Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/t-T-tfPymUBHeaqmZFD5Hajx5bQ.roa
File:                     t-T-tfPymUBHeaqmZFD5Hajx5bQ.roa (raw, json)
Hash identifier:          0Y5wvWlBCaTpqdT6Xv5fnT/drSRLfXUONxpP3KyMUXA=
Subject key identifier:   B7:E4:FE:B5:F3:F2:99:40:47:79:AA:A6:64:50:F9:1D:A8:F1:E5:B4
Certificate issuer:       /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial:       014E5A99
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/t-T-tfPymUBHeaqmZFD5Hajx5bQ.roa
Signing time:             Fri 24 Jun 2022 05:46:20 +0000
ROA not before:           Fri 24 Jun 2022 05:46:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        185.94.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21912217 (0x14e5a99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
        Validity
            Not Before: Jun 24 05:46:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7e4feb5f3f299404779aaa66450f91da8f1e5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f5:d5:a1:3a:bb:7d:89:25:be:a2:0c:81:c8:
                    8f:85:49:01:15:b7:3d:04:ba:be:02:0c:59:8e:45:
                    a0:f8:6b:b7:34:d9:93:e4:88:7c:04:97:11:ab:b5:
                    4f:4f:3a:cf:e8:94:93:8d:de:a6:6f:18:98:1d:77:
                    ee:95:f9:5a:90:8b:8e:c4:61:11:e7:67:49:71:01:
                    be:92:0f:a3:08:e2:39:3a:5f:c5:24:0e:9e:4a:cb:
                    2e:49:84:e5:b8:2a:a3:3d:5d:85:b8:cd:61:93:e1:
                    91:49:fd:23:af:17:34:3f:53:eb:68:00:bb:55:bc:
                    25:88:be:62:61:e2:96:a7:b6:05:93:84:c7:27:ce:
                    63:4b:7b:36:63:87:35:5c:5a:1c:d0:b1:7e:bf:45:
                    bd:df:6d:9f:57:41:d1:c1:8d:b4:1e:79:a6:9f:ae:
                    8b:b9:df:e0:b7:2b:c7:e3:c2:25:93:62:0f:9f:2f:
                    55:ef:c8:83:f4:a0:06:01:ba:29:10:93:20:e9:a9:
                    8e:6c:b0:87:d3:49:d0:4e:ea:5b:af:74:7a:21:cc:
                    1e:cd:b0:55:48:1f:d2:1c:02:a2:30:ae:b3:1b:1d:
                    dc:4f:6d:69:6b:3c:4c:b7:45:c9:9d:85:6d:77:2a:
                    1a:2d:51:37:b6:43:a3:4b:3d:10:a3:0b:67:11:aa:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:FE:B5:F3:F2:99:40:47:79:AA:A6:64:50:F9:1D:A8:F1:E5:B4
            X509v3 Authority Key Identifier:
                keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/t-T-tfPymUBHeaqmZFD5Hajx5bQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:73:df:7e:86:ec:89:0e:3c:36:bf:e0:26:93:20:3c:89:
         d1:d0:72:74:60:22:e7:8e:a3:e3:fc:84:92:f0:80:9e:93:c9:
         94:18:e0:3f:e1:88:15:0a:0f:85:45:2e:ad:8c:6a:4c:79:f3:
         a9:9a:6c:e3:b6:59:90:1d:71:c6:a7:cb:b3:b3:ca:fa:92:a6:
         cb:5e:9e:3f:c2:4d:26:dc:4c:27:69:ee:a1:ef:22:bf:0d:0f:
         5f:5d:29:86:70:97:8c:51:ac:66:1b:8b:1a:81:3f:f9:c3:a9:
         8a:2a:48:3c:01:c3:20:3d:9e:07:39:35:72:1c:81:9a:07:5f:
         46:63:fe:37:68:3f:e8:97:71:d4:5d:18:bd:06:1d:5a:1b:2f:
         4b:1b:66:18:f4:34:4a:1f:d2:10:23:e8:2d:d7:04:a5:f8:76:
         b1:ef:50:cd:22:c8:5b:d3:90:db:74:b5:bb:53:14:92:d0:d3:
         d3:97:45:91:ca:cf:8b:0e:a2:ec:f5:6f:bd:2c:1c:d6:1b:16:
         98:20:dc:44:06:c5:5d:a7:31:9c:0f:74:fd:62:84:5e:56:5d:
         95:6b:94:4d:d5:63:82:93:06:0b:98:7c:69:ae:a4:51:28:7d:
         cb:fb:99:d6:63:4a:2a:4e:40:c4:34:b1:11:93:4e:54:cd:57:
         89:bd:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----