Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/jnQ9z4n5S65iTsSUaYJJdqnGJts.roa
File:                     jnQ9z4n5S65iTsSUaYJJdqnGJts.roa (raw, json)
Hash identifier:          v550NMfIQzsgbRcHN2E7hPWZg1t7UvnjOrS4ZiKYVcE=
Subject key identifier:   8E:74:3D:CF:89:F9:4B:AE:62:4E:C4:94:69:82:49:76:A9:C6:26:DB
Certificate issuer:       /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial:       0201743D
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/jnQ9z4n5S65iTsSUaYJJdqnGJts.roa
Signing time:             Thu 20 Jan 2022 11:20:47 +0000
ROA not before:           Thu 20 Jan 2022 11:20:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208712
IP address blocks:        45.87.236.0/23 maxlen: 23
                          2a06:7a80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33649725 (0x201743d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
        Validity
            Not Before: Jan 20 11:20:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e743dcf89f94bae624ec49469824976a9c626db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:e7:cc:53:59:9d:51:70:81:cf:69:cc:c1:
                    0f:16:f5:00:d5:1d:aa:5c:22:9a:f5:d0:a6:d9:42:
                    30:67:60:ff:c1:c7:fe:98:10:0f:e1:8d:b3:0d:95:
                    ac:a8:b7:d7:66:f4:17:10:79:f9:06:9c:c7:2e:3c:
                    3b:4a:4a:e3:60:a7:bd:78:ca:a4:65:de:dd:20:2c:
                    be:9f:fc:fe:f0:94:2c:7e:2c:f7:dc:99:db:7d:4c:
                    af:5b:f0:3f:97:4c:bf:f4:32:45:28:ad:c6:da:30:
                    5d:ee:ba:ed:98:ad:d4:07:c7:22:48:19:1b:c1:36:
                    85:16:71:b6:c1:66:92:0f:9f:3d:14:18:d4:b9:6d:
                    37:e6:f0:b0:74:ca:ef:01:b4:e8:2f:81:86:ff:df:
                    0a:7e:d2:a3:04:ff:ab:30:d7:48:4f:b6:23:79:82:
                    51:1a:50:5c:6a:11:11:df:9d:f2:09:05:5c:55:3a:
                    1a:1b:a0:41:c0:4a:82:10:64:78:d8:89:d0:a4:58:
                    ba:d0:f2:c4:22:d1:73:f5:21:3b:dc:bd:d1:4f:8f:
                    8b:2b:25:26:6e:46:11:c2:8c:bf:59:c3:d1:ca:a4:
                    c5:fa:c0:84:6c:d6:66:91:86:09:a8:f5:e4:6e:20:
                    0e:bb:b2:c8:03:89:ab:9a:e1:3e:ad:20:88:41:db:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:74:3D:CF:89:F9:4B:AE:62:4E:C4:94:69:82:49:76:A9:C6:26:DB
            X509v3 Authority Key Identifier:
                keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/jnQ9z4n5S65iTsSUaYJJdqnGJts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.236.0/23
                IPv6:
                  2a06:7a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:d1:e7:e5:7f:9a:ec:fd:2b:14:12:a1:a7:8a:35:e6:31:24:
         c3:0a:d0:79:0e:d0:94:03:72:ff:74:28:27:5c:9f:6b:e3:a2:
         5f:26:27:fa:91:80:a2:38:7c:86:34:fd:4b:22:47:ae:5a:61:
         bb:29:85:fd:48:b5:a2:ff:49:7b:ab:78:ca:20:93:ab:de:f8:
         34:c4:9e:83:1c:79:6f:03:15:e7:5e:ca:70:e1:c6:38:bf:ae:
         6b:54:48:2c:6f:78:06:81:08:16:67:c2:75:8d:f9:98:f3:5a:
         48:62:67:9e:42:66:ca:f7:1d:c7:91:4c:18:e9:d3:7d:5b:92:
         e8:ae:07:3b:b3:a7:43:a1:05:50:6c:7e:15:96:86:0b:51:fa:
         ba:8a:cc:12:f3:f0:c7:36:14:2c:98:1e:33:c5:12:a3:c1:10:
         1c:1a:db:80:30:58:ce:f9:29:f8:b3:1a:24:9e:98:17:37:a7:
         5a:39:86:14:9c:df:27:c9:01:60:7d:55:7f:2b:aa:fc:22:57:
         e7:ab:6c:92:9d:f0:db:ad:b0:85:08:3f:7e:fe:7d:88:65:95:
         83:e5:b3:aa:72:8a:a4:d6:07:c1:55:c9:7d:08:05:9e:21:9f:
         66:72:b9:63:4c:15:c5:44:b4:40:57:3a:e6:bc:43:3b:72:76:
         e6:d8:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----