Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/nOBbkDxyeRDnSobXLUNwyJTsnj4.roa
File:                     nOBbkDxyeRDnSobXLUNwyJTsnj4.roa (raw, json)
Hash identifier:          Q8buGpUFevDwyUw5INcV/mQ2pQk38ejMLrAaTLsHjOg=
Subject key identifier:   9C:E0:5B:90:3C:72:79:10:E7:4A:86:D7:2D:43:70:C8:94:EC:9E:3E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       05676FD0
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/nOBbkDxyeRDnSobXLUNwyJTsnj4.roa
Signing time:             Sat 01 Jan 2022 07:02:04 +0000
ROA not before:           Sat 01 Jan 2022 07:02:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208259
IP address blocks:        45.129.107.0/24 maxlen: 24
                          2a0e:47c7:1000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90664912 (0x5676fd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Jan  1 07:02:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ce05b903c727910e74a86d72d4370c894ec9e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:a3:9d:28:37:26:82:54:02:82:fd:ce:9c:
                    e5:bd:c1:49:2f:9b:95:bb:79:99:76:99:14:07:5c:
                    aa:a1:92:59:83:8a:14:c1:62:0f:2f:05:96:1e:09:
                    b7:64:9f:20:f3:6b:be:b2:e7:eb:34:34:f9:87:f3:
                    e7:cc:17:b3:61:5b:17:e4:5f:2c:f2:c2:77:4f:d0:
                    65:b2:a8:c3:bb:39:79:7e:40:af:3d:34:4d:c3:46:
                    e7:da:96:ee:c2:60:5e:e8:80:1a:e2:40:e5:54:b1:
                    7d:92:4a:8e:6a:71:fd:4c:59:2f:58:ca:29:36:b2:
                    59:5e:cf:16:99:7e:1e:a2:8e:15:ce:56:dc:99:97:
                    9a:80:e5:75:da:c4:b4:88:1c:39:91:e3:49:07:45:
                    43:ce:59:a9:be:91:26:20:e1:f3:4b:e6:b1:59:a2:
                    7f:00:50:0d:30:fc:e5:cd:da:03:09:a7:0c:8a:9f:
                    45:a0:3c:7d:0e:54:c8:d9:02:a2:de:76:f1:ff:52:
                    19:fc:e9:6f:c2:e2:8c:bd:4e:a4:21:f8:7b:d8:72:
                    2a:b0:3c:c4:e2:8a:d2:0a:7c:58:98:fa:c1:b4:d9:
                    de:bc:20:f4:44:08:00:3c:e9:44:86:03:04:a5:33:
                    25:e9:d8:cb:a6:e3:c1:af:fb:8e:0d:74:79:46:3d:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:5B:90:3C:72:79:10:E7:4A:86:D7:2D:43:70:C8:94:EC:9E:3E
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/nOBbkDxyeRDnSobXLUNwyJTsnj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.107.0/24
                IPv6:
                  2a0e:47c7:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:a6:65:39:83:5d:58:8a:76:fa:f7:1a:89:83:91:a4:c2:b9:
         92:a9:41:c9:7b:9e:2e:87:1b:9b:45:3a:78:1e:f4:22:a0:90:
         21:8d:f9:74:38:3a:1c:77:f1:3f:58:38:c0:ff:4a:95:60:6e:
         72:2b:ef:c4:3f:fd:a9:0b:98:7d:d3:a7:a7:64:44:61:88:4f:
         55:12:80:c8:e8:d9:ed:12:9f:d9:df:74:64:04:f1:83:02:ce:
         b5:d9:ac:d8:b4:bf:28:88:bd:3d:4f:55:48:98:7d:59:9c:84:
         4a:e1:5f:51:9f:51:f3:f8:4c:76:8c:bd:06:fe:3c:13:4e:59:
         5c:ba:34:35:d1:0e:28:95:93:8e:f3:05:51:f9:f4:da:c1:1b:
         c7:de:ae:e2:82:ae:ef:b0:7d:c0:0f:e8:78:3c:8d:2e:42:c8:
         85:fe:35:5d:84:7a:0b:0a:c7:1b:ce:59:8e:f5:e1:16:c9:37:
         e7:fb:9e:9a:9f:30:67:d1:3e:7d:c7:cd:e4:e4:7b:aa:e4:18:
         92:32:49:92:a6:55:fb:0f:dc:38:80:b2:ed:33:e6:14:9a:1a:
         80:2f:d3:c5:15:4c:80:1b:1f:bb:b1:92:1f:75:25:f2:eb:ee:
         28:af:30:93:60:2d:47:bb:1c:29:b2:bd:2b:c8:fa:a0:28:87:
         d9:9a:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----