Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dlk5D6JktyzcZHTaa3bsdv1fBhI.roa
File:                     dlk5D6JktyzcZHTaa3bsdv1fBhI.roa (raw, json)
Hash identifier:          mYNIF6/OC+n3kjnUSbZeaD7FlvsQP+97D0/3Dd3aQQM=
Subject key identifier:   76:59:39:0F:A2:64:B7:2C:DC:64:74:DA:6B:76:EC:76:FD:5F:06:12
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       076E9968
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dlk5D6JktyzcZHTaa3bsdv1fBhI.roa
Signing time:             Sat 01 Jan 2022 00:50:36 +0000
ROA not before:           Sat 01 Jan 2022 00:50:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210118
IP address blocks:        45.154.61.0/24 maxlen: 24
                          2a0f:b100:100::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124688744 (0x76e9968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jan  1 00:50:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7659390fa264b72cdc6474da6b76ec76fd5f0612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:cf:dd:58:2d:38:d6:15:b5:2d:3b:53:e7:
                    88:a5:58:cd:15:3c:ca:e4:71:0e:9e:86:8f:1e:e6:
                    c5:f1:2e:83:01:93:0b:2a:11:4c:c8:d3:12:61:cb:
                    c0:de:2b:f8:36:79:a2:e8:c9:92:99:e2:8f:c6:e7:
                    3f:22:2c:20:a9:2e:3d:d6:4b:4d:b4:a8:da:2d:bf:
                    73:cf:c2:6d:f2:f4:bd:7d:5f:94:b7:a4:3c:cf:b3:
                    f9:e5:06:67:c9:60:8f:75:68:a5:fa:b8:f5:23:89:
                    87:23:d1:4d:2c:4d:ac:66:e0:f6:c6:31:63:41:87:
                    76:89:aa:f4:61:28:0e:60:f8:1d:f7:39:98:3d:0c:
                    04:7d:7a:50:29:13:54:d5:ef:11:ad:4f:8d:aa:6f:
                    dd:f0:46:3b:0b:a9:e5:0a:b5:d5:af:21:29:96:4a:
                    c1:59:70:d9:db:60:2c:16:db:53:65:44:15:a7:fb:
                    bb:1d:02:c2:a1:1a:49:b6:94:94:f9:33:a9:5e:79:
                    e8:7c:2f:20:6f:9d:5e:30:f4:37:d4:72:b4:14:1a:
                    98:ee:15:ec:77:f4:a8:5e:cd:60:26:8f:5d:97:e1:
                    a1:c2:d7:7a:5b:4f:b9:0c:ad:1d:dc:a7:50:f6:f4:
                    4f:01:8f:97:f7:48:8a:23:d9:4d:f7:f1:ff:ba:18:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:59:39:0F:A2:64:B7:2C:DC:64:74:DA:6B:76:EC:76:FD:5F:06:12
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dlk5D6JktyzcZHTaa3bsdv1fBhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.61.0/24
                IPv6:
                  2a0f:b100:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:1e:58:0d:0e:a8:d4:9d:4d:af:c9:1a:b1:03:c8:58:4f:
         41:f3:64:c8:96:4f:b1:c2:a5:bb:08:9c:79:bf:4a:f3:93:4d:
         e1:2f:f2:3f:44:e0:f0:08:23:e8:b7:a7:20:cd:44:b4:0a:d9:
         a0:d2:5a:fd:26:c3:c0:3c:82:9a:ad:b3:f6:5b:8e:6d:4f:a6:
         d6:35:1b:5a:27:25:21:12:8a:0e:c2:01:75:97:ff:a3:77:fb:
         91:c8:af:3a:fd:a4:de:11:24:77:66:d8:42:9b:a5:1d:38:ff:
         36:5d:72:50:8e:a7:62:ec:f0:ef:79:2e:85:c5:7e:dc:38:8e:
         84:10:7a:48:c6:79:4d:37:f8:cb:79:1a:da:9e:e2:0c:d2:24:
         fa:c1:93:d3:f1:ff:65:09:05:60:d7:75:76:65:bb:fd:7a:24:
         e0:93:83:7b:3e:ba:f6:aa:bf:8c:67:66:9c:fa:76:23:e3:d8:
         68:6d:15:e8:84:7d:db:30:ee:6f:96:e9:44:04:db:e0:d3:f0:
         1d:79:8b:97:b3:00:28:fe:42:95:f8:39:52:ff:20:ac:cd:fc:
         9a:7c:f9:be:53:0d:88:45:1f:a1:19:9d:30:28:32:54:ee:ef:
         cb:bd:9d:8b:be:d9:58:a6:cf:06:94:58:03:ad:3e:69:12:4b:
         b8:0a:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----