Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/05gPQkMh0tNAvuLrQk-csdVaBLc.roa
File:                     05gPQkMh0tNAvuLrQk-csdVaBLc.roa (raw, json)
Hash identifier:          L7E5vIvFJC/oVbmc0gI8xcCSYjDkxUMpJXbC7QCne7c=
Subject key identifier:   D3:98:0F:42:43:21:D2:D3:40:BE:E2:EB:42:4F:9C:B1:D5:5A:04:B7
Certificate issuer:       /CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
Certificate serial:       6CC851
Authority key identifier: 77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/05gPQkMh0tNAvuLrQk-csdVaBLc.roa
Signing time:             Sat 01 Jan 2022 03:51:58 +0000
ROA not before:           Sat 01 Jan 2022 03:51:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7129169 (0x6cc851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
        Validity
            Not Before: Jan  1 03:51:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3980f424321d2d340bee2eb424f9cb1d55a04b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:e8:85:b8:47:ae:4c:04:db:1e:47:3d:5d:
                    9d:52:88:b9:88:6d:d2:68:53:b0:f2:ed:73:f4:6d:
                    e0:0e:ed:2f:79:54:41:c4:87:f2:56:87:08:8a:07:
                    45:46:68:32:14:07:d9:0f:52:bd:30:9c:a6:bb:90:
                    d5:5d:87:b0:3d:8d:35:05:61:8b:eb:e4:60:19:c3:
                    da:3d:de:09:d3:01:13:1d:2d:56:32:4e:da:e9:80:
                    00:2b:6c:46:62:e6:e8:84:d3:f1:d4:4f:08:46:68:
                    e8:15:3d:c6:0c:82:0b:fd:ec:f6:ea:80:85:7c:b2:
                    dc:47:21:b1:2e:ab:be:c3:f2:e8:e8:fd:86:93:6e:
                    02:4b:e6:3b:73:9e:10:ca:31:cd:85:80:b8:17:bb:
                    0e:83:a8:a9:0d:dd:c1:4f:a2:a3:64:ec:13:75:26:
                    b6:89:07:d8:bf:cd:1f:63:80:64:ad:44:7a:70:4a:
                    2e:f3:d8:a6:e3:fe:f9:75:3c:62:3d:a1:de:73:55:
                    a8:88:21:49:4f:11:82:b5:17:de:f4:b3:91:0c:e9:
                    54:15:a3:74:60:44:60:41:cd:f9:fe:3f:03:90:95:
                    61:09:61:22:94:0e:8b:fe:91:a5:d2:53:cb:55:31:
                    00:ac:a5:46:2a:6c:25:ad:2c:a3:e8:f5:19:fa:11:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:98:0F:42:43:21:D2:D3:40:BE:E2:EB:42:4F:9C:B1:D5:5A:04:B7
            X509v3 Authority Key Identifier:
                keyid:77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/05gPQkMh0tNAvuLrQk-csdVaBLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:27:ad:14:3b:27:ab:c2:d7:92:3f:6b:27:bf:c1:82:c3:
         ff:80:cc:25:36:1b:da:87:0b:90:08:cf:53:f1:3f:35:b7:d6:
         d4:32:89:4c:29:e0:9c:ef:99:2f:4d:99:4c:14:97:c6:0e:8f:
         19:21:15:82:63:3f:5b:17:69:c0:05:81:6a:17:b5:9a:cc:a5:
         df:d4:ab:45:e2:d0:fa:15:9c:6d:77:6b:43:6d:d0:14:cb:14:
         22:77:42:b6:c0:7b:99:e8:30:0d:e2:f2:d3:f8:15:cb:44:09:
         3d:20:16:84:5d:35:df:8a:24:be:5f:09:b6:4d:ea:1d:8b:05:
         cb:5a:de:41:f5:61:55:35:69:68:7e:98:de:94:f8:28:10:e4:
         90:77:b1:fe:20:f4:7f:bc:43:92:77:d8:a3:c5:a8:e3:2d:20:
         b2:47:01:dd:02:9a:b9:3f:2f:1c:b8:c1:2b:6c:7f:cf:61:89:
         45:5e:a2:6b:9a:a2:d5:f6:2f:ce:10:dd:e8:60:20:98:77:2f:
         59:18:95:df:5a:9e:29:fb:aa:79:99:11:2f:b3:49:3e:ee:c4:
         a2:df:ad:05:ff:07:56:64:ed:54:75:a6:53:bd:6f:7d:3e:8f:
         ff:57:54:fe:07:19:bb:da:dc:65:40:c4:e5:87:fa:d3:6d:78:
         3c:60:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----