Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HnSAmQKJkcAAFreh8lD4Id760U8.roa
File:                     HnSAmQKJkcAAFreh8lD4Id760U8.roa (raw, json)
Hash identifier:          2QNoZEuJXnsBDFXrLQ21uBIvq97xwUf9c/Uzy9GN9nY=
Subject key identifier:   1E:74:80:99:02:89:91:C0:00:16:B7:A1:F2:50:F8:21:DE:FA:D1:4F
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17C65852
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HnSAmQKJkcAAFreh8lD4Id760U8.roa
Signing time:             Sat 01 Jan 2022 04:54:24 +0000
ROA not before:           Sat 01 Jan 2022 04:54:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61049
IP address blocks:        185.177.83.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398874706 (0x17c65852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e748099028991c00016b7a1f250f821defad14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:fa:e7:27:f9:ad:b8:cf:c2:8e:bb:c6:b2:
                    2a:c9:2f:f3:7a:b2:3c:d6:f6:88:29:22:9b:14:4e:
                    95:3c:68:20:2a:9e:87:10:f1:0f:e5:47:42:ca:61:
                    00:97:b6:19:4e:b9:0d:34:cc:94:46:11:44:94:37:
                    b1:89:41:03:c3:3d:2b:06:2d:95:0d:24:fc:0a:e3:
                    0d:7a:5c:97:ec:c9:dc:47:83:f8:26:2a:0a:56:8a:
                    85:f2:2c:32:f8:48:45:98:a5:78:a9:1b:36:bc:91:
                    cf:08:a2:14:6a:e0:1a:9f:48:86:c3:c1:8a:2f:fc:
                    4e:17:9d:af:86:22:5c:46:b5:c3:84:01:f3:91:5b:
                    19:82:85:21:29:a5:dd:19:33:66:27:ba:07:00:bc:
                    78:cd:4a:86:27:e6:51:3b:6a:bf:72:14:6e:82:e9:
                    7c:9a:cd:d5:7c:92:30:25:6c:1b:01:e7:48:2d:9b:
                    71:73:96:72:31:cc:96:10:95:b9:83:1a:fa:ff:af:
                    57:a6:5a:4a:27:07:1f:22:11:c1:c0:7a:b6:96:db:
                    02:69:c3:77:df:13:42:c5:f8:b0:88:8a:4e:03:30:
                    2a:af:22:26:aa:0a:ed:e4:7b:fc:7f:ee:f4:10:ac:
                    db:bc:87:7b:57:93:b1:fe:46:e9:59:7a:45:23:e2:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:74:80:99:02:89:91:C0:00:16:B7:A1:F2:50:F8:21:DE:FA:D1:4F
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HnSAmQKJkcAAFreh8lD4Id760U8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:84:ad:49:7d:aa:fb:65:0d:b1:3c:67:34:ad:4f:e8:63:21:
         45:e0:95:ec:75:8f:aa:d0:9f:9f:05:bf:f4:fd:21:f1:25:c3:
         20:fc:dd:b9:54:63:73:c1:1e:b0:69:7a:a2:7d:fd:ab:45:b5:
         ca:9a:03:62:1e:28:53:07:3e:5c:5b:bc:86:8e:e9:11:0a:86:
         18:7a:e2:89:20:58:0b:8d:5f:c8:d2:df:50:36:6f:cb:c4:97:
         09:df:7e:91:c0:ec:55:20:ef:ba:8f:71:67:4b:8b:47:22:c1:
         45:33:e7:da:a9:37:22:09:25:7c:b8:43:8e:24:a7:15:0e:bf:
         a3:79:a8:49:3b:18:e7:9e:7a:1f:85:45:fb:e4:92:29:1b:c7:
         d1:cb:18:6f:72:09:4b:31:bf:c0:ba:41:78:b1:ed:68:09:34:
         c5:7a:30:20:64:28:1a:18:98:f5:77:e1:e2:7e:2c:81:e2:f1:
         97:56:29:83:e7:e8:2a:e8:8e:2c:fa:f1:9e:7b:ca:6f:7e:ef:
         f4:91:94:6b:d3:1f:f8:68:33:22:13:1c:46:d5:31:93:8a:40:
         97:f3:b2:96:23:47:cb:7d:95:12:45:e8:c1:55:d1:ca:36:81:
         f9:f2:cb:79:14:a7:57:da:f9:e4:38:6d:a1:f2:f4:a7:15:cc:
         62:16:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----