Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/1HPazCwlLlAWjXLHEbNuPqpwqSE.roa
File:                     1HPazCwlLlAWjXLHEbNuPqpwqSE.roa (raw, json)
Hash identifier:          zmyrAI0DIhkBL66m4em0XBHakC5FatKomi2OGaVxtG4=
Subject key identifier:   D4:73:DA:CC:2C:25:2E:50:16:8D:72:C7:11:B3:6E:3E:AA:70:A9:21
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       069CE1D5
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/1HPazCwlLlAWjXLHEbNuPqpwqSE.roa
Signing time:             Wed 19 Jan 2022 21:31:29 +0000
ROA not before:           Wed 19 Jan 2022 21:31:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207840
IP address blocks:        91.198.196.0/24 maxlen: 24
                          2a0f:8840:ffff::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110944725 (0x69ce1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: Jan 19 21:31:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d473dacc2c252e50168d72c711b36e3eaa70a921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:25:f2:ba:1f:7b:00:aa:0d:d0:af:91:51:
                    e7:0c:d6:30:76:01:8b:cf:66:4d:07:ee:f5:73:31:
                    a2:f5:54:36:99:33:23:ce:cd:25:14:8a:8d:a7:62:
                    6f:a1:09:0e:a9:58:2e:62:30:f5:92:ca:b5:da:27:
                    f4:af:c3:3d:a5:71:63:03:d7:68:90:05:e1:a3:5a:
                    e6:4b:c5:ad:a7:79:c2:b7:66:25:02:6f:a5:36:cf:
                    04:55:1f:6c:c8:5d:3f:f5:57:cb:f3:47:9d:78:ba:
                    d0:f5:9d:2e:32:96:6b:a7:d4:52:be:99:d5:1f:b1:
                    bb:9b:60:86:ed:e6:a7:f1:4e:5d:aa:c0:69:30:8c:
                    e8:32:af:2a:18:32:73:ce:7a:75:fc:ff:3d:58:61:
                    29:2d:42:89:6c:79:05:48:2b:52:38:0a:fe:ba:01:
                    a0:27:4e:e9:5c:15:ab:e6:ec:d6:bc:81:10:32:55:
                    73:66:f7:47:72:d4:e8:6f:83:72:aa:cf:72:44:25:
                    2a:7b:26:d6:80:07:8b:33:d7:35:a7:5d:bb:c0:94:
                    3b:4b:94:11:69:c8:a2:8f:a9:5d:a3:58:c6:f4:62:
                    2b:5b:aa:0c:d7:d2:80:0c:66:b0:ce:52:7a:05:9b:
                    0e:28:56:bc:fb:f5:fa:a5:33:c1:22:d4:40:ba:01:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:73:DA:CC:2C:25:2E:50:16:8D:72:C7:11:B3:6E:3E:AA:70:A9:21
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/1HPazCwlLlAWjXLHEbNuPqpwqSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.196.0/24
                IPv6:
                  2a0f:8840:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:d2:ae:5c:42:e8:e5:27:30:a3:2f:b1:60:1a:7c:e4:46:
         ea:7e:69:5c:d3:50:75:c5:b5:00:e6:91:ac:e6:d4:27:df:5a:
         30:f0:54:8a:82:95:c2:9b:84:a4:26:46:9d:29:4e:9f:ab:5a:
         a5:68:a5:a8:37:38:50:8d:79:0d:86:b2:69:49:99:6b:c1:d4:
         4c:f0:09:85:6f:7e:f9:a6:84:1e:13:48:1a:15:5c:cf:b1:3e:
         40:c2:a6:5a:c2:73:61:30:69:6e:c1:bd:8a:84:78:dd:68:5b:
         22:a7:c3:96:db:ed:fd:da:d7:ea:3a:4b:5a:8f:be:a4:27:b7:
         a3:00:bd:3e:c7:7a:af:bc:81:05:a2:de:6f:c0:bd:04:58:95:
         d1:b1:90:04:09:85:4a:d5:89:a5:45:2a:f8:6e:69:02:a1:08:
         09:95:3c:6f:0e:47:a0:97:f5:78:99:ca:a8:4d:8a:8e:6b:6d:
         57:6d:3f:14:90:d7:6d:14:6e:4a:5a:f4:c6:04:b0:6d:6e:36:
         6f:f4:ed:e9:b8:ed:ec:8f:3e:6b:69:07:cb:25:d8:18:fc:d6:
         b2:49:b3:e6:60:ce:e2:68:d3:f0:6c:dc:0a:8d:f5:1b:d1:d2:
         6c:74:62:ce:40:d5:0c:93:eb:b0:6e:75:4b:b0:86:66:73:52:
         91:8a:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----