Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/60y-yEiIAAIRDLmtrt9OlaDse7A.roa
File:                     60y-yEiIAAIRDLmtrt9OlaDse7A.roa (raw, json)
Hash identifier:          0AN5ynlzMopNN2z1sp6kXJUqgHLURwRoTIIUFOxCCOk=
Subject key identifier:   EB:4C:BE:C8:48:88:00:02:11:0C:B9:AD:AE:DF:4E:95:A0:EC:7B:B0
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17DF0A13
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/60y-yEiIAAIRDLmtrt9OlaDse7A.roa
Signing time:             Sat 01 Jan 2022 04:54:38 +0000
ROA not before:           Sat 01 Jan 2022 04:54:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204526
IP address blocks:        194.34.230.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400493075 (0x17df0a13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb4cbec848880002110cb9adaedf4e95a0ec7bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:7c:7a:c6:4f:e6:a6:28:c0:fb:09:c3:16:
                    86:15:1a:fb:e9:06:ec:da:6c:72:be:6c:7c:ca:03:
                    3a:8e:44:a8:66:bc:ac:03:57:60:65:29:7b:bd:a5:
                    20:18:fb:b6:ae:bd:56:34:e7:90:e2:b0:89:73:db:
                    0d:d9:bc:0b:9d:ae:be:2b:fb:ea:82:dc:29:e1:04:
                    01:6f:3f:80:8e:46:b7:dd:d7:1b:06:b0:7b:3f:2e:
                    c7:45:8e:8c:31:96:33:bd:a2:e0:11:3e:48:a8:74:
                    07:2e:23:62:b6:18:36:11:40:53:13:f0:9b:47:be:
                    2a:40:52:fe:01:32:f1:18:53:17:07:10:a2:c1:29:
                    f2:c0:86:26:03:e2:da:62:67:85:ac:15:8a:07:53:
                    f2:42:ee:c1:fa:4c:a0:14:a3:01:29:c8:e5:ef:c5:
                    7e:e8:3b:c5:88:32:8d:ae:5c:d3:2c:23:98:e1:ea:
                    81:27:f5:a2:9f:46:d7:e0:b4:3e:66:fc:93:bc:8f:
                    76:44:f8:1a:fc:de:e9:0c:52:76:f4:c6:7b:fe:fc:
                    53:ed:85:a6:09:17:9e:c0:5e:de:98:ce:3e:c5:cb:
                    fe:dd:db:28:97:bf:27:7a:d6:e7:4b:7f:75:68:3d:
                    7a:21:90:94:e3:26:8e:43:a2:b2:dd:85:5a:d2:42:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:BE:C8:48:88:00:02:11:0C:B9:AD:AE:DF:4E:95:A0:EC:7B:B0
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/60y-yEiIAAIRDLmtrt9OlaDse7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d4:f3:2f:16:d6:00:ee:d1:8f:4c:b0:1f:10:c2:ea:2e:c3:
         ca:73:5b:24:ba:84:4f:3b:8e:f5:e2:aa:0a:10:31:e1:34:27:
         3a:d9:16:ef:7a:f2:da:26:10:02:54:f5:bf:e7:fd:ba:5e:70:
         b0:bb:e0:eb:6d:08:d1:a6:f8:98:97:e9:ae:88:82:e4:b7:3e:
         65:90:67:f0:e1:a7:b0:48:65:6d:ee:ad:32:f0:1c:b4:12:3c:
         db:34:a2:10:85:ba:5f:cc:1e:b6:2b:af:70:0e:11:89:35:b7:
         e7:65:df:25:8c:71:df:42:2b:d6:d5:71:c1:1e:74:7c:c6:c7:
         e7:e6:8e:e1:da:e7:c9:b9:58:c5:6e:60:bd:25:23:ce:d8:5a:
         b1:b5:82:e4:ad:b6:7f:ba:29:66:26:90:3d:e0:7f:44:72:a2:
         76:9f:86:76:7b:75:af:db:1d:e9:f5:b2:50:33:07:dd:77:a5:
         e6:7f:c8:49:88:14:16:3d:e2:c1:4a:4e:da:1b:23:a0:bc:e8:
         08:48:8a:b8:dc:0c:1e:dd:20:1a:4c:7e:68:c7:00:b4:ea:89:
         53:4a:df:cc:0a:c8:bb:83:5a:16:b6:c5:eb:7b:6a:00:13:cc:
         c0:45:9e:8c:e1:d0:0d:6d:91:73:4a:50:69:07:9f:17:14:4c:
         5e:f7:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----