Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/j-AYESXzmEkS8pnJMjCWT-9jw7Y.roa
File:                     j-AYESXzmEkS8pnJMjCWT-9jw7Y.roa (raw, json)
Hash identifier:          1MMGtmFPll2B3m/yNoZsEzGWFJhlkjzhgX0A7nkFT5k=
Subject key identifier:   8F:E0:18:11:25:F3:98:49:12:F2:99:C9:32:30:96:4F:EF:63:C3:B6
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       0183E6772922B445B917CC1D64799A06D139
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/j-AYESXzmEkS8pnJMjCWT-9jw7Y.roa
Signing time:             Mon 17 Oct 2022 15:01:52 +0000
ROA not before:           Mon 17 Oct 2022 15:01:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50007
IP address blocks:        45.8.186.0/24 maxlen: 24
                          45.8.204.0/24 maxlen: 24
                          85.208.104.0/24 maxlen: 24
                          2a09:f180::/48 maxlen: 48
                          2a09:98c0::/48 maxlen: 48
                          2a09:9940::/48 maxlen: 48
                          2a09:4040::/48 maxlen: 48
                          2a09:1140::/48 maxlen: 48
                          2a06:3b00::/48 maxlen: 48
                          2a09:6a80::/48 maxlen: 48
                          2a09:40c0::/48 maxlen: 48
                          2a09:9740::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e6:77:29:22:b4:45:b9:17:cc:1d:64:79:9a:06:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Oct 17 15:01:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fe0181125f3984912f299c93230964fef63c3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:a7:22:2b:d3:d3:50:fe:9f:c0:77:50:2d:
                    e2:ba:2f:b3:ee:4d:f9:4c:de:50:1d:dc:7e:4f:d4:
                    f5:7c:8b:46:a0:a8:2b:36:d8:95:70:4c:8d:1c:e8:
                    cb:a5:d4:90:ca:07:26:8e:c7:04:e5:3b:19:91:31:
                    ec:87:c3:c5:09:f2:26:2a:a2:31:15:85:2f:9b:00:
                    dc:6e:ff:66:f0:68:17:c2:e7:ac:b3:2a:d5:b3:45:
                    83:10:1a:5e:8c:bd:82:9e:0b:19:b6:1b:df:a4:01:
                    e9:f3:9f:e0:c1:f4:c6:36:a7:14:2a:a0:3d:56:12:
                    88:44:98:fc:1d:bc:e2:b9:6f:d9:6f:92:1a:e9:f7:
                    9d:95:59:07:09:4d:fb:a6:eb:b9:25:c8:5e:8e:61:
                    59:b4:dc:86:cd:88:e6:4c:f4:c9:f0:77:16:8a:15:
                    ed:98:72:a2:9d:ca:9f:bd:24:62:f2:56:76:71:99:
                    66:47:9b:81:6f:92:c4:25:28:95:82:28:ef:6f:0e:
                    0d:36:47:68:58:a3:13:fa:42:ab:5c:3a:2a:d4:0d:
                    20:63:c1:47:45:66:3f:d9:86:08:00:0e:56:52:a5:
                    1e:e4:50:4e:39:15:e0:af:6f:a7:04:83:91:17:21:
                    b1:14:6c:33:dd:15:39:ee:53:38:f4:ad:a7:89:47:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:18:11:25:F3:98:49:12:F2:99:C9:32:30:96:4F:EF:63:C3:B6
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/j-AYESXzmEkS8pnJMjCWT-9jw7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.186.0/24
                  45.8.204.0/24
                  85.208.104.0/24
                IPv6:
                  2a06:3b00::/48
                  2a09:1140::/48
                  2a09:4040::/48
                  2a09:40c0::/48
                  2a09:6a80::/48
                  2a09:9740::/48
                  2a09:98c0::/48
                  2a09:9940::/48
                  2a09:f180::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:c3:b5:c1:13:c1:11:7a:62:d6:9a:4a:c8:03:05:dc:ae:
         80:15:45:8c:14:d1:9e:8c:d3:89:55:b0:b9:6d:bd:02:1c:91:
         cc:f4:17:71:01:ed:f0:15:91:16:50:a6:67:2d:b5:82:32:aa:
         ca:ce:84:ea:a3:df:ae:be:36:fa:52:de:31:35:89:3c:eb:21:
         b9:bc:d5:02:62:ab:1b:83:63:37:af:39:84:0b:45:db:78:6e:
         5f:ec:f2:85:6e:be:3b:a8:af:31:c5:35:52:2a:83:b2:e1:2d:
         b9:67:65:31:f0:6b:74:ac:5f:9a:cf:44:5a:0d:b4:69:d3:41:
         bd:1c:3b:64:b8:05:99:22:87:25:8b:9a:48:a7:5e:7d:15:59:
         f2:18:af:e9:48:e0:ac:b3:9a:81:f5:cb:c2:00:21:07:5f:eb:
         78:0d:5e:06:12:9b:89:ec:90:46:cf:ef:85:70:0f:84:cf:8f:
         77:e2:ce:73:b3:54:96:07:0d:b7:98:50:6f:3b:64:06:e6:c2:
         10:a3:87:80:90:55:97:72:65:63:aa:fb:bf:aa:75:65:0d:fd:
         64:2b:07:c3:4a:bc:b7:ec:3b:dc:77:0e:7a:4f:36:0c:14:65:
         35:18:79:d2:1a:bb:83:29:66:7b:2f:64:b3:31:31:22:fe:e2:
         cd:d7:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----