Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa
File:                     nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa (raw, json)
Hash identifier:          S6Rst56HQzpT2nRxSAiOtkHXlCmeQ/kv7soUfrygUKY=
Subject key identifier:   9D:60:24:50:A9:E3:D5:9F:ED:66:F3:DC:BB:18:0F:63:03:84:09:14
Certificate issuer:       /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial:       04A65DBF
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa
Signing time:             Sat 01 Jan 2022 08:56:58 +0000
ROA not before:           Sat 01 Jan 2022 08:56:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42487
IP address blocks:        185.173.200.0/22 maxlen: 22
                          2a0e:e080::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78011839 (0x4a65dbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
        Validity
            Not Before: Jan  1 08:56:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9d602450a9e3d59fed66f3dcbb180f6303840914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:cc:8e:be:1a:78:88:14:b0:13:2c:b8:10:
                    42:37:33:98:18:8d:57:42:8e:8c:7c:b8:84:17:ce:
                    bc:ad:21:ec:aa:4e:97:1c:8a:db:91:5c:7f:28:9a:
                    e7:11:c2:32:3e:08:e4:e7:65:c0:ed:50:bf:b8:95:
                    3b:4b:bd:83:21:0a:f3:f4:bf:fa:40:a0:bf:1f:0c:
                    f4:88:fe:21:23:d9:13:e6:f8:af:b4:1e:fa:6b:8a:
                    71:7c:2b:82:7c:24:cd:d7:53:dc:2f:d8:a6:6b:55:
                    05:3d:e3:9f:ed:5c:bb:27:eb:06:32:43:7d:31:53:
                    14:1d:83:a5:14:3a:db:7d:a3:e6:df:5e:61:fd:e4:
                    2a:f4:09:61:73:e9:ae:b4:d0:c4:7f:28:d6:4b:00:
                    8c:4e:84:ce:39:3c:cc:97:1a:ea:ab:24:99:7a:28:
                    b7:a3:29:5c:05:a4:ca:8c:78:cd:80:76:fa:43:ef:
                    39:07:37:54:94:ea:c0:e4:a4:56:23:f7:e3:1e:56:
                    22:7e:5e:50:ee:b6:6c:c0:df:db:89:8e:d6:80:fa:
                    cb:56:db:57:a8:9f:f8:7d:06:d0:09:05:72:cd:a2:
                    46:bb:6e:ab:09:91:5c:13:07:6f:27:21:21:30:20:
                    e6:34:ef:9c:9b:20:5f:da:99:41:93:d0:71:a4:a9:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:60:24:50:A9:E3:D5:9F:ED:66:F3:DC:BB:18:0F:63:03:84:09:14
            X509v3 Authority Key Identifier:
                keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/nWAkUKnj1Z_tZvPcuxgPYwOECRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.200.0/22
                IPv6:
                  2a0e:e080::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:85:7a:33:ef:b7:5b:9a:94:29:74:4a:64:22:99:d7:fa:67:
         12:de:1b:55:42:f4:d4:07:4c:5b:07:12:23:05:0a:e4:92:6a:
         42:24:95:27:a4:fd:20:93:8a:78:7c:f9:a1:3f:8c:1a:8e:27:
         83:f5:08:ae:b0:99:0c:88:43:8a:6f:02:f3:f0:ea:ac:2f:91:
         cd:77:74:b1:77:30:79:a8:43:9a:75:72:b9:7c:9a:4a:4d:c8:
         4c:62:d8:bc:fa:7e:39:07:3b:8c:6c:a1:7b:cb:4c:1c:04:cc:
         05:10:56:94:e3:36:bc:b7:68:e7:fd:5a:cd:fd:ba:ec:99:70:
         ec:52:54:3e:84:66:e8:f6:07:93:bb:fe:27:a5:c2:6b:a9:25:
         89:cc:df:d5:21:50:9b:cb:48:5b:3f:6e:0e:fa:64:6b:a2:39:
         85:ef:f3:ef:8c:de:48:c5:a6:6a:66:c5:0e:4d:af:31:ad:76:
         6b:08:11:56:9f:8a:a9:5d:92:16:e8:3e:fe:75:db:64:1c:62:
         9f:a4:96:ba:50:1e:33:05:43:51:cd:0a:9e:1b:3a:27:28:11:
         49:9f:22:ff:d9:1a:dd:65:6d:97:19:7b:6a:a3:ac:b3:b0:5d:
         78:4a:73:7a:c8:b3:4e:0e:a9:a7:d2:10:9d:b4:31:ea:2e:b5:
         7d:1c:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----