Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/Q8R0klQFIzTWSpRUFf3dlo9Yyyg.roa
File:                     Q8R0klQFIzTWSpRUFf3dlo9Yyyg.roa (raw, json)
Hash identifier:          bi7w6cCKYv5XxSJDDQ+RLEHw8dQ/9tVQ3R2f2Slb2a8=
Subject key identifier:   43:C4:74:92:54:05:23:34:D6:4A:94:54:15:FD:DD:96:8F:58:CB:28
Certificate issuer:       /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial:       06A86E36
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/Q8R0klQFIzTWSpRUFf3dlo9Yyyg.roa
Signing time:             Sat 01 Jan 2022 00:58:12 +0000
ROA not before:           Sat 01 Jan 2022 00:58:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25575
IP address blocks:        213.145.224.0/19 maxlen: 22
                          2a03:1000::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111701558 (0x6a86e36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
        Validity
            Not Before: Jan  1 00:58:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=43c4749254052334d64a945415fddd968f58cb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:81:cc:50:95:a4:a1:49:ac:e3:b8:94:ec:
                    4d:66:3f:61:62:15:31:ed:43:5f:f5:c5:f9:86:79:
                    d2:78:af:1b:6d:09:f5:d3:4c:ab:2c:d7:c0:34:ef:
                    96:a3:a4:c0:7e:78:f6:47:92:f3:d4:08:6c:c8:d8:
                    97:b7:76:d7:fd:20:18:74:a6:f5:12:89:50:6d:d1:
                    99:27:13:a1:5d:9c:54:31:16:6e:01:c0:98:de:89:
                    5d:b8:64:3c:d4:5b:d3:82:72:1d:f0:44:29:98:9d:
                    d0:35:8d:34:f5:c8:94:f9:1e:9f:ea:5d:36:c5:d8:
                    c0:79:0d:a6:76:22:08:01:42:3b:ed:4f:21:fb:a7:
                    f8:76:fd:dc:31:93:fc:1f:9d:25:e8:a9:be:17:5d:
                    a4:ba:c0:56:79:0a:91:f8:23:31:51:d2:2b:a9:b0:
                    b7:8b:f4:00:41:08:06:55:5f:b6:ad:d0:25:10:a8:
                    51:c3:73:f9:fa:fd:81:e7:7a:96:8c:38:17:bd:0e:
                    0b:26:dc:fa:66:47:e9:18:68:87:43:27:5a:b3:cb:
                    f4:ba:55:0c:f2:c1:a5:be:79:f6:ac:14:ee:69:2b:
                    2c:f9:5f:db:7c:20:fa:a9:d0:62:0a:ee:77:32:4e:
                    9f:ee:b5:ff:06:96:93:b7:e3:c5:86:55:92:78:3a:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C4:74:92:54:05:23:34:D6:4A:94:54:15:FD:DD:96:8F:58:CB:28
            X509v3 Authority Key Identifier:
                keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/Q8R0klQFIzTWSpRUFf3dlo9Yyyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.145.224.0/19
                IPv6:
                  2a03:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:af:56:98:61:9c:ed:6f:41:f2:ea:1a:4b:d9:6a:f7:cb:
         0d:3a:fd:a9:e0:0f:09:8a:b4:38:f6:3c:80:15:2b:9e:bb:c7:
         51:5d:11:f2:8d:0c:87:4e:dc:d4:fa:c1:8e:82:b1:a7:a1:ac:
         6e:7d:88:b3:d6:db:97:01:15:e9:e9:5d:21:45:e3:6e:eb:75:
         e4:9f:bf:0d:6d:81:69:25:af:b0:4f:1f:c3:7b:36:9c:7c:92:
         62:f5:cf:43:48:7d:86:30:d3:46:ce:2c:30:b6:75:75:b1:9a:
         e8:fe:5d:d9:92:b0:36:07:6f:bf:e4:c2:61:a1:03:b1:ab:d6:
         1c:3f:3f:12:59:78:48:d9:1d:5b:12:55:b6:7b:63:73:52:0a:
         04:cd:76:c4:d4:c4:9c:d1:3c:ad:f4:61:ef:e7:d7:8f:3d:1d:
         9c:0c:ee:d1:99:16:d3:64:cd:32:59:a4:ff:19:55:a8:09:c4:
         63:c1:db:25:31:05:30:59:e1:19:1d:cf:c6:39:8e:44:55:b8:
         48:ce:05:ee:cc:bd:a0:34:ca:c5:67:ad:73:cc:e2:c8:9f:a1:
         ef:37:47:40:c2:af:5a:d6:a4:9c:10:2d:47:f7:93:8d:9b:cf:
         57:67:31:4d:2b:3d:7b:d3:13:bf:59:b2:c8:45:85:6f:cf:2c:
         f0:06:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----