Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eAwG6QMX5BIISA1CT1R5L4jZ-D4.roa
File:                     eAwG6QMX5BIISA1CT1R5L4jZ-D4.roa (raw, json)
Hash identifier:          KpzuvqVaFHhjUI/p1ikGY4gl+1tup1qT1C+SxAV+mMI=
Subject key identifier:   78:0C:06:E9:03:17:E4:12:08:48:0D:42:4F:54:79:2F:88:D9:F8:3E
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       0CC84C02
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eAwG6QMX5BIISA1CT1R5L4jZ-D4.roa
Signing time:             Sat 01 Jan 2022 05:05:08 +0000
ROA not before:           Sat 01 Jan 2022 05:05:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210979
IP address blocks:        45.83.30.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214453250 (0xcc84c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Jan  1 05:05:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=780c06e90317e41208480d424f54792f88d9f83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:cc:6d:f2:b1:ef:6e:b4:d5:4a:5b:98:77:
                    dc:bc:5e:74:a8:0c:dd:54:4b:e5:92:0f:43:40:97:
                    b0:6e:8b:cd:77:7f:66:96:7a:52:d1:a9:92:66:9b:
                    7f:41:4b:3a:f8:41:74:8a:bc:f9:80:c8:8a:3b:b7:
                    ef:ba:72:84:5d:f4:ec:20:28:16:31:b5:fb:85:d7:
                    53:14:ee:f5:04:98:98:15:4e:0b:9f:4e:a3:3a:7e:
                    45:10:49:41:17:de:17:1c:89:cf:8c:fe:c2:0a:68:
                    bf:34:4f:c9:a5:00:69:9b:ed:2f:77:95:e8:2f:2a:
                    2a:ae:ec:9e:78:a7:3c:09:ac:6f:04:44:1c:4c:3b:
                    9c:e0:4d:80:1d:15:e2:ed:9d:6c:1b:97:d1:80:01:
                    b7:dc:0b:3e:4f:3f:80:d3:ac:5c:d3:39:d5:ac:44:
                    37:19:04:2f:27:2c:31:ae:81:b0:19:89:ae:13:fa:
                    93:37:fb:4d:00:5b:57:90:12:2c:ae:1e:67:0c:bf:
                    5d:f8:29:4f:30:30:66:89:22:9c:fe:ae:77:d6:9c:
                    9d:5f:a1:0a:5c:d6:5e:15:22:56:d6:ff:56:80:db:
                    5a:90:8f:52:3d:ad:e4:5f:61:e5:7c:19:96:ad:d5:
                    01:cc:f6:a1:c6:8c:b7:16:a5:fa:0e:61:28:cb:4e:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0C:06:E9:03:17:E4:12:08:48:0D:42:4F:54:79:2F:88:D9:F8:3E
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eAwG6QMX5BIISA1CT1R5L4jZ-D4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:93:c1:2c:83:13:36:5d:c3:8d:ef:e2:53:8a:9d:c6:21:fc:
         6a:21:df:ef:3d:c2:6e:04:4f:76:9f:d8:ca:49:4d:e4:00:ac:
         5c:97:e4:a5:c2:87:5a:d6:8e:3e:02:c1:d2:df:ee:0d:17:40:
         58:28:3b:7c:ea:95:f0:32:eb:f6:61:6e:29:1d:b1:94:7c:e2:
         9e:6b:d5:07:e3:5b:06:9b:19:d6:cc:a6:d4:72:fa:fa:53:8f:
         a5:65:62:7d:ea:92:dc:94:ad:1d:1d:db:49:11:cc:90:00:91:
         b3:03:a0:a5:d6:3f:e6:52:d8:88:76:5c:bf:1a:66:4b:02:e1:
         67:ef:9a:7f:b5:91:1a:55:ed:17:b9:6f:cc:c8:eb:f0:49:84:
         b3:28:ba:c9:80:58:3b:a6:4f:b8:43:50:fe:e2:4d:ee:2f:60:
         5f:ca:5b:9d:50:37:ea:a4:b0:8b:12:7f:8e:0e:29:f7:4c:c5:
         fd:62:22:18:1c:33:17:cd:c5:a4:3c:37:a4:59:19:15:7f:a3:
         6c:ea:41:6e:88:c6:2b:a9:db:2e:bf:64:11:67:3b:f6:d4:f5:
         02:1a:1f:4a:f0:d7:ed:4a:4f:f5:bd:54:80:04:b8:03:52:7f:
         86:0c:b2:a3:bb:18:09:f3:f3:8c:66:e2:90:d7:80:06:7c:ad:
         39:4e:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----