Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa
File:                     Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa (raw, json)
Hash identifier:          ytBT9jUPpZQXg2r6WNayOvAqWCadJVcZhzzU0hPi10Q=
Subject key identifier:   2E:2E:11:26:74:F1:15:07:0B:C9:4F:51:D8:6A:0C:50:7D:C3:B3:04
Certificate issuer:       /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial:       0DBFB56C
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa
Signing time:             Sat 01 Jan 2022 05:57:26 +0000
ROA not before:           Sat 01 Jan 2022 05:57:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204793
IP address blocks:        185.136.116.0/22 maxlen: 22
                          2a06:fc40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230667628 (0xdbfb56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
        Validity
            Not Before: Jan  1 05:57:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e2e112674f115070bc94f51d86a0c507dc3b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:f5:49:cb:71:3f:50:b7:24:f6:38:da:b8:
                    6e:e3:d0:fc:8c:96:65:27:58:bf:c8:6d:e9:8a:d5:
                    0a:a9:29:39:ff:bc:30:88:c3:09:9a:9e:cb:51:50:
                    9b:18:47:a4:0b:da:f6:28:17:07:41:ee:47:c6:dd:
                    16:62:b9:fc:f5:41:c2:a4:c5:49:89:90:b2:b9:1e:
                    3d:97:23:ba:a4:b3:40:2a:3a:87:de:09:bf:d7:e8:
                    23:b7:a6:04:9d:c6:dd:a4:9d:8b:b5:14:42:41:2d:
                    92:63:43:f3:18:3d:0c:49:bf:1f:c1:a7:b2:34:17:
                    6d:29:dc:49:40:b4:10:78:9f:14:d6:bf:06:b4:f6:
                    18:56:d0:b8:79:1b:76:3e:58:32:ce:d9:0b:a9:26:
                    82:52:a6:0b:51:46:e3:7d:10:42:67:86:ba:cc:e9:
                    69:04:a2:17:5a:de:30:51:8d:29:91:48:d3:05:98:
                    bc:ae:52:65:d7:1e:5b:ad:8c:d5:08:0d:1b:4b:05:
                    fc:23:88:0f:aa:aa:ad:80:cb:71:48:15:88:19:1d:
                    f8:77:eb:21:f5:d9:66:cc:dc:a4:52:77:f1:61:9d:
                    9f:63:5f:26:e9:64:44:4b:74:66:b6:e6:ca:53:ea:
                    be:17:c9:6a:08:b1:b8:20:68:0c:c8:86:13:0a:65:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:11:26:74:F1:15:07:0B:C9:4F:51:D8:6A:0C:50:7D:C3:B3:04
            X509v3 Authority Key Identifier:
                keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.116.0/22
                IPv6:
                  2a06:fc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:53:85:39:ba:9a:24:62:74:c9:21:fe:48:5e:a3:6d:69:
         53:68:7a:31:8e:41:17:06:82:9e:81:1e:15:b6:98:7a:c5:68:
         c7:84:02:bb:71:b9:3d:97:5b:4b:38:96:e0:e8:01:55:c5:00:
         69:06:df:31:9c:0f:7b:4f:dd:33:37:22:43:02:1a:b7:78:cd:
         72:e4:46:86:5a:4f:11:e4:ae:1e:28:3c:37:dd:e0:09:27:02:
         d9:e2:38:9d:75:6f:f0:a3:e8:24:46:f6:5e:31:b7:d7:7c:21:
         4b:ff:3d:0e:b1:bd:1d:cb:cb:a2:14:ac:83:dc:20:5a:5a:ad:
         27:73:65:3a:90:0d:65:8d:d3:87:f5:5e:55:57:d3:41:b3:1b:
         9c:d9:e7:b0:f2:77:5f:00:93:2a:15:12:a4:00:9a:45:43:ff:
         8a:5d:c5:27:dd:d6:cf:02:d0:e7:01:60:7c:70:b7:f1:c2:ba:
         03:b5:90:b2:aa:a0:df:cc:34:ec:02:c3:91:a0:1c:46:5b:ff:
         e1:71:4f:2b:ba:3f:80:79:dc:3a:9d:09:52:88:8a:4d:96:bd:
         b9:bb:6c:02:de:3f:8b:cb:cd:f5:0a:02:79:f4:11:eb:d6:2a:
         ee:33:09:14:f2:85:a7:34:47:4a:60:98:17:34:50:ea:e5:85:
         bc:89:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----