Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/kcunkpjwYzOKAK0eIQLVdc2PoXk.roa
File:                     kcunkpjwYzOKAK0eIQLVdc2PoXk.roa (raw, json)
Hash identifier:          MsPDLY5Fr3cd/9tIur6J8npMXkMuOm93VGKtA9imd1w=
Subject key identifier:   91:CB:A7:92:98:F0:63:33:8A:00:AD:1E:21:02:D5:75:CD:8F:A1:79
Certificate issuer:       /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial:       03FAE450
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/kcunkpjwYzOKAK0eIQLVdc2PoXk.roa
Signing time:             Fri 06 May 2022 13:25:34 +0000
ROA not before:           Fri 06 May 2022 13:25:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        185.255.4.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66774096 (0x3fae450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
        Validity
            Not Before: May  6 13:25:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=91cba79298f063338a00ad1e2102d575cd8fa179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:87:c4:a9:de:6b:e3:ab:e6:ee:f4:59:a5:
                    06:74:fb:a0:04:cd:76:56:74:76:ee:e5:57:79:4c:
                    5c:3c:9a:26:91:50:6e:e0:dc:61:c2:2e:f4:20:9e:
                    1a:db:3c:ce:60:ff:25:43:19:4f:2e:9b:f2:31:ef:
                    00:91:4e:3e:f5:5c:2f:b0:8a:94:4b:16:59:96:d4:
                    23:89:28:ed:40:8a:0d:14:fb:33:49:5a:ef:f8:47:
                    f8:c7:6d:0d:8f:31:88:3a:da:5f:57:ed:f5:7c:70:
                    f6:f2:a6:86:f9:c5:c6:96:46:7f:c5:fc:e6:5a:91:
                    c4:8c:1f:24:f6:f1:b8:bb:c3:4c:5f:47:c9:4d:d6:
                    6c:51:be:1d:be:62:dd:3c:86:58:3c:fb:4f:e2:3e:
                    2f:43:1a:56:be:f8:a0:a6:01:25:35:6f:a7:46:56:
                    2b:45:b2:5e:d1:08:d8:2a:2a:f9:bc:89:6f:d5:f9:
                    fe:ab:c1:94:e0:9c:6f:e8:3e:e1:48:b5:fa:27:12:
                    08:ed:cc:5d:7c:51:8a:37:67:88:c7:1c:ba:b2:19:
                    8d:60:bd:1a:a5:9c:86:4a:86:6a:a8:c1:2c:a8:d4:
                    f2:ee:70:7f:8a:7f:b0:cb:41:17:04:69:ed:a1:a1:
                    0e:85:31:5d:90:9c:df:4d:65:f4:ca:52:51:92:c7:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CB:A7:92:98:F0:63:33:8A:00:AD:1E:21:02:D5:75:CD:8F:A1:79
            X509v3 Authority Key Identifier:
                keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/kcunkpjwYzOKAK0eIQLVdc2PoXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:4a:8d:7a:b5:55:58:dd:9f:95:eb:0c:1c:88:2f:1a:ce:
         96:c0:cf:08:09:cf:16:f1:69:2b:5d:ec:1e:64:ce:1c:0f:9b:
         17:c6:b4:b5:ed:1a:7e:a2:61:92:a5:7d:14:47:bb:a1:69:7e:
         63:24:65:2a:0d:0a:44:7c:bd:d9:a4:92:e8:0d:29:b2:78:6b:
         a4:95:22:49:a1:00:1c:69:d4:e5:e9:bc:7e:a6:19:07:ca:5e:
         6f:96:5b:c9:d7:06:f5:e1:62:83:3b:26:66:bb:9c:20:ad:60:
         ef:a0:20:a6:75:11:68:c5:4e:93:0e:a5:db:33:65:e4:dd:6d:
         ee:32:a7:76:b0:c5:82:ae:54:5d:c9:aa:c7:ff:7c:bd:b5:0d:
         b1:4d:1e:5d:4c:24:c4:a8:5d:b5:88:83:a3:36:e9:f6:7c:7e:
         d9:80:dc:bd:a3:d7:67:dc:06:f1:c5:c0:91:52:b8:df:05:1b:
         30:9d:8f:4b:f5:fc:8a:39:0c:63:9a:96:50:a7:94:d7:f3:5e:
         66:81:e4:d4:a6:18:de:06:bd:b5:bf:3c:53:6c:36:3f:08:b2:
         b2:de:dc:a5:89:45:e4:c4:e8:72:17:c7:76:0c:e6:00:a4:46:
         9c:36:2d:50:85:e5:43:7b:d8:cb:e5:fe:e0:e4:5a:67:8a:8a:
         16:31:1d:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA/rkUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZmYyNDcyNmRmM2U3N2Y2ZjRjOGUwNDM2NjEzYjM1MTEwZWVhZjM4MB4XDTIyMDUw
NjEzMjUzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTFjYmE3OTI5OGYw
NjMzMzhhMDBhZDFlMjEwMmQ1NzVjZDhmYTE3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxhh8Sp3mvjq+bu9FmlBnT7oATNdlZ0du7lV3lMXDyaJpFQ
buDcYcIu9CCeGts8zmD/JUMZTy6b8jHvAJFOPvVcL7CKlEsWWZbUI4ko7UCKDRT7
M0la7/hH+MdtDY8xiDraX1ft9Xxw9vKmhvnFxpZGf8X85lqRxIwfJPbxuLvDTF9H
yU3WbFG+Hb5i3TyGWDz7T+I+L0MaVr74oKYBJTVvp0ZWK0WyXtEI2Coq+byJb9X5
/qvBlOCcb+g+4Ui1+icSCO3MXXxRijdniMccurIZjWC9GqWchkqGaqjBLKjU8u5w
f4p/sMtBFwRp7aGhDoUxXZCc301l9MpSUZLHlmsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSRy6eSmPBjM4oArR4hAtV1zY+heTAfBgNVHSMEGDAWgBTf8kcm3z539vTI
4ENmE7NREO6vODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNfSkhKdDgtZF9iMHlPQkRaaE96VVJEdXJ6Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYTk2MDI0LTY1NTUtNGU4ZC1hZjM3LTYyYmI2ZDYzZTU5ZC8x
L2tjdW5rcGp3WXpPS0FLMGVJUUxWZGMyUG9Yay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YTk2MDI0LTY1NTUtNGU4ZC1hZjM3LTYyYmI2ZDYzZTU5ZC8xLzNfSkhKdDgtZF9i
MHlPQkRaaE96VVJEdXJ6Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbn/BDANBgkqhkiG9w0BAQsFAAOC
AQEAfhNKjXq1VVjdn5XrDByILxrOlsDPCAnPFvFpK13sHmTOHA+bF8a0te0afqJh
kqV9FEe7oWl+YyRlKg0KRHy92aSS6A0psnhrpJUiSaEAHGnU5em8fqYZB8peb5Zb
ydcG9eFigzsmZrucIK1g76AgpnURaMVOkw6l2zNl5N1t7jKndrDFgq5UXcmqx/98
vbUNsU0eXUwkxKhdtYiDozbp9nx+2YDcvaPXZ9wG8cXAkVK43wUbMJ2PS/X8ijkM
Y5qWUKeU1/NeZoHk1KYY3ga9tb88U2w2Pwiyst7cpYlF5MTochfHdgzmAKRGnDYt
UIXlQ3vYy+X+4ORaZ4qKFjEd5A==
-----END CERTIFICATE-----