Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/yIh3H0tso1BoZvIygtca9qvIAGM.roa
File:                     yIh3H0tso1BoZvIygtca9qvIAGM.roa (raw, json)
Hash identifier:          Ne/8zVdJKdLvFeLAgK/PfzYhEjf2tKDoPUlu/B+hoVQ=
Subject key identifier:   C8:88:77:1F:4B:6C:A3:50:68:66:F2:32:82:D7:1A:F6:AB:C8:00:63
Certificate issuer:       /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial:       0C5D2939
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/yIh3H0tso1BoZvIygtca9qvIAGM.roa
Signing time:             Sat 01 Jan 2022 04:58:05 +0000
ROA not before:           Sat 01 Jan 2022 04:58:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52092
IP address blocks:        46.149.112.0/20 maxlen: 20
                          46.149.120.0/24 maxlen: 24
                          46.149.121.0/24 maxlen: 24
                          2001:67c:3b4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207431993 (0xc5d2939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
        Validity
            Not Before: Jan  1 04:58:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c888771f4b6ca3506866f23282d71af6abc80063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a6:5a:29:2d:cd:2b:5f:f6:78:45:09:1f:d9:
                    e8:77:2b:6d:90:ef:d8:52:13:6f:a5:d3:6b:74:df:
                    51:95:b9:fb:78:f8:a1:9b:08:8c:f0:55:a8:eb:21:
                    56:f9:fd:7d:65:76:8f:9c:fc:3b:68:22:b9:73:7f:
                    3d:57:c6:d5:ae:e6:9f:93:67:04:c4:31:db:ba:48:
                    7c:64:2c:02:7e:90:01:49:da:27:e1:e4:50:0a:b0:
                    ab:45:61:ed:74:de:91:7c:9a:81:45:0f:83:5e:9b:
                    17:f0:5f:4a:3d:69:30:18:38:fb:3f:be:75:b2:2c:
                    c5:ba:80:3a:8c:a2:9a:5d:dc:a8:6f:db:7b:89:97:
                    88:38:43:af:50:85:8f:40:2a:eb:19:44:29:78:ce:
                    85:eb:fc:cb:e5:53:c6:28:8e:e6:c1:30:6d:31:2f:
                    b2:69:aa:3c:e4:42:17:8a:60:d4:62:3f:34:ff:21:
                    0f:a8:29:a2:a9:96:a6:37:ee:16:02:d8:8a:fe:b0:
                    94:5e:16:09:39:b3:b5:e9:88:7f:b0:3d:3b:53:35:
                    40:1b:d8:68:47:bb:97:45:6f:25:b5:e4:ad:49:96:
                    5c:a1:18:4a:63:7b:71:19:77:fd:bf:cb:8c:98:7d:
                    99:03:d5:91:9c:54:9b:ad:58:1f:4c:6e:fd:9e:6d:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:88:77:1F:4B:6C:A3:50:68:66:F2:32:82:D7:1A:F6:AB:C8:00:63
            X509v3 Authority Key Identifier:
                keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/yIh3H0tso1BoZvIygtca9qvIAGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.149.112.0/20
                IPv6:
                  2001:67c:3b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:78:f8:2c:cf:07:e7:3a:2a:eb:e3:64:03:f8:8c:1a:8e:
         63:b1:39:22:10:45:aa:24:b2:76:6b:ef:6b:dc:c2:8c:b0:1d:
         cf:5f:53:a8:a8:47:9a:af:25:3e:f7:5c:2d:9a:7f:72:12:8c:
         74:bf:65:7a:a8:66:46:04:88:64:9e:d2:b1:07:c4:87:52:19:
         8c:83:57:a5:d5:77:42:03:6f:ce:cd:f3:13:88:54:57:15:56:
         72:02:e4:fc:66:25:37:0d:b1:cf:5a:8a:c8:e2:1b:6a:b0:eb:
         5b:6f:c1:ee:fe:7c:30:80:56:f4:ef:60:cf:3a:06:a2:83:61:
         a8:d1:3d:c8:b9:df:d8:cf:eb:cd:1d:1d:28:84:66:40:d3:8e:
         a8:04:be:94:8a:c3:7b:3e:ac:32:d9:f2:ea:de:4a:4a:5b:c8:
         e4:9c:be:0f:6f:fb:d1:e8:35:6a:04:73:ff:81:e3:a0:b1:22:
         69:35:c7:8b:7f:a1:11:aa:fd:35:d9:77:07:92:77:6e:55:3d:
         0d:85:9d:b3:ef:9d:65:fd:b4:f7:12:f6:24:e3:7c:c1:da:16:
         4e:0f:f9:1e:85:68:a6:81:f9:6d:d2:07:a6:73:8b:1b:ca:8b:
         a6:21:64:17:bb:39:d4:01:e6:45:b9:a1:1c:b1:e7:fc:7e:00:
         bb:ca:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----