Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/1-_JDqKRsJqunJAvcZ5vHqZUOu7o.roa
File:                     1-_JDqKRsJqunJAvcZ5vHqZUOu7o.roa (raw, json)
Hash identifier:          gSuCTOEvN6s+3wtw75W5y4rYstwRmaQjU87CtbeSb0k=
Subject key identifier:   FB:F2:43:A8:A4:6C:26:AB:A7:24:0B:DC:67:9B:C7:A9:95:0E:BB:BA
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       04A06138
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/1-_JDqKRsJqunJAvcZ5vHqZUOu7o.roa
Signing time:             Sat 01 Jan 2022 11:53:51 +0000
ROA not before:           Sat 01 Jan 2022 11:53:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211037
IP address blocks:        185.21.134.0/24 maxlen: 24
                          2a04:4480::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77619512 (0x4a06138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: Jan  1 11:53:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fbf243a8a46c26aba7240bdc679bc7a9950ebbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:a7:fa:7e:ba:f4:2a:f3:83:e2:f1:c2:8e:
                    e8:56:32:c3:68:df:09:86:f2:0e:be:63:18:f5:5c:
                    5d:53:bd:51:9d:4f:31:98:f7:d1:89:74:aa:34:bd:
                    93:8f:28:6e:74:73:df:09:18:75:cc:d1:5c:c3:f3:
                    62:98:55:13:57:1b:ca:f7:ab:77:dc:dc:62:af:4a:
                    60:3b:1c:40:c1:0f:10:b4:dd:ac:ae:df:5b:44:73:
                    da:8c:18:ba:26:32:7c:60:ff:f4:32:c2:4e:bd:8c:
                    ed:f4:7a:ca:92:a7:76:9b:19:6f:60:56:36:90:fb:
                    16:8a:66:1e:08:71:a9:b6:96:19:e5:d4:10:ea:87:
                    d8:e0:35:df:3b:63:01:3f:a4:94:8e:88:aa:df:4e:
                    99:30:4f:20:1f:55:dd:fc:7d:c6:f1:03:3f:7c:68:
                    a3:f6:54:ee:2b:a1:2c:e9:48:8d:56:11:42:5a:12:
                    ff:56:e3:70:67:f2:7e:96:95:4f:c6:9f:b5:02:e7:
                    c5:9d:17:d9:3c:bc:85:b7:88:35:48:25:a1:f0:26:
                    4c:02:9a:c5:02:93:7f:60:1a:bc:3c:f4:e0:b9:4e:
                    8a:9d:95:35:0f:19:cb:20:96:5c:f9:64:07:8e:ab:
                    62:f0:58:43:91:aa:02:e7:3d:95:a2:36:7f:85:78:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F2:43:A8:A4:6C:26:AB:A7:24:0B:DC:67:9B:C7:A9:95:0E:BB:BA
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/1-_JDqKRsJqunJAvcZ5vHqZUOu7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.21.134.0/24
                IPv6:
                  2a04:4480::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:84:e5:58:10:c3:33:4b:98:77:a6:63:59:e7:33:fd:5d:e3:
         25:5a:69:8b:37:57:a9:a3:38:9d:4e:fb:cb:f4:91:46:fb:72:
         b3:9a:c5:af:95:96:b5:27:aa:ac:59:dd:e5:4a:7b:9e:cb:b8:
         e9:b1:0a:29:be:06:d8:37:11:0c:dc:3a:d1:34:b6:9f:12:a0:
         09:94:db:fa:65:2d:c7:25:d9:50:80:99:bf:24:19:ef:aa:1b:
         a6:01:9b:1a:31:96:44:4a:0f:ae:ce:c2:4e:e7:e6:df:c6:bd:
         0d:6f:b1:89:5a:d2:20:12:d0:08:8d:80:6c:1e:9e:a9:86:db:
         fc:58:94:38:3c:3e:fe:2f:8d:da:32:2f:f7:4a:6e:0b:66:9b:
         73:28:fc:c6:f2:c6:2d:71:75:09:16:29:fd:45:75:89:9c:01:
         fd:fd:03:6b:09:3c:92:4a:83:3a:9a:b4:7f:2c:75:e3:12:97:
         e3:f2:2f:22:a4:4c:dd:49:1d:17:ef:49:6d:ac:29:45:7d:5e:
         ed:f1:c8:57:ed:ce:6e:a4:0b:a1:13:35:6b:72:a1:9e:ce:ef:
         47:e0:f0:55:79:d8:20:f0:a7:03:49:06:6c:3f:79:71:24:e5:
         61:40:b7:09:cd:8a:77:14:9a:59:e7:6e:22:0b:6a:78:d7:eb:
         7c:2e:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----