Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/zL-yYLyUkDOZdGG86SA4iTh7Ifo.roa
File:                     zL-yYLyUkDOZdGG86SA4iTh7Ifo.roa (raw, json)
Hash identifier:          Qq0MSdrTfP3s0k8ukfitf5em6tg1Ibp5OAZoApW/JRE=
Subject key identifier:   CC:BF:B2:60:BC:94:90:33:99:74:61:BC:E9:20:38:89:38:7B:21:FA
Certificate issuer:       /CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
Certificate serial:       0179B8
Authority key identifier: EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/zL-yYLyUkDOZdGG86SA4iTh7Ifo.roa
Signing time:             Mon 23 May 2022 09:59:29 +0000
ROA not before:           Mon 23 May 2022 09:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13054
IP address blocks:        213.164.64.0/19 maxlen: 19
                          2a03:3500::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96696 (0x179b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
        Validity
            Not Before: May 23 09:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ccbfb260bc949033997461bce9203889387b21fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:dc:eb:06:a7:3b:b8:81:a1:1d:81:00:49:
                    ca:c3:a3:a6:3f:b8:fd:e4:27:8d:88:f1:45:26:c3:
                    d5:77:4e:16:0b:64:1e:a6:ee:9e:49:52:77:df:e1:
                    2c:5b:bb:fc:48:ce:91:92:d0:1c:dd:9f:0b:d5:f9:
                    14:6a:15:64:d4:d7:64:87:02:d6:e1:7f:3d:5b:d4:
                    ea:b6:50:59:dc:81:c8:8c:f7:56:09:16:a1:72:3c:
                    aa:f0:7b:3b:37:a3:94:75:b5:d1:b4:5f:60:11:26:
                    52:89:c5:62:06:cd:35:7e:3a:54:d6:d1:bd:48:87:
                    cf:cf:0a:d7:bd:0b:98:22:ad:17:0d:a5:bf:ff:4c:
                    28:d3:1f:8c:67:e5:42:71:c1:37:13:0e:2d:cc:64:
                    3d:dc:1a:87:34:de:13:b4:c7:81:07:c7:76:b5:45:
                    5b:c3:4e:43:8e:66:e2:86:aa:05:d1:48:38:84:31:
                    d0:ef:3b:fa:d3:50:d4:22:e7:f0:36:91:38:57:c8:
                    07:f2:4d:11:8f:ef:ee:e2:0f:86:1f:b7:6e:34:14:
                    88:90:5c:8b:bc:53:a2:5b:75:1c:2e:6f:c6:f0:cf:
                    6e:18:61:84:4d:aa:e2:28:ab:ac:37:76:14:68:0d:
                    cc:74:71:ac:66:08:01:18:9f:6a:16:1c:df:12:a5:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BF:B2:60:BC:94:90:33:99:74:61:BC:E9:20:38:89:38:7B:21:FA
            X509v3 Authority Key Identifier:
                keyid:EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/zL-yYLyUkDOZdGG86SA4iTh7Ifo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/79JQ80H_zDYTtZnqluDRnC5v41A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.164.64.0/19
                IPv6:
                  2a03:3500::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:10:c5:3a:48:5c:80:da:0a:ec:82:ad:6f:25:86:a7:ba:30:
         53:91:76:01:5f:8c:b7:4c:74:f7:5d:c1:64:30:aa:20:45:ac:
         fd:ba:c9:90:49:5f:1d:f4:a0:69:f9:6d:96:57:d0:ab:9b:cf:
         3a:51:0d:55:d5:6b:b8:ab:4e:11:0e:0d:73:ff:e3:f4:ab:50:
         d7:d7:91:ab:0d:2f:46:a7:8e:ed:a5:70:bc:c4:27:b0:8b:49:
         bb:fb:83:30:39:56:41:ac:c5:aa:d6:64:44:74:c9:a3:96:1c:
         ad:f4:a2:ff:a4:51:2b:20:fa:df:23:99:4c:4f:f6:94:c2:41:
         cc:1c:c0:f2:29:60:23:f4:4e:09:89:ce:36:47:d2:ab:0d:94:
         d4:62:52:ef:f3:53:36:9f:78:40:07:9a:ae:b4:8a:5b:8d:8f:
         57:04:9a:1b:b3:49:90:ac:e9:cd:ef:f3:62:5c:6e:a4:44:72:
         3d:c0:fc:98:d3:0c:f6:93:26:d5:b8:07:c9:e9:71:cc:19:28:
         fa:4a:8d:d1:1b:7e:42:0b:bb:ab:48:f7:12:f9:a6:cc:ce:8b:
         b1:20:09:3f:ab:6e:bd:9f:d0:9b:14:22:15:2a:41:79:18:50:
         67:e6:86:b7:8f:87:80:07:57:30:a3:da:e2:e0:75:91:29:3a:
         43:db:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----