Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/j4Y7vOAMvVumctgTmixvEzrH3_4.roa
File:                     j4Y7vOAMvVumctgTmixvEzrH3_4.roa (raw, json)
Hash identifier:          j74bhNWlCSiXJYByPGK02SeQF/RZTUF9VNMlHWghs3w=
Subject key identifier:   8F:86:3B:BC:E0:0C:BD:5B:A6:72:D8:13:9A:2C:6F:13:3A:C7:DF:FE
Certificate issuer:       /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial:       01DC23
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/j4Y7vOAMvVumctgTmixvEzrH3_4.roa
Signing time:             Mon 04 Apr 2022 17:47:30 +0000
ROA not before:           Mon 04 Apr 2022 17:47:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210517
IP address blocks:        91.241.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121891 (0x1dc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
        Validity
            Not Before: Apr  4 17:47:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f863bbce00cbd5ba672d8139a2c6f133ac7dffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:d6:fa:49:84:4c:6c:8a:05:05:d6:34:c5:
                    64:3f:22:9b:58:38:ca:2d:47:5b:a9:cd:fa:25:14:
                    9b:75:2d:a6:d7:14:d9:24:b7:86:d8:b9:32:12:c0:
                    80:a6:94:f2:22:08:34:bf:ea:7d:43:31:9f:17:03:
                    46:25:2e:43:ce:75:45:50:f3:33:e1:9b:7d:1b:f9:
                    a7:11:a4:83:75:9d:7e:24:0c:c3:37:5f:ef:90:ef:
                    d7:de:8a:8d:fe:f3:49:c0:b7:ef:3a:f7:6f:ce:52:
                    87:b2:14:95:35:69:11:97:4d:b2:1b:7b:fa:f0:3d:
                    6a:b7:f4:fe:5d:fe:f5:94:83:65:1c:9e:3e:e1:91:
                    41:84:b4:9a:e3:97:a7:c6:17:69:ef:e2:88:3f:e8:
                    0f:9d:8b:6f:6b:b7:26:2f:21:43:1e:02:59:3d:98:
                    c5:fb:da:9b:70:f3:3d:3e:e8:8c:a7:f2:6c:31:29:
                    04:24:b7:e3:03:c0:45:b6:9a:1e:53:eb:26:b8:ad:
                    01:07:79:54:2d:57:70:d7:04:f4:28:e4:05:8c:ae:
                    31:fb:48:b5:44:60:0e:2a:28:06:8e:8f:35:6f:2a:
                    54:a7:6d:38:8d:8b:13:05:91:01:61:c2:5c:cc:41:
                    2b:5a:b5:b8:dc:20:fb:34:6f:2c:05:6f:91:e6:78:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:86:3B:BC:E0:0C:BD:5B:A6:72:D8:13:9A:2C:6F:13:3A:C7:DF:FE
            X509v3 Authority Key Identifier:
                keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/j4Y7vOAMvVumctgTmixvEzrH3_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:49:1d:9d:05:6e:74:75:51:77:b8:ec:5b:a5:a9:12:d4:2a:
         fe:d7:87:ec:cf:a9:45:96:c4:39:d7:a9:c8:5f:32:88:d5:be:
         9b:6c:a7:eb:fd:eb:ec:73:d1:10:5a:b7:77:69:fc:90:b6:7f:
         8a:e8:d1:a5:b9:bf:9b:0f:26:1b:b5:29:9c:10:3b:97:1c:04:
         20:52:3a:fd:1d:dd:57:74:3f:88:f0:82:2a:00:39:22:ab:02:
         90:94:b6:9c:64:bb:37:49:7f:d0:45:4c:3a:72:27:8f:b8:22:
         9b:78:37:bb:b6:c3:c6:c5:83:17:5a:2d:1b:6d:cd:75:cb:ad:
         68:07:5e:2d:bf:1c:f1:de:d2:6f:d6:36:12:6a:8e:ed:4d:f9:
         04:3e:a1:d7:4a:51:eb:95:96:1f:07:3a:7f:88:df:02:8a:d5:
         ba:ad:ae:6e:48:df:d8:f9:4d:29:a6:21:07:f5:36:6b:b4:46:
         79:f1:26:b0:4a:a3:4f:b8:bf:dd:3f:67:dc:3f:6a:4f:da:fb:
         7e:55:48:96:33:a1:93:72:66:40:65:8f:ff:42:8b:fe:9a:1d:
         e8:0a:66:94:46:58:26:8f:b4:32:d5:73:d2:9a:da:8c:a3:13:
         03:9b:f6:d5:6a:dd:94:e0:c7:7c:71:7c:fe:d3:44:ab:aa:dc:
         a5:97:c3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----