRhNWZjNGMwNWVlNy8xL2VpRmlZZDhxVVB4
V0JJZXI3Ym40UGNSVEJBQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT5zANBgkqhkiG9w0BAQsFAAOC
AQEAfQKRZZhv88nbd6c9LFU7nFNn70soMze2/i05eWJZ08OlORitRll7b7LFoW53
u9GgG3TstVeejKwh4j78ZAuu+So9wsePsINjThSXKKQZk7ylj2v+Fw+m3J4Chyyo
aSknrGPqB4Sa8orKIeLekh8dJ5AED826U3j0mKU2cEpZM9ihEqKaL3UfZGIFv+3Y
gg5A6WZTxC3QCnFLiGmR6ZJTZWWOPJDjuig9fW2nFk8YVTYMF/UQpS5gHdfVNE3h
TYwCu2T5TZe+MgKkFn1D58PTboGEwMmtYYYuVZb0ubM1wA7BGg5cR0zZk7lrNR35
1YoH0zOpGi+kkjrkxNwwyGCTFQ==
-----END CERTIFICATE-----