Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/7VE_l65iqZohJkchh-LSoJFvqmw.roa
File:                     7VE_l65iqZohJkchh-LSoJFvqmw.roa (raw, json)
Hash identifier:          ySbotichlz/KPDBqaFijRAcpvuCdHfcTl1Y9ctb3Jgk=
Subject key identifier:   ED:51:3F:97:AE:62:A9:9A:21:26:47:21:87:E2:D2:A0:91:6F:AA:6C
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       0A7A2755
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/7VE_l65iqZohJkchh-LSoJFvqmw.roa
Signing time:             Sat 01 Jan 2022 04:52:55 +0000
ROA not before:           Sat 01 Jan 2022 04:52:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52204
IP address blocks:        176.118.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175777621 (0xa7a2755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Jan  1 04:52:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed513f97ae62a99a2126472187e2d2a0916faa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:15:70:4d:79:87:47:0d:49:44:bc:87:6d:
                    8f:9c:e8:8b:4b:03:0f:3d:2d:87:69:92:db:75:5d:
                    c5:70:d7:1c:57:1d:21:1c:14:78:7f:f0:17:10:de:
                    af:54:e0:e2:e1:23:6c:a5:20:d9:7a:03:b5:fa:b2:
                    1d:f3:33:31:25:fa:56:12:cf:96:eb:c5:25:0e:61:
                    f0:af:2b:58:67:97:3a:34:9d:8b:dd:1d:23:38:82:
                    c2:95:aa:82:35:1f:78:de:cc:c6:ea:d1:9b:a0:d5:
                    30:32:ec:ed:94:1d:a3:ab:27:0c:a6:0b:a7:99:3b:
                    c7:f1:43:95:0e:49:1e:91:e9:12:7b:ed:84:12:72:
                    87:fc:dc:97:eb:0a:21:17:d1:c7:9a:55:bc:a7:ca:
                    80:1c:41:a3:cb:69:90:2c:d7:74:38:d7:55:01:7d:
                    eb:3f:38:a8:a8:43:94:f2:87:16:bc:bc:d2:e2:1c:
                    53:95:a3:1b:f4:df:69:10:c9:5e:36:cd:06:e3:6c:
                    4a:09:8c:3f:e4:fb:4b:22:27:c1:57:90:6a:47:e2:
                    d9:c8:09:ee:55:6e:2f:99:a7:56:6a:ea:fe:f8:ed:
                    73:1e:c2:e9:df:bc:1b:96:96:95:52:14:32:7c:eb:
                    37:f5:6c:08:20:90:65:e8:ff:73:f2:99:b8:b6:29:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:3F:97:AE:62:A9:9A:21:26:47:21:87:E2:D2:A0:91:6F:AA:6C
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/7VE_l65iqZohJkchh-LSoJFvqmw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:24:fb:16:6a:06:54:36:f8:4a:00:fe:70:e1:11:b6:4d:
         b8:b1:fa:93:3a:fa:69:57:0a:e4:a9:b4:dd:69:b1:3e:3c:5f:
         19:99:48:86:53:f7:8e:93:d0:08:44:a1:a9:c5:45:f4:5d:db:
         63:f7:5c:e5:78:58:f4:f6:db:63:44:e5:5b:87:87:72:a2:53:
         0e:26:0c:4f:27:6a:c3:36:5f:06:21:3f:d1:b0:70:db:84:47:
         02:c4:6a:b8:30:ea:c4:bd:7e:7e:8d:70:03:79:cb:46:ae:0e:
         df:cd:a8:66:b8:c0:9c:1b:07:3c:fa:6b:f9:50:1e:f5:b5:a5:
         24:ad:c9:82:11:40:ce:7c:3a:49:a4:b9:f7:33:14:e4:67:1e:
         2f:cb:66:1b:d1:6f:48:5e:76:7c:1e:6f:f9:29:64:ca:64:e7:
         cb:03:80:83:92:7d:eb:87:c7:df:d6:aa:55:0d:21:18:ce:f0:
         a2:e7:c4:61:82:4a:07:c9:d2:6b:fd:26:9a:86:53:79:a7:88:
         2e:7c:b0:a9:96:ef:58:0b:3f:a7:82:2c:8c:34:a6:02:f5:ce:
         c8:8b:d5:42:83:a6:58:b8:ab:01:7b:d2:65:3b:b2:a0:7f:82:
         d4:e1:f4:00:d6:a4:6c:58:6d:78:9a:7f:96:3d:14:5b:18:79:
         01:ea:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----