Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/No3ry5e_15LITCJa7NaiMy3d1DE.roa
File:                     No3ry5e_15LITCJa7NaiMy3d1DE.roa (raw, json)
Hash identifier:          S8iGpQs21RLNMSAGPKsorrGJa7zVwfkBLQ3NREwCEgc=
Subject key identifier:   36:8D:EB:CB:97:BF:D7:92:C8:4C:22:5A:EC:D6:A2:33:2D:DD:D4:31
Certificate issuer:       /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial:       01833193E694EE7B63B0F3B97BAF00B3444C
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/No3ry5e_15LITCJa7NaiMy3d1DE.roa
Signing time:             Mon 12 Sep 2022 12:01:59 +0000
ROA not before:           Mon 12 Sep 2022 12:01:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43065
IP address blocks:        185.140.116.0/22 maxlen: 22
                          2a07:1c80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:31:93:e6:94:ee:7b:63:b0:f3:b9:7b:af:00:b3:44:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
        Validity
            Not Before: Sep 12 12:01:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=368debcb97bfd792c84c225aecd6a2332dddd431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:93:f2:70:b7:1e:87:82:34:0c:42:ee:ff:
                    ee:89:3c:8a:a7:3c:cc:6c:df:39:a9:db:e6:8f:e1:
                    5c:2b:a3:8a:e1:a3:95:d1:65:d8:28:7b:0a:a3:38:
                    4f:cc:00:fd:40:97:0a:af:1d:7e:38:22:bc:aa:ae:
                    db:f0:f3:80:54:24:ed:7d:37:7d:99:dd:3d:f9:62:
                    9a:23:5a:04:27:f3:af:08:95:14:df:24:a3:7a:1f:
                    46:35:03:1a:a2:4d:92:f3:fc:b0:e6:78:38:a1:00:
                    51:5d:50:85:8a:e8:c7:47:dd:fb:5e:f8:7f:e1:40:
                    2c:25:24:81:91:5e:2b:46:76:35:73:68:45:ee:93:
                    7f:fb:fd:6f:15:66:5f:16:77:54:1c:ea:83:d3:a9:
                    eb:6f:42:1c:0a:4a:d3:fd:2c:a6:e9:e0:48:df:3c:
                    a9:94:f9:b9:b3:79:83:48:6f:b1:1e:67:9f:27:d8:
                    97:ab:45:c2:c6:e3:f8:76:8a:98:73:c3:1d:e3:f6:
                    31:5b:83:a8:c6:aa:69:5b:29:c7:45:e4:c5:b2:2c:
                    3a:f6:09:da:b6:d1:b9:ac:04:1a:39:ad:e8:05:92:
                    2a:72:c5:ae:32:1c:bf:f8:43:99:41:5c:3a:9f:3f:
                    22:a2:94:a3:70:c1:c7:a6:c6:de:b8:dd:1d:ed:eb:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8D:EB:CB:97:BF:D7:92:C8:4C:22:5A:EC:D6:A2:33:2D:DD:D4:31
            X509v3 Authority Key Identifier:
                keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/No3ry5e_15LITCJa7NaiMy3d1DE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.140.116.0/22
                IPv6:
                  2a07:1c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:eb:b9:eb:6d:18:57:15:60:f1:98:f1:be:3e:4c:7f:8e:
         cf:39:42:83:bb:1f:76:1f:7e:35:aa:ed:4d:7b:cf:ea:5c:87:
         a0:b3:d4:73:ac:76:70:8f:9e:76:12:45:7a:f3:fc:5a:23:a2:
         09:38:ba:34:3b:5f:25:79:cd:e4:d7:fa:7f:d8:40:c7:07:ce:
         a5:6e:b1:23:b9:95:97:03:09:d6:05:df:53:f2:a9:79:f3:64:
         59:ed:04:15:16:8b:fa:1e:4a:4a:bd:a1:77:1c:cc:19:fe:f1:
         94:87:37:32:9a:03:cc:6a:1d:24:05:84:0d:3d:c7:db:a8:bb:
         1e:8c:66:eb:15:ea:43:b1:e8:15:a0:fd:c6:e2:20:4e:a7:f5:
         d1:35:6e:e8:4c:1f:76:ba:1d:99:ab:3b:47:cf:58:d6:c4:56:
         0f:7d:3b:95:7b:9d:1d:91:fd:e0:75:1a:14:ef:a7:64:b1:84:
         c2:3e:22:33:54:98:de:26:ea:a5:0d:df:6c:6a:fe:e9:51:4e:
         41:c5:8d:80:01:be:2d:1d:c4:39:98:20:7e:3a:63:90:6d:c0:
         12:78:aa:3d:bc:29:4f:da:63:cc:66:6e:a5:fd:d7:67:94:30:
         76:c5:91:73:bc:0b:4b:14:5a:59:4c:bd:d6:11:b8:1c:44:4c:
         1d:82:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----