Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/V_LvPz4n1LYhoBszpNDiFUpW0-Y.roa
File:                     V_LvPz4n1LYhoBszpNDiFUpW0-Y.roa (raw, json)
Hash identifier:          TxBfzwV8Gmh0wBp+3vJLIUzQpf8+Ndo6LUj5hoanaio=
Subject key identifier:   57:F2:EF:3F:3E:27:D4:B6:21:A0:1B:33:A4:D0:E2:15:4A:56:D3:E6
Certificate issuer:       /CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Certificate serial:       D9D9D3
Authority key identifier: F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/V_LvPz4n1LYhoBszpNDiFUpW0-Y.roa
Signing time:             Mon 14 Feb 2022 09:21:58 +0000
ROA not before:           Mon 14 Feb 2022 09:21:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        146.19.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14277075 (0xd9d9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
        Validity
            Not Before: Feb 14 09:21:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57f2ef3f3e27d4b621a01b33a4d0e2154a56d3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:1a:ab:74:7d:61:d4:52:02:56:a5:55:66:
                    ad:15:9c:c2:a3:17:9c:2e:50:8e:d3:2a:9d:d5:0d:
                    75:e6:3f:ad:52:38:15:a0:00:e9:fc:c5:d1:75:d5:
                    10:b5:fd:62:33:11:92:a5:14:e8:6f:04:78:7c:40:
                    4b:df:9e:0d:14:ad:af:c9:c7:b0:9a:38:ce:0c:14:
                    91:07:0a:fd:62:e7:d4:8a:f3:4e:7c:02:1f:58:b4:
                    59:66:52:fe:47:e9:27:45:d7:21:62:75:90:45:04:
                    66:7a:91:f2:71:6e:2f:ac:bc:7d:40:74:22:e3:a8:
                    9a:aa:5f:02:07:a5:96:3e:35:56:31:e5:5f:aa:ea:
                    96:13:65:dc:1a:6f:2f:90:75:4b:5c:f3:d4:2f:02:
                    37:2e:5b:72:7f:95:1d:95:ef:7b:2d:a3:b9:8e:87:
                    2c:cc:fc:ec:56:de:15:44:b4:51:c0:ea:9b:84:b8:
                    4e:7b:44:13:63:9b:ea:57:ac:88:fa:d4:51:2b:a0:
                    ce:67:c1:2c:4a:52:06:da:3e:ef:17:8c:c1:b6:6c:
                    75:61:da:c8:a8:34:02:18:58:c2:ed:8c:6a:25:a5:
                    01:4c:4a:8d:8e:36:7a:de:e0:87:71:1f:e9:fe:20:
                    40:97:39:d2:48:3d:29:78:bb:c9:29:1c:9a:15:ab:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F2:EF:3F:3E:27:D4:B6:21:A0:1B:33:A4:D0:E2:15:4A:56:D3:E6
            X509v3 Authority Key Identifier:
                keyid:F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/V_LvPz4n1LYhoBszpNDiFUpW0-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:fb:16:40:a6:c4:d4:83:d1:c6:4e:96:63:9f:49:48:fd:
         1d:6a:0b:96:f1:7a:2d:ae:a7:34:bf:d6:2a:3e:0a:8a:33:8f:
         09:cb:44:67:83:07:58:3b:bc:e8:ae:bb:d8:9e:93:4d:ab:11:
         09:f5:b8:bc:96:ed:65:a2:19:26:0c:65:2d:6b:74:c8:b6:42:
         ec:a1:66:33:29:b8:e3:d4:b5:dd:c5:d4:f6:e2:fa:18:0b:b0:
         e9:c0:dc:e9:19:9b:78:26:1b:5c:2d:be:86:f8:75:2b:81:e6:
         81:10:f7:6b:46:4b:a5:5b:86:e4:a9:b2:37:9a:1f:b9:78:c5:
         36:c8:85:28:fe:53:ab:e9:67:82:c1:8b:d6:9f:d9:c0:6f:b3:
         bc:52:1e:9b:d6:77:37:eb:68:3d:93:07:e6:fc:cd:a3:e9:9e:
         64:49:18:30:a9:8d:b8:2a:09:f5:e6:a2:65:09:c9:3d:2e:30:
         d8:95:1a:17:e6:51:53:5b:13:1d:02:4c:d6:f8:0a:f2:95:6a:
         68:dc:ef:75:bb:28:04:d0:01:72:90:3c:cb:f6:7e:d4:43:cd:
         ef:82:1f:a9:49:93:58:23:21:c3:ae:b4:b5:87:67:9f:6f:ab:
         e5:6f:52:f1:63:75:1e:e6:cb:30:25:e3:c3:dd:b9:05:e5:2c:
         5a:7d:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----