Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eawTWfjV2PGq0yimh8Vk8rVaoGA.roa
File:                     eawTWfjV2PGq0yimh8Vk8rVaoGA.roa (raw, json)
Hash identifier:          bohH7SncoOYa3uNLcuqqgWJcYuX5lUEcjYHFi54JG4k=
Subject key identifier:   79:AC:13:59:F8:D5:D8:F1:AA:D3:28:A6:87:C5:64:F2:B5:5A:A0:60
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       09D499DB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eawTWfjV2PGq0yimh8Vk8rVaoGA.roa
Signing time:             Fri 01 Jul 2022 08:52:02 +0000
ROA not before:           Fri 01 Jul 2022 08:52:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        94.241.176.0/21 maxlen: 24
                          91.186.196.0/22 maxlen: 24
                          91.186.194.0/23 maxlen: 24
                          94.241.136.0/21 maxlen: 24
                          91.186.200.0/22 maxlen: 24
                          91.186.212.0/22 maxlen: 24
                          91.186.216.0/22 maxlen: 24
                          94.241.160.0/21 maxlen: 24
                          94.241.168.0/21 maxlen: 24
                          83.147.216.0/23 maxlen: 24
                          83.147.222.0/23 maxlen: 24
                          178.253.32.0/23 maxlen: 24
                          178.253.44.0/23 maxlen: 24
                          178.253.38.0/23 maxlen: 24
                          83.147.232.0/22 maxlen: 24
                          178.253.52.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164927963 (0x9d499db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jul  1 08:52:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79ac1359f8d5d8f1aad328a687c564f2b55aa060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:9a:65:97:20:fb:32:ce:3a:63:8c:51:d3:
                    1c:4d:17:0f:e4:05:0a:3b:13:95:90:d2:ae:c7:9d:
                    5c:4d:19:6e:0f:e5:7f:04:57:3b:ba:3c:bb:ee:89:
                    d6:fb:de:6a:b2:16:33:2c:cb:80:74:a5:8a:a0:ac:
                    be:08:b4:35:60:0b:b9:34:b0:ba:75:17:76:9e:25:
                    19:ba:0d:d6:27:78:64:c0:9a:78:ec:c6:0a:59:db:
                    50:26:63:76:66:52:08:ed:32:19:fb:5a:60:c6:02:
                    69:88:17:8c:a5:93:1a:a1:ae:e4:62:2e:8a:21:4e:
                    04:53:46:62:3c:2a:7e:33:9b:5b:6b:f6:8b:ee:e4:
                    02:d6:5d:8c:b5:70:05:20:0a:45:0d:f8:73:8e:c0:
                    fb:d1:6a:08:2c:71:59:47:8f:dd:24:a2:82:d5:4f:
                    99:cd:ff:4a:ea:37:23:05:22:3e:68:fc:2e:b8:a1:
                    3d:b0:3a:38:43:81:f8:36:1c:c6:83:d5:16:ed:1c:
                    6e:24:ab:ce:0b:7e:8d:a6:ef:64:d0:99:df:b2:98:
                    8e:8d:67:9c:46:d6:a6:41:50:1f:20:2b:8a:1b:c8:
                    1d:32:bd:1b:b7:dc:02:e5:74:bd:73:12:b4:f7:60:
                    25:0d:aa:2f:bf:04:a2:44:52:04:e5:37:09:b7:64:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AC:13:59:F8:D5:D8:F1:AA:D3:28:A6:87:C5:64:F2:B5:5A:A0:60
