Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/0e7TTsCcKsoUWyvGYj2oMyN4oQ4.roa
File:                     0e7TTsCcKsoUWyvGYj2oMyN4oQ4.roa (raw, json)
Hash identifier:          1Yojz8DTkVP5kz8WKLSYDEcZkqc+Of6RZOtCHsRu9eg=
Subject key identifier:   D1:EE:D3:4E:C0:9C:2A:CA:14:5B:2B:C6:62:3D:A8:33:23:78:A1:0E
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       37DDAFD9
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/0e7TTsCcKsoUWyvGYj2oMyN4oQ4.roa
Signing time:             Sat 01 Jan 2022 14:58:51 +0000
ROA not before:           Sat 01 Jan 2022 14:58:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        195.182.218.0/23 maxlen: 32
                          2001:7f8:42::/48 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937275353 (0x37ddafd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Jan  1 14:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1eed34ec09c2aca145b2bc6623da8332378a10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:28:5c:34:ec:73:91:67:7b:fd:66:d7:0b:
                    8e:ac:a8:e7:19:62:d2:3c:01:23:e2:e5:91:08:b8:
                    ed:bd:f3:0f:c1:e0:c3:32:97:df:70:2c:b5:23:0f:
                    c6:68:bd:58:cb:99:68:d8:c7:3b:cf:bc:1b:97:f5:
                    b7:60:56:6c:db:a0:49:8b:17:26:4c:e0:28:28:13:
                    1e:e4:71:65:18:9a:50:91:9d:ed:d6:63:96:f1:49:
                    0d:ae:90:fc:46:c8:52:20:40:54:74:c5:cd:f9:f4:
                    fb:e5:7b:df:6b:45:3e:26:13:ca:cd:5f:8f:ef:9f:
                    fc:23:96:7a:9d:92:93:71:7f:93:ef:5b:de:e3:9b:
                    22:81:33:51:db:e3:f0:3e:be:79:52:d6:77:e7:9e:
                    4a:d1:e3:97:45:a3:9b:bf:51:7d:e6:70:10:4e:4b:
                    91:4d:ea:fb:4d:7f:ca:8a:dc:13:1d:d8:2e:e7:65:
                    7a:de:e2:a0:58:e9:2b:d2:df:cf:2b:b1:20:0d:e3:
                    74:d4:23:af:c1:72:ec:56:22:fa:07:f0:6e:11:34:
                    5f:f9:e1:1a:93:93:0f:55:29:32:3c:c5:e5:60:60:
                    13:d1:f2:ec:b6:63:59:27:46:7f:70:50:59:81:5a:
                    8d:89:42:8c:cb:95:c7:08:47:39:b8:ac:0d:a8:04:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:D3:4E:C0:9C:2A:CA:14:5B:2B:C6:62:3D:A8:33:23:78:A1:0E
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/0e7TTsCcKsoUWyvGYj2oMyN4oQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.218.0/23
                IPv6:
                  2001:7f8:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:96:7a:9e:08:66:b4:5e:5b:0e:25:99:a4:b6:70:8e:27:
         f6:2d:82:51:43:ea:b4:8e:c0:a7:8c:2f:72:23:13:e3:b5:d8:
         ff:95:8a:fb:59:92:c3:ca:92:c8:66:7e:9f:11:93:45:20:60:
         48:0f:14:1a:b4:2c:9d:f6:7e:32:00:b0:ad:44:c4:84:00:fd:
         15:4f:0a:8b:7e:0c:1f:7e:6c:e9:80:3c:2e:06:bc:e4:3e:54:
         f1:20:d0:38:4e:32:b7:6e:31:13:fe:70:1b:f0:66:46:40:39:
         39:d8:82:92:ba:3d:37:7e:c0:3f:fe:2d:13:28:4b:fa:a8:c1:
         fa:74:be:8a:88:a9:cb:ab:2e:1d:f5:b2:6b:94:58:fc:1f:41:
         c7:7a:bc:46:62:6f:2a:d9:a4:13:b8:70:71:47:4d:a8:70:1a:
         05:8f:9f:f3:c6:0f:9c:3a:96:01:a9:9a:5a:23:ff:33:eb:28:
         60:c6:c8:e9:8f:a1:71:87:4c:f2:eb:94:33:a9:47:5d:56:4b:
         2a:9a:97:12:d1:bc:92:28:43:a1:89:01:44:4f:63:e8:2f:c5:
         ff:98:4e:68:fa:8a:14:43:c1:35:7a:6f:a9:f6:1d:5e:aa:c4:
         15:63:11:7c:5d:18:05:af:e2:d4:40:b4:8c:c1:a2:d4:8c:d1:
         78:6b:d6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----