Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/1-Jnp8m-CBLZ-Kn_oe-ZgtGlNqB8.roa
File:                     1-Jnp8m-CBLZ-Kn_oe-ZgtGlNqB8.roa (raw, json)
Hash identifier:          3GojFiUGzcs8tceBiwkk7r0S/xZWOr7M7bOhdYhT3XY=
Subject key identifier:   F8:99:E9:F2:6F:82:04:B6:7E:2A:7F:E8:7B:E6:60:B4:69:4D:A8:1F
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       06363521
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/1-Jnp8m-CBLZ-Kn_oe-ZgtGlNqB8.roa
Signing time:             Sat 01 Jan 2022 10:01:24 +0000
ROA not before:           Sat 01 Jan 2022 10:01:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398826
IP address blocks:        31.22.110.0/24 maxlen: 24
                          2a02:7080::/48 maxlen: 48
                          2a02:7080:1000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104215841 (0x6363521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: Jan  1 10:01:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f899e9f26f8204b67e2a7fe87be660b4694da81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:24:5b:01:da:d2:ba:55:38:83:5f:94:53:
                    1a:c4:85:b8:0c:12:d2:a9:8b:ca:eb:ee:84:55:0a:
                    a3:1a:a4:af:58:9f:35:aa:b2:59:04:58:2c:06:d1:
                    9f:1f:b9:a3:2d:50:e9:6a:85:34:f3:ce:cd:4d:1a:
                    43:eb:2f:5f:47:a5:11:e8:ae:3f:61:f1:97:7d:d1:
                    4d:80:57:60:c9:1c:fc:44:31:3b:72:50:49:d4:07:
                    86:3b:8e:90:39:9e:bf:4a:6f:e1:64:f1:f1:43:c9:
                    34:4f:93:da:51:9a:55:8c:9c:db:b9:b9:6d:67:af:
                    dc:d0:ef:bc:3a:af:7f:f1:d8:e1:ae:71:4f:76:0c:
                    42:0d:0e:db:7e:9e:dd:cf:15:b4:59:c0:b7:a4:7b:
                    27:96:90:4a:96:2d:04:81:3e:22:93:29:44:2b:4e:
                    00:20:60:cf:0f:27:4c:2a:f5:0e:be:19:67:e8:03:
                    4c:f2:8a:cd:0a:98:b5:9d:89:d6:80:21:3b:ea:46:
                    a3:6a:b0:5b:4c:a7:ad:a2:4c:e0:3a:ea:89:2a:f9:
                    13:1b:0f:f3:4e:7c:9d:70:68:26:67:74:b9:1f:62:
                    d7:a8:76:87:05:c6:37:b8:49:ea:a0:df:fb:ea:97:
                    48:77:f4:41:f3:29:5e:2d:35:08:86:60:83:b8:a3:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:E9:F2:6F:82:04:B6:7E:2A:7F:E8:7B:E6:60:B4:69:4D:A8:1F
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/1-Jnp8m-CBLZ-Kn_oe-ZgtGlNqB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.22.110.0/24
                IPv6:
                  2a02:7080::/48
                  2a02:7080:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:2b:93:e6:24:45:1b:26:1f:97:36:e8:eb:e4:c2:1a:9f:
         65:a9:8f:1b:f9:fa:5b:56:f4:3c:a8:f9:20:b4:f5:d7:92:36:
         44:a0:c7:c8:24:4c:90:91:3e:9d:4d:d6:c7:66:39:ef:ae:10:
         80:e3:2f:e0:4e:99:af:13:32:de:35:0a:47:44:6a:44:db:f1:
         61:d2:b4:15:ed:bf:9e:94:79:be:31:a2:f6:e1:2e:1d:fc:cc:
         90:47:d2:98:09:8b:de:94:b9:2b:df:03:4d:c5:a1:e8:07:72:
         7d:1d:35:73:de:99:28:08:bd:0a:d6:c1:a7:6a:14:b2:28:8e:
         2f:c1:01:42:da:aa:8d:a6:0a:6e:9f:2a:8f:46:0f:f4:62:4d:
         00:b3:b0:56:12:3e:43:5b:be:1b:ec:1a:dd:e1:43:d9:9b:93:
         10:d6:e8:dc:4a:67:70:1a:58:5e:f1:66:ca:f3:a1:53:8e:f1:
         7b:99:ba:11:d3:b8:c3:c9:01:85:a2:8a:64:72:ff:b3:42:eb:
         a3:12:c7:52:8d:48:85:e5:72:69:d7:a0:ca:46:38:e3:d0:51:
         a3:22:0a:16:b8:e5:05:41:7f:0f:08:51:b4:1e:ac:ba:47:a5:
         2d:b4:ee:23:e1:bb:9b:49:91:5c:89:15:49:3d:30:e1:e2:8d:
         40:a8:96:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----