Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa
File:                     VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa (raw, json)
Hash identifier:          6iwRQCIlkruZ5cQbiPrLFdr2ua5Gx2uo3NbRJEFIkDo=
Subject key identifier:   54:63:07:3A:0B:3D:B2:F8:D1:20:A2:33:EA:C5:88:43:58:36:78:F5
Certificate issuer:       /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial:       02C3BD86
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa
Signing time:             Sat 01 Jan 2022 11:58:04 +0000
ROA not before:           Sat 01 Jan 2022 11:58:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203948
IP address blocks:        109.238.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46382470 (0x2c3bd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
        Validity
            Not Before: Jan  1 11:58:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5463073a0b3db2f8d120a233eac58843583678f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:26:77:21:e9:54:90:4c:3b:a7:2c:67:c8:
                    b5:9c:84:fd:0a:55:80:05:b9:65:88:49:39:29:71:
                    b3:55:29:b4:d4:1c:8a:a8:4f:7b:5f:09:da:ce:0c:
                    08:e9:0e:5a:cf:40:59:11:a9:cc:f8:6e:0a:a5:99:
                    aa:a4:9e:37:f1:db:21:6b:33:68:3f:5c:31:50:e5:
                    4f:e7:28:75:a2:20:63:6a:1f:f3:01:05:8e:c3:e9:
                    c5:21:d6:5c:5d:ad:30:d9:d6:da:4b:1a:51:ab:26:
                    f8:ce:0a:a8:e2:b5:5b:a3:8c:61:20:f3:c7:ee:b2:
                    46:08:66:10:9d:ca:86:fa:6d:39:9a:0c:bd:37:b6:
                    05:9f:e1:95:f3:47:4e:06:76:e6:6d:ff:81:f5:72:
                    82:fd:44:03:a7:f0:45:40:a1:6a:03:a3:ef:93:aa:
                    31:8c:32:35:1b:f9:52:0c:df:ab:22:31:32:12:3d:
                    e3:ff:77:ca:5f:b2:9a:35:eb:d0:a3:be:24:4d:f3:
                    5d:a7:1d:44:35:2a:81:94:27:26:32:7d:68:f2:e7:
                    07:65:6e:9a:91:d7:2f:bd:71:32:de:78:bf:e1:c0:
                    1a:36:9c:84:a8:e4:26:2e:ca:34:a0:44:dd:7d:b3:
                    69:88:c5:46:b4:fc:43:d0:74:77:aa:ab:0b:9c:27:
                    63:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:07:3A:0B:3D:B2:F8:D1:20:A2:33:EA:C5:88:43:58:36:78:F5
            X509v3 Authority Key Identifier:
                keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/VGMHOgs9svjRIKIz6sWIQ1g2ePU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.238.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:f6:91:1a:b6:57:c1:34:2c:91:80:70:11:5b:60:e9:8b:
         74:be:dd:45:3b:70:8c:be:93:10:e2:31:eb:2f:30:4d:2d:85:
         5a:46:ba:6d:9a:2c:ae:84:12:6f:cc:0f:77:06:36:15:5e:c5:
         f8:d4:39:34:98:d9:2c:c4:51:12:77:61:db:de:26:24:89:6c:
         23:6b:03:9d:60:6d:59:ba:fa:9c:16:3d:6f:92:fb:dd:f0:87:
         02:5a:03:09:68:ac:56:b2:b0:bd:20:86:ec:a7:57:1a:fb:47:
         b8:b5:30:e8:9f:e8:0d:e3:cf:1c:22:61:5b:05:1b:b3:18:8a:
         f3:8e:9d:e1:11:bc:75:ff:66:18:0d:11:2d:4f:4f:85:60:61:
         ea:ed:80:8e:ca:fe:fa:6b:a1:c9:14:c9:d3:52:dc:b8:19:c2:
         0d:2a:f9:e7:15:61:88:4c:7e:d4:8c:22:de:b2:58:61:d6:bb:
         61:88:5d:42:ac:b0:44:c7:bd:a1:2b:bf:55:55:86:54:b5:42:
         50:7b:d9:a5:4c:6e:8d:5d:e2:67:b9:73:2d:fd:ef:c4:02:05:
         df:f4:a7:87:73:6f:7f:e5:85:31:4a:5c:0d:c2:7f:ab:de:97:
         6a:19:49:dd:18:3c:db:50:d1:ff:af:e1:62:ee:4d:3d:8e:35:
         71:3f:54:f6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAsO9hjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmYzNDRhNjNkY2I3MGU4OTA1N2RlYjhlMjc2MWRjNDUxNjU4ODFhMB4XDTIyMDEw
MTExNTgwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTQ2MzA3M2EwYjNk
YjJmOGQxMjBhMjMzZWFjNTg4NDM1ODM2NzhmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKFCJnch6VSQTDunLGfItZyE/QpVgAW5ZYhJOSlxs1UptNQc
iqhPe18J2s4MCOkOWs9AWRGpzPhuCqWZqqSeN/HbIWszaD9cMVDlT+codaIgY2of
8wEFjsPpxSHWXF2tMNnW2ksaUasm+M4KqOK1W6OMYSDzx+6yRghmEJ3KhvptOZoM
vTe2BZ/hlfNHTgZ25m3/gfVygv1EA6fwRUChagOj75OqMYwyNRv5UgzfqyIxMhI9
4/93yl+ymjXr0KO+JE3zXacdRDUqgZQnJjJ9aPLnB2VumpHXL71xMt54v+HAGjac
hKjkJi7KNKBE3X2zaYjFRrT8Q9B0d6qrC5wnY8kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRUYwc6Cz2y+NEgojPqxYhDWDZ49TAfBgNVHSMEGDAWgBQi80SmPctw6JBX
3rjidh3EUWWIGjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l2TkVwajNMY09pUVY5NjQ0bllkeEZGbGlCby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNTM2MGU3LWYwMmEtNDczNy05OWM3LWZlYmI2NGI1ZTE2NC8x
L1ZHTUhPZ3M5c3ZqUklLSXo2c1dJUTFnMmVQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NTM2MGU3LWYwMmEtNDczNy05OWM3LWZlYmI2NGI1ZTE2NC8xL0l2TkVwajNMY09p
UVY5NjQ0bllkeEZGbGlCby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm3uxDANBgkqhkiG9w0BAQsFAAOC
AQEABF32kRq2V8E0LJGAcBFbYOmLdL7dRTtwjL6TEOIx6y8wTS2FWka6bZosroQS
b8wPdwY2FV7F+NQ5NJjZLMRREndh294mJIlsI2sDnWBtWbr6nBY9b5L73fCHAloD
CWisVrKwvSCG7KdXGvtHuLUw6J/oDePPHCJhWwUbsxiK846d4RG8df9mGA0RLU9P
hWBh6u2Ajsr++muhyRTJ01LcuBnCDSr55xVhiEx+1Iwi3rJYYda7YYhdQqywRMe9
oSu/VVWGVLVCUHvZpUxujV3iZ7lzLf3vxAIF3/Snh3Nvf+WFMUpcDcJ/q96XahlJ
3Rg821DR/6/hYu5NPY41cT9U9g==
-----END CERTIFICATE-----