Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/Cu0gj8yIrqxOugpTW_zP4S-jFC8.roa
File:                     Cu0gj8yIrqxOugpTW_zP4S-jFC8.roa (raw, json)
Hash identifier:          i4RGZv50ZgH/hRCEHqL/KH5Cb6LrFfCXLcI3UKMjVA4=
Subject key identifier:   0A:ED:20:8F:CC:88:AE:AC:4E:BA:0A:53:5B:FC:CF:E1:2F:A3:14:2F
Certificate issuer:       /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial:       0D009219
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/Cu0gj8yIrqxOugpTW_zP4S-jFC8.roa
Signing time:             Sat 01 Jan 2022 09:53:07 +0000
ROA not before:           Sat 01 Jan 2022 09:53:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50596
IP address blocks:        185.235.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218141209 (0xd009219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
        Validity
            Not Before: Jan  1 09:53:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0aed208fcc88aeac4eba0a535bfccfe12fa3142f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:7b:67:94:80:af:7a:6d:43:a9:fb:db:04:
                    32:7a:2e:96:e2:1c:05:e7:c6:73:86:8b:e3:2d:7b:
                    73:06:53:4e:1a:23:69:b6:12:2b:eb:87:2a:23:95:
                    8e:0d:08:c8:b8:31:39:32:0d:da:9c:69:b2:10:2d:
                    a5:36:84:e4:7f:78:5b:c9:a4:ca:34:55:0c:78:30:
                    c7:24:c8:60:7a:1c:47:88:38:ea:1e:cd:d7:33:e5:
                    ef:8b:71:14:31:0e:e5:c9:af:8f:30:a5:1f:5b:f6:
                    c4:38:fb:36:4f:9e:d9:14:64:49:a5:c3:9a:05:92:
                    e3:ab:3e:c0:5d:e7:1a:07:d4:91:a7:26:1e:37:db:
                    70:ad:0e:bf:5b:7b:44:57:e0:c4:02:47:49:0d:5d:
                    87:8d:af:f7:ca:10:4f:7a:1d:40:6f:9c:b4:42:c5:
                    18:44:4d:72:f7:ef:a9:d4:77:ed:cf:28:d2:cf:af:
                    db:23:93:0b:d6:bf:e7:c9:7e:6e:f5:81:1d:93:24:
                    93:59:d5:f8:d3:e7:d5:87:0f:3f:cc:14:c7:7f:8e:
                    a7:85:12:ef:28:65:c0:7c:8b:b0:9c:fc:71:87:1b:
                    cb:22:ca:9c:93:8f:1d:ad:74:f8:1d:fa:d0:02:83:
                    76:d0:72:b8:eb:ca:bc:96:fb:2a:3e:b5:35:75:87:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:ED:20:8F:CC:88:AE:AC:4E:BA:0A:53:5B:FC:CF:E1:2F:A3:14:2F
            X509v3 Authority Key Identifier:
                keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/Cu0gj8yIrqxOugpTW_zP4S-jFC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:27:f3:8e:d3:a7:93:7d:3e:93:94:51:21:bb:e0:50:8f:73:
         5c:c5:01:24:0f:d9:fd:1f:74:ce:25:cc:01:68:4c:27:1a:0b:
         55:89:f8:23:fe:a7:2f:e9:ad:87:bb:cc:22:2c:8f:77:70:78:
         ad:a4:17:ec:83:0b:89:1d:f1:58:57:63:27:5e:37:04:26:83:
         ad:2f:e3:6b:35:b4:fe:97:b0:f5:13:fb:06:da:89:c1:75:18:
         3a:0d:d8:39:f6:46:fa:b0:9a:9a:37:da:68:06:19:12:49:a3:
         b8:f8:cd:f2:25:78:0e:ed:f5:07:42:8a:31:57:3e:51:eb:09:
         2d:ce:bf:01:29:32:3d:c8:0c:61:80:b2:ba:48:87:06:b9:e6:
         72:65:18:df:b0:bb:7c:0c:8b:6e:b5:87:51:e2:fc:75:a0:79:
         06:b1:5d:33:7b:24:52:a7:3c:60:27:05:56:ad:79:54:2c:c5:
         95:e3:7b:6c:a2:aa:b9:b9:6c:97:22:a9:cf:e0:7e:11:d5:13:
         c7:ff:ec:f4:37:c3:d0:53:c1:c1:41:cd:ce:38:9a:2d:14:83:
         fb:6b:0e:f1:b5:a7:f6:cf:93:e1:9d:d2:41:b8:a6:21:4c:83:
         ee:2b:cf:cc:5f:7d:d8:53:18:f3:b0:d5:23:00:cf:cc:e0:34:
         2c:f0:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----