Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-FuANKvud6OtKRvrF2u3lFCNSlY.roa
File:                     1-FuANKvud6OtKRvrF2u3lFCNSlY.roa (raw, json)
Hash identifier:          vuMevNivv4YR8Ou2p54fdycjDWv5qL8eOyBkndneD80=
Subject key identifier:   F8:5B:80:34:AB:EE:77:A3:AD:29:1B:EB:17:6B:B7:94:50:8D:4A:56
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       01833AF4CAD12E232C659EABA3AB68ECF0F9
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-FuANKvud6OtKRvrF2u3lFCNSlY.roa
Signing time:             Wed 14 Sep 2022 07:44:24 +0000
ROA not before:           Wed 14 Sep 2022 07:44:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42337
IP address blocks:        178.239.154.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:3a:f4:ca:d1:2e:23:2c:65:9e:ab:a3:ab:68:ec:f0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Sep 14 07:44:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f85b8034abee77a3ad291beb176bb794508d4a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:91:a3:a1:47:c7:b6:a5:6f:33:bc:7e:1b:
                    30:98:08:90:9e:f5:a7:dc:12:ea:fc:9b:3d:74:ea:
                    34:60:55:38:cc:65:ba:f6:fd:6e:6c:41:23:e7:3a:
                    23:20:23:17:74:5c:33:db:4c:81:5a:c9:9f:72:08:
                    f0:14:f0:13:dd:51:af:b0:40:21:3b:23:5e:28:fc:
                    51:f7:61:7d:2f:58:58:08:24:2b:08:fe:f3:dc:45:
                    86:6e:2d:ac:be:3f:92:e2:4c:8e:1e:93:b5:ab:be:
                    0a:71:88:bd:6d:60:e3:2c:f2:15:b8:00:7a:98:60:
                    f3:d0:97:9f:61:58:24:5a:17:43:c0:3c:27:89:96:
                    11:3c:a4:97:6f:28:b7:65:f2:f1:d9:69:92:ca:70:
                    66:2a:38:2c:6c:19:a8:ed:39:6c:69:b1:fc:59:27:
                    90:ac:db:79:7d:d2:01:83:ef:e5:b8:1a:92:b4:2e:
                    e5:61:c7:ad:7d:c3:85:3f:4f:fe:b7:22:f6:50:69:
                    04:8f:18:97:c0:1c:76:71:b1:6d:1c:9e:df:f6:19:
                    cf:4d:c1:7e:e4:62:f4:5a:b8:15:3a:52:2d:a6:0e:
                    b3:37:fc:04:6b:7a:e2:86:ac:d4:b5:c8:29:68:32:
                    2d:49:cf:5f:dc:99:8f:d3:35:77:a8:74:b0:47:ec:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:80:34:AB:EE:77:A3:AD:29:1B:EB:17:6B:B7:94:50:8D:4A:56
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-FuANKvud6OtKRvrF2u3lFCNSlY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.239.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:47:a6:fe:45:32:7e:ea:6e:dd:29:5a:34:a1:a9:e2:4e:
         ba:a9:0c:31:95:fe:a5:d2:b3:f3:7c:01:7d:60:36:28:6e:92:
         34:d3:c4:a4:80:65:19:5c:7c:85:72:3c:6d:7b:a7:ab:9b:ac:
         2d:4a:8f:10:75:e9:3b:f5:59:9a:c9:70:66:32:a4:8e:84:26:
         e7:d0:f2:49:d9:22:2d:98:6e:b9:ab:9a:ef:3c:80:0c:5f:66:
         98:75:2b:79:d9:78:71:f3:73:da:6e:dd:ec:56:5d:a7:82:43:
         c8:e1:4d:86:bb:a3:2f:55:8e:95:c1:90:46:68:96:63:51:45:
         d3:19:49:4a:82:ed:cd:fc:bb:3b:a8:90:57:1d:79:e6:03:db:
         1b:16:82:99:62:fb:0d:a4:fd:83:88:ff:ff:c4:56:c1:8c:d8:
         ce:bc:95:52:68:e6:fa:59:f9:1f:90:ab:e1:4a:27:11:75:91:
         f1:00:89:88:bb:f3:2e:0f:57:3e:69:35:d0:01:55:0a:c5:0a:
         ab:82:9b:1b:f1:ca:79:63:4f:b3:81:ed:88:9d:e5:e8:15:56:
         16:a0:a9:95:05:c7:fa:48:14:8a:40:13:90:e0:34:45:f2:3f:
         1c:b9:da:4a:5b:15:c5:1d:fc:f0:9b:64:bf:d2:51:60:e2:66:
         b6:81:59:be
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYM69MrRLiMsZZ6ro6to7PD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjIwOTE0MDc0NDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODViODAzNGFiZWU3N2EzYWQyOTFiZWIxNzZiYjc5NDUwOGQ0YTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgmRo6FHx7albzO8fhswmAiQnvWn
3BLq/Js9dOo0YFU4zGW69v1ubEEj5zojICMXdFwz20yBWsmfcgjwFPAT3VGvsEAh
OyNeKPxR92F9L1hYCCQrCP7z3EWGbi2svj+S4kyOHpO1q74KcYi9bWDjLPIVuAB6
mGDz0JefYVgkWhdDwDwniZYRPKSXbyi3ZfLx2WmSynBmKjgsbBmo7TlsabH8WSeQ
rNt5fdIBg+/luBqStC7lYcetfcOFP0/+tyL2UGkEjxiXwBx2cbFtHJ7f9hnPTcF+
5GL0WrgVOlItpg6zN/wEa3rihqzUtcgpaDItSc9f3JmP0zV3qHSwR+wuswIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhbgDSr7nejrSkb6xdrt5RQjUpWMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvMS1GdUFOS3Z1ZDZPdEtSdnJGMnUzbEZDTlNsWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTIvODQ0ZWViLWNkZjEtNDdmMS1iY2ZhLTk4OTE2Njg4MTk2
OS8xLzhUVXpPWjlWNjFMbXNpQU1mSzVDY3JkTlpHUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbLvmjAN
BgkqhkiG9w0BAQsFAAOCAQEAHcRHpv5FMn7qbt0pWjShqeJOuqkMMZX+pdKz83wB
fWA2KG6SNNPEpIBlGVx8hXI8bXunq5usLUqPEHXpO/VZmslwZjKkjoQm59DySdki
LZhuuaua7zyADF9mmHUredl4cfNz2m7d7FZdp4JDyOFNhrujL1WOlcGQRmiWY1FF
0xlJSoLtzfy7O6iQVx155gPbGxaCmWL7DaT9g4j//8RWwYzYzryVUmjm+ln5H5Cr
4UonEXWR8QCJiLvzLg9XPmk10AFVCsUKq4KbG/HKeWNPs4HtiJ3l6BVWFqCplQXH
+kgUikATkOA0RfI/HLnaSlsVxR388Jtkv9JRYOJmtoFZvg==
-----END CERTIFICATE-----