Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/T6jhVCtQt9mOa0RReKdWAodchC0.roa
File:                     T6jhVCtQt9mOa0RReKdWAodchC0.roa (raw, json)
Hash identifier:          yL5FYLay1WG3bJlO8BYcua09Swjr8mHvjvGI1hZf5vU=
Subject key identifier:   4F:A8:E1:54:2B:50:B7:D9:8E:6B:44:51:78:A7:56:02:87:5C:84:2D
Certificate issuer:       /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial:       0F2036C6
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/T6jhVCtQt9mOa0RReKdWAodchC0.roa
Signing time:             Wed 23 Mar 2022 13:33:09 +0000
ROA not before:           Wed 23 Mar 2022 13:33:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205668
IP address blocks:        185.44.128.0/22 maxlen: 24
                          185.200.101.0/24 maxlen: 24
                          185.200.102.0/24 maxlen: 24
                          185.200.103.0/24 maxlen: 24
                          185.200.100.0/24 maxlen: 24
                          185.129.71.0/24 maxlen: 24
                          185.129.68.0/22 maxlen: 24
                          185.129.68.0/24 maxlen: 24
                          185.129.69.0/24 maxlen: 24
                          185.129.70.0/24 maxlen: 24
                          45.148.168.0/22 maxlen: 24
                          2a0a:aa40::/32 maxlen: 32
                          2a01:74e0::/32 maxlen: 32
                          2a0a:aa42::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253769414 (0xf2036c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
        Validity
            Not Before: Mar 23 13:33:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4fa8e1542b50b7d98e6b445178a75602875c842d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:33:bf:fd:17:4e:38:f9:cb:39:55:78:53:
                    75:1c:51:66:bd:75:df:3c:d1:65:8c:88:87:26:ea:
                    52:f2:42:2e:29:0d:6d:86:78:54:83:3b:f8:b8:ab:
                    1b:f5:e6:35:e0:82:7b:17:6d:45:a2:cc:e0:13:8b:
                    6b:71:12:eb:e8:3c:0b:52:d4:c2:b8:f4:97:09:4e:
                    76:5c:88:ba:61:21:e6:2a:ae:07:ba:2c:5e:89:5f:
                    5b:23:ce:89:96:14:ff:d8:33:0c:0b:e7:ca:fb:50:
                    72:21:cb:cb:f2:53:3a:b7:b5:ce:a5:26:8c:bc:d8:
                    00:b9:a0:d2:2b:8d:1c:95:12:aa:50:1a:87:4a:27:
                    2c:3f:93:7f:2d:25:b9:dd:0b:8e:79:bc:19:dd:01:
                    3b:06:9d:db:ca:c7:18:ef:d7:fe:98:6d:3f:c3:c9:
                    88:15:70:eb:8f:7a:04:3c:c3:31:23:87:17:de:30:
                    55:d6:bb:b2:69:1c:59:1d:08:76:52:04:8c:ed:46:
                    d7:78:a8:34:90:1b:ed:f9:d7:f0:2d:ca:76:4b:25:
                    87:47:7b:a4:96:4f:86:a7:31:60:96:1b:b7:06:8b:
                    e9:0b:0a:c6:f4:a5:71:47:01:8d:b7:43:67:9c:58:
                    94:90:69:d3:73:0c:65:41:9b:6b:61:d1:c8:3c:69:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A8:E1:54:2B:50:B7:D9:8E:6B:44:51:78:A7:56:02:87:5C:84:2D
            X509v3 Authority Key Identifier:
                keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/T6jhVCtQt9mOa0RReKdWAodchC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.168.0/22
                  185.44.128.0/22
                  185.129.68.0/22
                  185.200.100.0/22
                IPv6:
                  2a01:74e0::/32
                  2a0a:aa40::/32
                  2a0a:aa42::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:a1:1a:ec:bf:2d:73:b1:93:92:19:f1:ac:d0:3f:5c:77:
         7d:fa:d3:9c:c7:8c:94:c5:ed:58:4d:48:29:61:93:7c:51:39:
         3d:38:d4:e2:5e:ec:f0:b7:8b:f9:b3:ae:e4:76:1c:6e:d6:14:
         f2:c0:3d:0f:e4:0f:f5:90:04:8a:0b:3c:47:f6:ee:35:21:9f:
         6b:d8:06:4f:26:08:0a:f4:b1:b7:2a:38:f9:66:dc:13:86:91:
         9a:63:98:af:61:fa:77:3e:ea:bb:b6:5b:64:71:dc:cf:0d:58:
         e8:3d:36:d5:d4:21:3c:a2:e8:74:a5:14:fc:6a:7f:50:9e:7b:
         94:a4:e7:94:d1:e5:0a:41:b1:08:ed:e7:ac:91:a4:66:12:42:
         97:da:94:6d:12:0c:e7:94:a3:c8:68:b3:9b:cb:fb:4a:5f:9a:
         1d:90:56:e5:0f:a5:1b:91:26:80:ee:54:54:f9:e5:9d:21:0e:
         7a:36:f9:5e:f3:ce:8b:45:51:3a:13:ce:50:df:9d:51:35:5e:
         9b:17:b4:e4:e4:89:ff:75:de:92:10:c5:0d:d7:32:c7:0f:5c:
         49:d4:d4:92:11:1c:66:81:2e:ee:fa:82:74:b3:8a:12:0b:60:
         24:74:dd:9a:a0:64:92:fd:8d:f8:f9:97:ee:41:65:b9:0c:36:
         b0:13:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----