Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Y-s_SwYVyiGpef7M_yFsxmPdbrE.roa
File:                     Y-s_SwYVyiGpef7M_yFsxmPdbrE.roa (raw, json)
Hash identifier:          h3jma63hwkO1c+m286bpUdPt6A4dP1NBhSbvvUMdkBQ=
Subject key identifier:   63:EB:3F:4B:06:15:CA:21:A9:79:FE:CC:FF:21:6C:C6:63:DD:6E:B1
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       176C3B96
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Y-s_SwYVyiGpef7M_yFsxmPdbrE.roa
Signing time:             Sat 01 Jan 2022 09:54:07 +0000
ROA not before:           Sat 01 Jan 2022 09:54:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205972
IP address blocks:        62.228.238.0/24 maxlen: 24
                          2a00:1358:c002:5600::/56 maxlen: 56
                          2a00:1358:c100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392969110 (0x176c3b96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  1 09:54:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63eb3f4b0615ca21a979feccff216cc663dd6eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:c0:ed:53:5a:50:75:37:c5:f1:03:ba:66:
                    c1:66:3a:13:8b:fa:bf:a1:b1:59:4d:23:f2:bb:95:
                    83:b8:56:61:be:35:19:6e:6a:9e:97:ad:51:4e:4f:
                    ab:44:1b:79:62:d3:a7:d8:b7:36:c6:cf:47:03:46:
                    bf:d7:62:b1:a6:e5:e5:31:67:4e:c6:c5:05:18:fb:
                    84:1a:58:77:35:0e:7f:a0:9f:cb:b0:2d:b7:3c:90:
                    64:1d:12:89:53:94:82:f3:e6:2d:2a:fa:6a:ec:c0:
                    8f:04:d0:f5:74:c9:7c:86:e2:c4:65:3c:8e:c1:cf:
                    b1:0e:af:f9:4a:5e:9c:20:f7:a8:02:84:09:d5:8e:
                    2c:30:3d:02:bc:41:6c:b1:94:6c:63:33:fd:12:76:
                    d1:56:db:1f:ec:c3:a0:69:f7:e8:af:11:c2:1d:e0:
                    06:29:3d:e2:a5:69:93:26:c4:e3:eb:a7:7e:39:3b:
                    b7:28:02:d9:88:d2:5e:f1:c6:35:a9:4d:8b:a4:46:
                    30:d4:e0:1d:16:3d:58:82:f2:1b:02:ad:29:4f:a9:
                    0c:6e:d1:23:8f:5b:9a:3b:2e:3b:65:86:7f:71:72:
                    78:fd:73:f6:73:68:11:7f:6e:35:71:dc:ba:41:4c:
                    91:8b:0a:b2:24:c3:26:e4:3b:07:3c:08:3c:38:ab:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:3F:4B:06:15:CA:21:A9:79:FE:CC:FF:21:6C:C6:63:DD:6E:B1
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Y-s_SwYVyiGpef7M_yFsxmPdbrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.228.238.0/24
                IPv6:
                  2a00:1358:c002:5600::/56
                  2a00:1358:c100::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:23:3a:da:61:33:54:5f:e9:60:c9:78:fc:29:f0:49:93:
         9e:5a:aa:68:3c:93:1c:43:b3:4a:84:a6:b4:1c:97:00:c7:52:
         43:5d:8f:65:c9:7d:e4:11:36:97:fe:d8:f3:b0:0a:d7:d9:c2:
         80:8b:9d:9d:0c:b3:fa:2a:fa:b6:42:b1:00:dd:3f:33:5d:4a:
         ef:fb:a3:db:8c:fe:49:75:aa:fc:a9:b2:a8:24:c9:cb:ea:2c:
         71:58:21:4b:4f:ad:03:22:6b:b8:2b:20:36:63:dd:dc:1d:ac:
         7a:8e:ab:cc:c8:aa:07:53:d1:a1:be:2f:42:44:7e:30:3d:93:
         25:ec:4e:99:a3:70:be:a4:48:c6:86:4b:38:bb:2a:43:cf:61:
         b2:09:e5:f2:31:ec:23:f6:09:93:ed:45:74:2b:c6:1b:01:99:
         fb:7b:a7:fd:47:a5:a5:ce:99:b7:ea:8f:45:5e:32:13:21:04:
         29:4d:2c:9d:1e:9c:83:d8:f6:e6:09:a0:fd:d1:c7:71:b7:70:
         7f:58:6d:0b:b7:04:dd:ac:bf:78:15:6b:11:70:af:e9:b0:2c:
         8a:d3:e0:98:6c:74:36:aa:91:21:24:a3:8b:a8:7c:3b:2f:91:
         75:cd:ec:02:bf:b7:a3:b3:df:14:e3:f9:28:c9:e5:31:00:45:
         3f:a6:7f:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----