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eawTWfjV2PGq0yimh8Vk8rVaoGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.216.0/23
                  83.147.222.0/23
                  83.147.232.0/22
                  91.186.194.0-91.186.203.255
                  91.186.212.0-91.186.219.255
                  94.241.136.0/21
                  94.241.160.0-94.241.183.255
                  178.253.32.0/23
                  178.253.38.0/23
                  178.253.44.0/23
                  178.253.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:ef:10:e7:33:96:8c:4d:7a:39:f9:e6:6c:21:bf:b7:22:
         3f:61:97:58:d3:c5:d0:70:62:c6:d3:9a:4e:be:b4:f7:fc:c5:
         d7:bc:48:3e:2a:a8:39:98:c7:33:e3:78:45:d5:40:c9:70:34:
         05:e1:c2:1f:6a:41:ca:6a:d4:ea:eb:e9:74:50:09:16:e6:89:
         be:84:9a:34:fb:f8:ed:07:67:a4:81:48:3c:65:c7:a5:d5:45:
         1b:3d:25:22:d7:a4:27:2b:96:82:17:dc:85:fe:0f:08:1a:c1:
         66:d1:3f:99:fd:ec:e3:86:81:f1:a8:81:c1:32:ed:d1:98:54:
         b0:d0:71:1a:ee:12:44:7e:b1:36:c0:92:6f:df:03:7f:88:45:
         b2:f2:8e:5a:99:80:4a:7d:da:b6:73:e5:f3:76:4f:70:f7:81:
         c2:dc:77:c7:4e:c7:e6:27:a3:c0:97:b3:f8:1a:12:61:85:9c:
         95:ac:45:c7:02:9b:2d:ce:37:99:1d:be:79:08:a3:b7:f2:32:
         d2:b5:de:cd:1d:6f:a6:76:2d:5b:40:31:d4:ab:0f:59:40:3c:
         fc:49:b5:10:b6:93:f1:9f:ca:27:e6:cf:a7:54:9b:40:d3:fc:
         07:4a:d7:7f:dc:40:23:80:bf:07:07:46:9d:63:43:a0:e0:ef:
         45:e5:28:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIECdSZ2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDcw
MTA4NTIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzlhYzEzNTlmOGQ1
ZDhmMWFhZDMyOGE2ODdjNTY0ZjJiNTVhYTA2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhmmmWXIPsyzjpjjFHTHE0XD+QFCjsTlZDSrsedXE0Zbg/l
fwRXO7o8u+6J1vvearIWMyzLgHSliqCsvgi0NWALuTSwunUXdp4lGboN1id4ZMCa
eOzGClnbUCZjdmZSCO0yGftaYMYCaYgXjKWTGqGu5GIuiiFOBFNGYjwqfjObW2v2
i+7kAtZdjLVwBSAKRQ34c47A+9FqCCxxWUeP3SSigtVPmc3/Suo3IwUiPmj8Lrih
PbA6OEOB+DYcxoPVFu0cbiSrzgt+jabvZNCZ37KYjo1nnEbWpkFQHyArihvIHTK9
G7fcAuV0vXMStPdgJQ2qL78EokRSBOU3CbdkpK8CAwEAAaOCAl0wggJZMB0GA1Ud
DgQWBBR5rBNZ+NXY8arTKKaHxWTytVqgYDAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L2Vhd1RXZmpWMlBHcTB5aW1oOFZrOHJWYW9HQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBz
BggrBgEFBQcBBwEB/wRkMGIwYAQCAAEwWgMEAVOT2AMEAVOT3gMEAlOT6DAMAwQB
W7rCAwQCW7rIMAwDBAJbutQDBAJbutgDBANe8YgwDAMEBV7xoAMEA17xsAMEAbL9
IAMEAbL9JgMEAbL9LAMEAbL9NDANBgkqhkiG9w0BAQsFAAOCAQEAnAbvEOczloxN
ejn55mwhv7ciP2GXWNPF0HBixtOaTr609/zF17xIPiqoOZjHM+N4RdVAyXA0BeHC
H2pBymrU6uvpdFAJFuaJvoSaNPv47QdnpIFIPGXHpdVFGz0lItekJyuWghfchf4P
CBrBZtE/mf3s44aB8aiBwTLt0ZhUsNBxGu4SRH6xNsCSb98Df4hFsvKOWpmASn3a
tnPl83ZPcPeBwtx3x07H5iejwJez+BoSYYWclaxFxwKbLc43mR2+eQijt/Iy0rXe
zR1vpnYtW0Ax1KsPWUA8/Em1ELaT8Z/KJ+bPp1SbQNP8B0rXf9xAI4C/BwdGnWND
oODvReUoIg==
-----END CERTIFICATE-----