Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1deizzomDV6e_hkS-QkXDjCjdek.roa
File:                     1deizzomDV6e_hkS-QkXDjCjdek.roa (raw, json)
Hash identifier:          X+wPXbr1oUZHLZPumDdDlYkxkEWjXvHilLvhImo55QI=
Subject key identifier:   D5:D7:A2:CF:3A:26:0D:5E:9E:FE:19:12:F9:09:17:0E:30:A3:75:E9
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       079C987A
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1deizzomDV6e_hkS-QkXDjCjdek.roa
Signing time:             Sat 01 Jan 2022 10:05:01 +0000
ROA not before:           Sat 01 Jan 2022 10:05:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     132839
IP address blocks:        178.236.42.0/23 maxlen: 23
                          178.236.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127703162 (0x79c987a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Jan  1 10:05:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5d7a2cf3a260d5e9efe1912f909170e30a375e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:f4:c5:fe:6b:f1:35:07:cf:b7:d8:dd:14:
                    a4:fd:64:9d:8d:4d:70:ef:57:fe:be:49:d4:d2:4a:
                    76:78:bd:d5:fe:ff:90:7e:c5:7f:7b:1c:f6:53:36:
                    ce:65:ae:74:e0:34:08:b7:b9:73:81:f4:b7:35:b1:
                    c8:97:75:6d:19:98:fd:b6:d0:06:bb:59:78:7d:31:
                    89:fb:16:d0:d0:77:ba:57:a5:65:4c:fb:5a:cd:be:
                    2d:68:c8:b6:32:b2:ff:54:31:a1:22:2d:dc:39:5d:
                    c0:ed:dd:66:1a:ab:8b:dc:71:1d:e3:16:cd:58:95:
                    26:31:53:16:07:75:39:58:10:51:c3:d9:36:bc:78:
                    4b:29:2b:79:7d:b7:ef:e5:f7:c3:b8:a0:08:2b:aa:
                    bc:60:54:a9:5f:02:4e:7b:aa:56:9b:e2:b6:a2:27:
                    ba:b7:63:69:4a:1a:02:7d:89:68:6e:f1:2e:01:6e:
                    b6:36:d3:7a:1b:05:3c:69:48:f4:ef:8d:be:46:83:
                    ea:de:b9:90:4c:a8:b9:ed:50:61:76:94:48:8c:b9:
                    3a:11:cb:ae:6f:fe:35:d0:d1:be:14:3f:3e:19:63:
                    f3:c0:ae:37:7f:95:56:49:ee:0c:5c:18:ae:59:82:
                    e2:c8:1f:2c:33:b6:2d:55:0a:ab:df:7a:a8:f0:78:
                    a9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D7:A2:CF:3A:26:0D:5E:9E:FE:19:12:F9:09:17:0E:30:A3:75:E9
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1deizzomDV6e_hkS-QkXDjCjdek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.42.0-178.236.47.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:be:e4:bd:8b:5b:ce:1d:25:75:73:16:2b:0a:82:d1:80:cf:
         e4:8a:b8:09:14:8d:1f:65:84:19:ac:50:30:fc:7f:74:07:80:
         a7:fa:76:70:e7:32:14:e9:53:b0:71:eb:a1:85:ff:39:12:16:
         2c:43:f5:c9:65:5a:6b:ed:27:f4:4e:87:02:a5:0b:4d:75:0a:
         88:39:b1:d9:68:a5:53:1f:21:36:62:b9:ca:28:fb:c6:03:dd:
         29:a8:70:46:4a:8b:59:3f:6c:45:e3:fe:00:5c:c1:ad:76:5f:
         91:c8:2c:36:d6:bf:d4:fb:6a:d3:e2:ca:59:b6:e9:8c:0e:7e:
         f8:b8:d9:dd:6c:fc:89:b5:79:d8:db:bb:00:4d:c0:0f:3e:c2:
         f6:58:91:e8:7a:73:ca:62:ba:39:8b:ff:5f:a7:5a:48:62:72:
         e2:bb:df:2d:d0:06:fd:24:65:1a:68:3f:33:70:08:ad:40:d7:
         be:d3:c7:e8:10:34:c2:99:9d:53:5b:ae:88:d6:bd:5d:63:95:
         66:26:19:aa:7f:6c:fa:60:55:12:7d:1c:23:5c:2f:b1:e8:ff:
         b2:c3:71:2d:33:0a:3e:f8:f1:0d:f9:4c:f9:8e:13:0c:0a:9d:
         9f:65:3a:86:ce:d2:0f:66:69:73:e1:17:64:49:be:4f:33:40:
         ed:13:97:a7
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEB5yYejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MzgyY2IxM2RkZTEyNjU4Y2RhYzE4Y2FjYWU5MWZiYmY1YzU4MDkwMB4XDTIyMDEw
MTEwMDUwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDVkN2EyY2YzYTI2
MGQ1ZTllZmUxOTEyZjkwOTE3MGUzMGEzNzVlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMH59MX+a/E1B8+32N0UpP1knY1NcO9X/r5J1NJKdni91f7/
kH7Ff3sc9lM2zmWudOA0CLe5c4H0tzWxyJd1bRmY/bbQBrtZeH0xifsW0NB3ulel
ZUz7Ws2+LWjItjKy/1QxoSIt3DldwO3dZhqri9xxHeMWzViVJjFTFgd1OVgQUcPZ
Nrx4SykreX237+X3w7igCCuqvGBUqV8CTnuqVpvitqInurdjaUoaAn2JaG7xLgFu
tjbTehsFPGlI9O+NvkaD6t65kEyoue1QYXaUSIy5OhHLrm/+NdDRvhQ/Phlj88Cu
N3+VVknuDFwYrlmC4sgfLDO2LVUKq996qPB4qakCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTV16LPOiYNXp7+GRL5CRcOMKN16TAfBgNVHSMEGDAWgBTzgssT3eEmWM2s
GMrK6R+79cWAkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzg0TExFOTNoSmxqTnJCakt5dWtmdV9YRmdKQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvZTdkYTlhLTkzMmEtNDY3Yi1iMmQyLTk3MDQyODkxZWI5OS8x
LzFkZWl6em9tRFY2ZV9oa1MtUWtYRGpDamRlay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
ZTdkYTlhLTkzMmEtNDY3Yi1iMmQyLTk3MDQyODkxZWI5OS8xLzg0TExFOTNoSmxq
TnJCakt5dWtmdV9YRmdKQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBsuwqAwQEsuwgMA0GCSqGSIb3
DQEBCwUAA4IBAQAvvuS9i1vOHSV1cxYrCoLRgM/kirgJFI0fZYQZrFAw/H90B4Cn
+nZw5zIU6VOwceuhhf85EhYsQ/XJZVpr7Sf0TocCpQtNdQqIObHZaKVTHyE2YrnK
KPvGA90pqHBGSotZP2xF4/4AXMGtdl+RyCw21r/U+2rT4spZtumMDn74uNndbPyJ
tXnY27sATcAPPsL2WJHoenPKYro5i/9fp1pIYnLiu98t0Ab9JGUaaD8zcAitQNe+
08foEDTCmZ1TW66I1r1dY5VmJhmqf2z6YFUSfRwjXC+x6P+yw3EtMwo++PEN+Uz5
jhMMCp2fZTqGztIPZmlz4RdkSb5PM0DtE5en
-----END CERTIFICATE-----