Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/d75L7GnyF2edr3EjyUcWbYtQl08.roa
File:                     d75L7GnyF2edr3EjyUcWbYtQl08.roa (raw, json)
Hash identifier:          LKlmimmWZmFgriP0+oej9MpEM0yV4Fo060RYC6ZykE8=
Subject key identifier:   77:BE:4B:EC:69:F2:17:67:9D:AF:71:23:C9:47:16:6D:8B:50:97:4F
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       1A5561E8
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/d75L7GnyF2edr3EjyUcWbYtQl08.roa
Signing time:             Fri 04 Feb 2022 12:09:13 +0000
ROA not before:           Fri 04 Feb 2022 12:09:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211588
IP address blocks:        45.83.205.0/24 maxlen: 24
                          2a07:e345::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441803240 (0x1a5561e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Feb  4 12:09:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77be4bec69f217679daf7123c947166d8b50974f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:cd:16:52:f4:5b:0a:96:e2:da:62:52:b6:
                    c6:f1:09:fb:55:d8:87:28:57:70:b0:f9:b8:51:24:
                    ca:92:b8:f9:f1:dc:ad:5b:33:bc:75:ec:15:20:df:
                    38:37:77:be:2b:41:51:ee:1c:88:ca:3a:35:21:67:
                    24:b3:14:77:45:a8:23:38:71:01:eb:83:01:61:93:
                    6b:c2:17:2e:b6:6a:27:55:0c:bf:87:39:5a:c8:b7:
                    4c:4f:cf:90:48:82:e5:37:5e:c4:b1:06:f5:9b:ae:
                    47:a8:41:50:da:ff:f3:66:d0:98:14:03:5e:c7:df:
                    5f:cd:46:b7:9b:30:4e:98:8e:10:aa:f7:80:af:00:
                    4d:7d:92:07:c3:9a:63:4e:68:d6:79:45:73:df:5f:
                    02:77:9c:2b:8e:12:0f:8a:a3:83:c4:72:45:29:6b:
                    62:81:67:4e:78:ad:ef:3f:df:da:99:9f:f4:2d:45:
                    49:d6:1a:a4:cd:e2:39:b2:3c:cc:14:6b:07:5a:65:
                    96:48:b9:fe:70:fe:bd:79:de:3e:1b:e3:3f:4e:cd:
                    2e:93:7d:97:aa:d6:4e:4c:fd:08:4e:5c:a1:d3:c0:
                    bf:0a:f2:36:69:9c:6b:3e:11:d1:4f:a9:de:ee:12:
                    27:c6:43:78:46:27:a1:0e:a1:99:b7:f1:01:c2:5f:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BE:4B:EC:69:F2:17:67:9D:AF:71:23:C9:47:16:6D:8B:50:97:4F
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/d75L7GnyF2edr3EjyUcWbYtQl08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.205.0/24
                IPv6:
                  2a07:e345::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:57:cb:3d:0c:a5:92:b0:84:a6:e0:e1:54:ff:7e:11:89:
         cc:df:9e:b8:a3:a3:14:dc:b8:89:a4:e4:e1:de:df:df:d5:ef:
         67:8a:84:09:ed:77:c7:14:38:db:39:7e:57:c0:23:89:94:71:
         6c:33:7b:63:04:85:e9:82:35:b3:e2:ca:b8:cd:00:b2:b1:84:
         fa:77:0e:b9:c3:71:de:94:d7:7c:87:59:ac:d1:63:1f:4e:a9:
         29:be:32:a4:6f:cd:77:d4:56:66:af:34:e3:d1:9d:7a:58:e1:
         35:d9:36:6c:56:5e:25:b8:a2:f6:b9:02:4a:9c:6e:0c:a7:51:
         b6:d3:e4:6f:52:9c:80:b4:ab:a5:07:72:ee:84:67:2b:0e:aa:
         28:c6:28:3e:79:7b:d8:72:3e:71:37:59:c8:35:2d:a5:1b:6a:
         be:3f:74:5e:95:2d:6d:fe:25:a5:c4:04:bb:8c:8b:37:76:fe:
         3d:84:be:66:f2:7d:a7:03:72:2e:c1:c7:65:be:a0:70:e3:78:
         21:2d:f2:d3:ab:15:6f:5f:aa:84:4e:29:99:07:56:34:b8:74:
         27:d0:2c:7a:f2:d9:e6:7d:c5:5e:49:f0:62:8b:1d:df:43:93:
         ac:6d:bb:83:c3:57:9e:ce:f0:ce:49:db:e1:07:41:a5:d9:c0:
         d5:24:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----