Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/hWriSZEjc_Ext2_boOaD1CRC5gY.roa
File:                     hWriSZEjc_Ext2_boOaD1CRC5gY.roa (raw, json)
Hash identifier:          30BWzFSwZiys7SGZ+ZGd+/BPoMu2vz8ZaDm7dKvVD9E=
Subject key identifier:   85:6A:E2:49:91:23:73:F1:31:B7:6F:DB:A0:E6:83:D4:24:42:E6:06
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       03B893D9
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/hWriSZEjc_Ext2_boOaD1CRC5gY.roa
Signing time:             Sat 01 Jan 2022 01:55:37 +0000
ROA not before:           Sat 01 Jan 2022 01:55:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397540
IP address blocks:        176.125.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62428121 (0x3b893d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Jan  1 01:55:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=856ae249912373f131b76fdba0e683d42442e606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:6f:33:5e:66:ae:2e:b3:49:ba:cf:e1:2b:
                    05:bb:9e:61:75:ac:81:b2:72:d3:1c:d4:3c:62:da:
                    ce:c2:31:14:48:df:f6:b2:f3:53:c8:67:d0:e7:40:
                    32:71:7b:4e:33:32:ba:b5:9e:7d:4e:ee:24:6d:e9:
                    d7:2e:89:df:b1:7c:a4:14:fa:3c:86:dd:e5:8a:aa:
                    c9:9c:86:13:da:47:65:41:64:d0:62:f0:4d:0b:27:
                    3e:38:c5:a1:20:e9:1f:95:26:3a:a9:28:8f:d1:f4:
                    da:dc:aa:07:8f:d7:a6:89:da:63:bf:d7:24:07:47:
                    56:fa:63:c3:6f:82:60:b0:e1:cd:fc:c0:b4:4f:b4:
                    6f:72:74:e5:d6:24:70:5f:0b:10:b4:14:45:50:84:
                    8b:6e:f0:0b:c4:fd:6a:35:f7:ff:79:eb:3a:97:df:
                    a4:74:5a:da:04:dc:a4:e3:de:42:dd:e3:fb:4b:d1:
                    bf:5d:49:45:dc:9f:83:2b:a3:4e:b3:de:1c:50:cf:
                    ab:ba:f8:6f:3a:78:74:6d:68:74:e9:4d:d2:18:89:
                    e2:14:c5:74:41:84:d6:3d:9e:20:d7:b5:8a:d5:ac:
                    85:f4:45:cb:42:f6:38:96:20:3a:a3:0e:33:b1:4f:
                    91:0c:31:1a:0b:78:7f:9f:42:79:85:a3:02:68:1a:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:E2:49:91:23:73:F1:31:B7:6F:DB:A0:E6:83:D4:24:42:E6:06
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/hWriSZEjc_Ext2_boOaD1CRC5gY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.125.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:fd:06:41:98:2e:7c:83:6d:c2:ad:9e:41:b9:82:bf:19:bb:
         d7:0a:98:fa:8b:fc:04:6c:33:64:f2:74:20:a6:6f:31:b7:17:
         0e:bc:9b:d3:76:b8:bb:2c:5e:0c:83:3a:a7:a4:43:24:08:f1:
         09:c5:d1:1e:00:2a:a2:bf:7d:da:24:45:4e:c8:d6:26:b4:b9:
         98:42:3e:a1:b7:72:27:0a:d7:59:09:69:b6:41:1d:e9:53:52:
         b8:89:b1:22:ed:76:cf:78:d3:36:4c:53:e5:1f:a2:a1:15:8a:
         24:e6:3c:d7:a9:e2:08:4b:a1:36:69:be:bc:00:a4:50:dc:00:
         5d:79:71:0e:9d:d3:05:ad:37:f5:7f:1f:c0:40:af:58:92:31:
         e0:05:3f:ad:8a:30:52:73:33:22:d9:a6:5a:51:19:14:60:c0:
         26:bf:db:22:90:1e:ec:c3:60:7e:e2:ff:16:9d:4f:cb:ff:90:
         b7:eb:38:39:be:a1:7d:24:79:7c:48:bb:e0:80:3b:1a:f5:f0:
         ee:93:58:64:86:52:db:06:cb:a4:70:5d:26:3d:eb:fe:25:89:
         ba:1f:b8:14:ef:50:52:f0:e3:55:45:9f:f2:ee:14:7f:3e:42:
         ce:4b:cf:66:3e:41:a6:63:d0:b4:f2:c1:a4:94:cb:d0:c0:45:
         a8:b6:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----