Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MKuxH3FCOgPujeRaWZZIGQoCfj0.roa
File:                     MKuxH3FCOgPujeRaWZZIGQoCfj0.roa (raw, json)
Hash identifier:          hHFZMXWqb4rbjGTTROKrTdGfsvIelT875X3e/4tMWjI=
Subject key identifier:   30:AB:B1:1F:71:42:3A:03:EE:8D:E4:5A:59:96:48:19:0A:02:7E:3D
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17F024F8
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MKuxH3FCOgPujeRaWZZIGQoCfj0.roa
Signing time:             Sat 01 Jan 2022 04:54:49 +0000
ROA not before:           Sat 01 Jan 2022 04:54:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211486
IP address blocks:        185.133.194.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401614072 (0x17f024f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=30abb11f71423a03ee8de45a599648190a027e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:51:12:34:b7:b7:85:9e:4a:58:4a:85:fa:
                    82:7b:45:0a:70:c7:34:43:bf:92:34:e1:9d:13:5b:
                    1d:b1:0b:ae:97:98:66:a6:28:61:3d:23:dc:54:be:
                    65:8d:4e:fb:2d:ae:ae:f8:50:2f:23:30:30:d9:39:
                    ca:ff:a6:85:55:1e:8d:2e:4d:09:df:55:16:a1:03:
                    f6:3f:b2:57:3e:ba:05:96:ab:93:bf:09:dc:65:0c:
                    6f:23:1d:0c:40:4c:64:e3:27:7b:e1:37:d5:9c:06:
                    86:10:8f:97:97:7c:93:23:8a:3f:87:c2:57:92:bb:
                    9c:9e:ff:9b:71:60:43:f5:5a:2b:6e:d7:f3:29:64:
                    38:c8:30:5c:be:b0:68:94:0c:b8:ca:47:7d:73:cd:
                    d3:1b:20:6a:96:47:4c:8f:52:3c:0a:9f:f6:0d:2d:
                    58:6b:87:8b:5d:20:e4:3b:33:4e:8f:94:d4:98:6e:
                    53:ea:0b:c8:ef:58:44:7d:1d:cb:6c:27:83:cd:cd:
                    26:4f:52:fa:5b:be:d6:10:fe:90:12:8a:90:3c:4d:
                    7b:2a:4f:93:8d:02:4b:53:d9:9a:d9:6b:f0:2f:ce:
                    e2:36:ee:e1:b4:60:4b:07:1f:d1:5c:5d:58:06:27:
                    d4:8e:4b:7f:47:0e:02:bc:0c:48:8c:28:0e:0a:02:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:B1:1F:71:42:3A:03:EE:8D:E4:5A:59:96:48:19:0A:02:7E:3D
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MKuxH3FCOgPujeRaWZZIGQoCfj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.133.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:1d:06:40:dd:16:22:c3:66:2f:29:c4:46:d2:05:8f:f9:16:
         05:50:84:5e:f1:d4:b2:0b:8d:3f:84:6a:6e:93:65:31:1c:b2:
         63:c4:cc:0e:28:05:3a:ba:50:58:7c:4f:fc:5b:be:98:8a:10:
         65:5f:c3:8b:d2:41:c0:09:fc:c9:5c:a5:69:b6:a3:0e:44:ad:
         df:c4:56:c9:ae:36:52:6f:35:02:3b:48:d9:bf:dc:5b:ea:63:
         84:78:6b:c5:a0:94:2e:07:03:95:34:05:0b:c9:32:2b:6b:fa:
         cc:94:09:5a:c1:bb:eb:21:e8:71:80:5b:d3:fe:cd:40:e1:31:
         f7:40:d0:e5:44:87:4d:8a:49:00:54:43:15:e3:4e:17:89:38:
         c2:8a:6c:cc:af:56:a7:45:b5:75:54:87:f1:cf:c0:ae:91:94:
         70:e2:a0:47:f0:82:93:83:1a:e5:82:80:05:fe:49:ca:8a:9b:
         47:3a:90:39:64:55:d0:66:a7:8f:27:e2:50:7a:f3:f4:37:dd:
         08:f1:13:5d:6b:65:93:f7:61:2f:a9:66:d6:c9:f3:e6:69:1a:
         46:ec:49:24:ae:67:9d:01:50:be:1c:11:2f:66:94:fe:58:4d:
         4a:cb:bc:70:19:55:ce:dd:4f:72:e2:7d:81:a2:ee:00:ab:df:
         04:50:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----