Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/1Ev2EkzyllBhqNqrlSl1wqVegyU.roa
File:                     1Ev2EkzyllBhqNqrlSl1wqVegyU.roa (raw, json)
Hash identifier:          5SpudaTzSkSvvSpSjQZtvBzKxDsJzoPZ+LP6wv2Ztj0=
Subject key identifier:   D4:4B:F6:12:4C:F2:96:50:61:A8:DA:AB:95:29:75:C2:A5:5E:83:25
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       35165A71
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/1Ev2EkzyllBhqNqrlSl1wqVegyU.roa
Signing time:             Wed 22 Jun 2022 12:57:33 +0000
ROA not before:           Wed 22 Jun 2022 12:57:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        62.179.128.0/17 maxlen: 17
                          2001:67c:794::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890657393 (0x35165a71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Jun 22 12:57:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d44bf6124cf2965061a8daab952975c2a55e8325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:b6:9c:28:46:31:d1:b6:77:2b:b5:85:f6:
                    17:c9:dd:ca:ef:21:10:98:20:bf:6d:24:0d:8d:b4:
                    7f:c5:72:bc:45:f5:e0:93:26:fd:77:39:d1:82:74:
                    1b:38:41:ff:6a:da:7a:4c:66:e4:b6:73:50:09:93:
                    7e:db:8b:f8:c8:f1:ef:c0:56:12:f5:67:9b:88:3a:
                    19:63:8b:2c:79:8b:d2:f9:db:24:1f:d0:32:eb:f6:
                    b4:fd:e1:92:30:55:08:13:be:0e:cd:25:bc:76:91:
                    9b:91:1d:ed:c5:da:5b:5c:47:66:be:b8:5a:05:19:
                    ff:02:aa:aa:57:35:4b:58:fb:1d:2f:1d:00:43:1d:
                    c0:bd:8a:e8:81:36:95:0c:ce:33:4c:b3:15:70:bd:
                    8f:87:97:1c:8c:b7:b4:2b:c6:ac:ab:3b:c8:60:de:
                    0d:92:b7:17:ca:b6:27:d4:b2:94:60:b8:f8:04:95:
                    c4:a7:33:10:97:fb:bc:d1:22:78:71:7d:f0:d8:23:
                    c8:fa:a8:9c:6e:90:7d:c6:d6:ae:68:94:06:b3:94:
                    78:a6:a6:d2:31:ca:38:d7:ec:9b:73:ae:2d:d0:d4:
                    3f:6b:96:61:c5:9b:63:73:7c:f0:61:db:11:39:4b:
                    89:42:84:e4:ad:14:0d:7d:b5:d0:4e:e0:60:1c:38:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:F6:12:4C:F2:96:50:61:A8:DA:AB:95:29:75:C2:A5:5E:83:25
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/1Ev2EkzyllBhqNqrlSl1wqVegyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.179.128.0/17
                IPv6:
                  2001:67c:794::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:72:c4:94:95:87:58:3e:40:69:1a:9c:e6:3b:80:6a:e1:18:
         5b:39:7a:9d:52:d8:b5:f6:ca:0c:39:86:19:13:fc:7c:dd:c6:
         5f:53:d3:57:20:65:c7:15:1c:74:e5:d1:4d:4e:40:d8:cd:d2:
         80:ca:bd:ef:9e:cb:c5:54:52:11:7a:ce:3e:9d:32:ca:2e:5c:
         e7:d6:4b:5a:57:ef:0b:01:9b:c4:c3:5a:ae:d9:63:fc:7e:cb:
         85:47:6d:dd:20:d0:57:18:7d:9b:d6:89:ea:c8:e6:38:1c:9f:
         87:b4:89:54:e7:98:54:b1:39:af:5c:ee:69:07:50:2d:93:52:
         1c:98:59:e4:cb:1f:c4:2e:4d:b7:f6:33:c9:82:8f:86:03:0c:
         c0:ec:0c:a0:d1:9d:f2:82:01:12:23:f5:c8:91:be:4d:a7:bb:
         4a:59:dd:7c:e2:7a:80:81:f0:12:14:80:f5:1f:54:1b:fe:a6:
         4e:88:b6:41:b3:4b:82:21:9e:e4:38:ad:c2:4a:e7:bf:82:cb:
         8a:21:9b:21:bb:90:11:88:e7:b3:83:8e:63:bd:81:39:de:fc:
         55:14:48:41:40:89:04:8f:89:75:31:d6:f2:c6:a3:bb:17:ce:
         c4:cb:95:b6:ed:72:36:ad:aa:15:9a:a9:3b:d5:0b:bb:67:a2:
         e1:21:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----