Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/00A4yBPFt6ts5gmgKMgn81kto9I.roa
File:                     00A4yBPFt6ts5gmgKMgn81kto9I.roa (raw, json)
Hash identifier:          +7ScIsEzqOlDFO+kommgTS2d+zPaJ6vyY/PUsh0F1ww=
Subject key identifier:   D3:40:38:C8:13:C5:B7:AB:6C:E6:09:A0:28:C8:27:F3:59:2D:A3:D2
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       3014A69D
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/00A4yBPFt6ts5gmgKMgn81kto9I.roa
Signing time:             Sat 01 Jan 2022 00:53:46 +0000
ROA not before:           Sat 01 Jan 2022 00:53:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15652
IP address blocks:        79.133.196.96/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806659741 (0x3014a69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jan  1 00:53:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d34038c813c5b7ab6ce609a028c827f3592da3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:db:1a:eb:84:1e:55:f3:95:a3:27:3b:19:
                    06:2c:85:79:8e:46:f6:7e:79:37:03:14:77:2a:bc:
                    a9:a6:bf:35:5c:b7:f1:11:1f:7f:97:9c:76:95:07:
                    6e:ee:42:d7:78:e7:dd:2e:e6:4a:ce:91:63:c0:a5:
                    e6:97:d2:a3:36:3b:6e:84:62:23:7c:c4:c5:a6:76:
                    da:f6:82:0c:e1:9b:0d:44:25:1a:26:e0:e4:e8:f5:
                    5c:f2:20:8f:5f:6e:c9:3f:58:0d:28:62:b5:fe:d8:
                    93:42:3a:62:30:49:91:15:59:2d:b5:44:e6:69:07:
                    5e:4f:00:59:06:8c:3e:29:6a:31:3a:7b:a5:bd:73:
                    c6:a5:31:ba:b2:bd:45:1c:7d:98:b5:0c:87:68:7b:
                    e1:f6:fb:1e:e2:8e:be:eb:33:fd:56:47:90:b7:e1:
                    1c:6b:c8:2f:63:b0:a3:88:9f:1f:e3:18:fa:13:7a:
                    89:3b:d1:d2:27:90:4d:9e:19:0e:2c:f3:c5:0b:03:
                    87:fa:5d:6a:37:97:4b:c0:6e:1a:c6:bc:0b:87:d1:
                    25:ad:c9:ff:64:b5:a7:68:8d:97:86:99:93:37:e2:
                    ed:7a:85:29:a3:0d:9c:da:f1:da:39:c1:7d:38:e1:
                    03:3a:ce:13:e0:b0:8a:e8:0a:6d:ab:7f:5d:fd:a5:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:38:C8:13:C5:B7:AB:6C:E6:09:A0:28:C8:27:F3:59:2D:A3:D2
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/00A4yBPFt6ts5gmgKMgn81kto9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.196.96/27

    Signature Algorithm: sha256WithRSAEncryption
         c7:54:3f:77:52:30:bf:9e:42:56:01:54:35:ed:94:f3:cf:46:
         60:66:ec:56:a3:27:8c:be:11:0e:ea:17:12:0f:e9:91:16:bd:
         3c:f6:e5:f6:b8:61:b0:9f:29:e7:5c:3f:bf:8a:ab:5c:68:6e:
         a9:e3:b6:38:6d:72:87:67:06:68:1a:0e:94:44:c6:4d:e1:c1:
         dc:8c:0b:a6:37:15:3d:11:76:b7:a9:ff:51:fa:da:c3:25:8b:
         83:77:2f:f6:12:d3:c0:1a:d4:af:d5:18:6c:40:4b:40:9a:db:
         53:6c:50:e4:b0:ed:5c:4c:69:64:ce:9a:b1:b2:2f:dd:96:ed:
         e4:0d:79:3a:37:ec:74:18:e1:43:37:b7:d6:70:4a:a7:52:13:
         68:cc:a9:5a:e2:85:2f:6d:85:56:5c:75:cc:70:3b:97:f5:33:
         e5:53:96:9f:ae:c2:6e:67:1a:a3:66:92:18:5e:8d:c9:07:08:
         9a:98:99:46:5f:36:9f:ef:49:65:45:72:38:cf:c3:2c:7e:df:
         2d:77:8b:b2:20:ed:fc:89:e7:9c:97:f3:b1:57:51:74:9e:a8:
         6d:f4:05:7f:c5:12:fb:6a:42:2f:67:5f:68:dd:61:c9:3b:d8:
         03:fb:d6:72:c5:2b:39:c6:33:c9:c6:b0:78:a0:f9:59:09:51:
         f0:cb:cd:f2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEMBSmnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YzM4ODQwMjFkMWIwMmU4YzE2YjU1NTc0M2RmZWI5ZGE4ZTQ4ZTMxMB4XDTIyMDEw
MTAwNTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDM0MDM4YzgxM2M1
YjdhYjZjZTYwOWEwMjhjODI3ZjM1OTJkYTNkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKc/2xrrhB5V85WjJzsZBiyFeY5G9n55NwMUdyq8qaa/NVy3
8REff5ecdpUHbu5C13jn3S7mSs6RY8Cl5pfSozY7boRiI3zExaZ22vaCDOGbDUQl
Gibg5Oj1XPIgj19uyT9YDShitf7Yk0I6YjBJkRVZLbVE5mkHXk8AWQaMPilqMTp7
pb1zxqUxurK9RRx9mLUMh2h74fb7HuKOvusz/VZHkLfhHGvIL2Owo4ifH+MY+hN6
iTvR0ieQTZ4ZDizzxQsDh/pdajeXS8BuGsa8C4fRJa3J/2S1p2iNl4aZkzfi7XqF
KaMNnNrx2jnBfTjhAzrOE+CwiugKbat/Xf2lHckCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBTTQDjIE8W3q2zmCaAoyCfzWS2j0jAfBgNVHSMEGDAWgBTcOIQCHRsC6MFr
VVdD3+udqOSOMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNEaUVBaDBiQXVqQmExVlhROV9ybmFqa2pqRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMGNiMmY5LThlZjktNGVlYi05NjJhLWQ4YjRlMGQwZDZkNS8x
LzAwQTR5QlBGdDZ0czVnbWdLTWduODFrdG85SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MGNiMmY5LThlZjktNGVlYi05NjJhLWQ4YjRlMGQwZDZkNS8xLzNEaUVBaDBiQXVq
QmExVlhROV9ybmFqa2pqRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBU+FxGAwDQYJKoZIhvcNAQELBQAD
ggEBAMdUP3dSML+eQlYBVDXtlPPPRmBm7FajJ4y+EQ7qFxIP6ZEWvTz25fa4YbCf
KedcP7+Kq1xobqnjtjhtcodnBmgaDpRExk3hwdyMC6Y3FT0Rdrep/1H62sMli4N3
L/YS08Aa1K/VGGxAS0Ca21NsUOSw7VxMaWTOmrGyL92W7eQNeTo37HQY4UM3t9Zw
SqdSE2jMqVrihS9thVZcdcxwO5f1M+VTlp+uwm5nGqNmkhhejckHCJqYmUZfNp/v
SWVFcjjPwyx+3y13i7Ig7fyJ55yX87FXUXSeqG30BX/FEvtqQi9nX2jdYck72AP7
1nLFKznGM8nGsHig+VkJUfDLzfI=
-----END CERTIFICATE-----