Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/CO6S1UaIhas97-oz7vIozklCyI0.roa
File:                     CO6S1UaIhas97-oz7vIozklCyI0.roa (raw, json)
Hash identifier:          2UquavxjSoIs40FMk7e38fouZZwtMahYWIeulxiV8+I=
Subject key identifier:   08:EE:92:D5:46:88:85:AB:3D:EF:EA:33:EE:F2:28:CE:49:42:C8:8D
Certificate issuer:       /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial:       05314C37
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/CO6S1UaIhas97-oz7vIozklCyI0.roa
Signing time:             Sat 01 Jan 2022 06:02:10 +0000
ROA not before:           Sat 01 Jan 2022 06:02:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207139
IP address blocks:        185.169.115.0/24 maxlen: 24
                          2a01:8787::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87116855 (0x5314c37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
        Validity
            Not Before: Jan  1 06:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08ee92d5468885ab3defea33eef228ce4942c88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:d3:2f:92:77:db:30:22:f5:b3:9d:f3:02:
                    9e:cc:ac:a1:66:a7:db:8a:33:31:25:46:43:3f:32:
                    95:0f:da:66:23:f9:db:11:28:1c:1e:62:3d:03:d8:
                    57:4a:16:85:aa:c9:1b:f7:b8:b5:06:79:b5:25:86:
                    b5:3c:e5:d3:eb:15:c3:66:a5:2b:1e:1a:3d:bd:2b:
                    e4:10:3d:ec:e4:df:cf:b2:18:5c:37:da:b6:4e:dd:
                    36:12:c2:cb:ac:d6:1e:ad:8c:b8:8a:6d:7a:46:26:
                    14:18:6a:7e:4c:fd:8d:75:86:11:9e:03:46:a9:aa:
                    02:38:d1:3d:72:f3:f0:db:dd:4c:f8:40:d7:f7:53:
                    56:b5:5e:32:e3:df:86:4c:aa:17:a3:32:c6:83:04:
                    ba:62:14:ab:15:2f:46:49:0d:4d:d0:4d:50:48:35:
                    2f:76:f9:1a:8b:2a:c6:fd:be:f6:dd:6f:1b:ef:b9:
                    bd:cb:31:c2:74:af:bc:a1:70:c1:c4:eb:6c:7e:8b:
                    15:71:5b:c7:33:38:d9:ad:4c:93:42:1d:dc:50:95:
                    c0:08:00:3d:48:26:60:bb:8a:c6:03:3f:f8:4b:33:
                    77:61:eb:01:ac:ef:24:2a:ae:b6:8d:d3:d0:fe:af:
                    13:21:d6:2e:bf:4e:de:85:b0:1a:07:ff:35:88:27:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EE:92:D5:46:88:85:AB:3D:EF:EA:33:EE:F2:28:CE:49:42:C8:8D
            X509v3 Authority Key Identifier:
                keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/CO6S1UaIhas97-oz7vIozklCyI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.115.0/24
                IPv6:
                  2a01:8787::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:52:d2:12:a3:82:40:3e:74:f0:b8:fc:d8:1e:53:4e:90:
         0d:c0:06:d9:39:86:4c:46:90:03:ea:bc:4f:74:b8:0c:6c:78:
         ea:b5:94:34:20:36:b3:63:ab:0f:7e:a4:f1:2b:b8:62:0b:3e:
         54:78:b8:4d:c4:03:6a:61:54:ca:cf:7e:ce:d7:4d:42:51:6d:
         34:9a:11:65:71:61:8f:70:7c:77:a0:7a:f2:74:ae:4f:4a:bf:
         17:1a:3b:e4:ae:f2:25:a8:1d:58:4f:6e:4f:f8:05:70:d2:7f:
         4a:d9:bc:10:5c:aa:7d:89:69:23:35:49:c0:86:4d:0d:89:b9:
         2b:72:fd:30:27:a4:55:e9:de:45:db:88:26:02:96:c8:47:1b:
         b8:3a:2a:34:25:0c:a7:37:90:e8:4c:06:be:fc:26:2e:7a:7f:
         60:93:9f:41:13:6f:a0:a9:d1:8d:05:18:9b:32:10:4f:79:bb:
         8b:55:f8:f0:77:db:46:a9:74:e9:b2:53:53:61:78:ce:d3:f8:
         d3:13:6f:3f:7b:7b:83:fb:ed:cf:5f:e6:12:85:e2:49:84:b4:
         93:23:d1:0c:60:f6:95:b3:3c:be:2c:f6:ac:1f:a8:c3:a8:8c:
         cb:f3:a9:34:b9:ec:e5:ce:27:c6:fa:65:e3:9d:ff:14:30:71:
         2e:e3:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----