Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/X8B4ZIxvWlPGihZOFAtSLRtByEo.roa
File:                     X8B4ZIxvWlPGihZOFAtSLRtByEo.roa (raw, json)
Hash identifier:          VyeQJIX4jyDygPTKI3LD5jdBsBWw7cMn/gmBXI8SeUI=
Subject key identifier:   5F:C0:78:64:8C:6F:5A:53:C6:8A:16:4E:14:0B:52:2D:1B:41:C8:4A
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17AB24D6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/X8B4ZIxvWlPGihZOFAtSLRtByEo.roa
Signing time:             Sat 01 Jan 2022 04:54:08 +0000
ROA not before:           Sat 01 Jan 2022 04:54:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42495
IP address blocks:        185.115.241.0/24 maxlen: 24
                          2a06:7242::/48 maxlen: 48
                          2a06:7242::/43 maxlen: 43

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397092054 (0x17ab24d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fc078648c6f5a53c68a164e140b522d1b41c84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:af:49:a2:55:34:1d:29:89:4d:81:eb:bd:d8:
                    64:06:f8:d8:9e:0b:fc:7f:3b:ab:b2:c0:34:2d:2b:
                    dc:51:37:04:90:a5:26:d9:91:6b:0a:61:9e:b1:af:
                    e9:52:9a:59:11:85:98:f1:71:a3:c8:d8:e6:94:4c:
                    6e:f3:71:f2:e2:27:65:0a:9e:e0:f4:cd:87:d0:20:
                    62:5d:f9:c1:ff:e5:15:c0:bd:16:e6:2e:1e:32:c8:
                    3e:dc:5c:33:19:3c:d5:58:42:90:33:26:71:f5:7f:
                    8c:ce:4d:98:c5:44:fa:70:ce:3b:30:81:a7:85:ee:
                    98:07:16:4c:47:3a:eb:eb:e8:e6:16:53:cd:93:1c:
                    29:c5:04:48:45:9c:f3:5a:6a:12:c1:b7:78:7a:69:
                    2a:50:3a:b4:42:c6:7f:ef:53:59:bf:10:c8:7c:0a:
                    2f:85:ab:d9:97:9b:53:70:eb:0e:6d:b3:2c:35:39:
                    85:56:ed:05:03:99:3b:30:69:ae:46:2d:f2:c0:2a:
                    f4:58:bf:c3:75:e3:cb:f7:4c:9f:38:de:78:5f:cf:
                    67:6d:c9:a8:fe:c1:d2:97:cd:49:82:1d:26:99:25:
                    23:05:3b:aa:2d:bd:10:9a:6b:3a:9c:e7:bd:28:e6:
                    a2:0e:f5:97:76:c4:5c:2a:ed:f0:ca:ac:ac:36:d3:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C0:78:64:8C:6F:5A:53:C6:8A:16:4E:14:0B:52:2D:1B:41:C8:4A
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/X8B4ZIxvWlPGihZOFAtSLRtByEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.241.0/24
                IPv6:
                  2a06:7242::/43

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:21:20:89:b8:d2:0e:19:ad:76:3e:91:23:6e:b9:98:80:
         30:63:90:10:f5:4a:83:62:46:28:38:e4:7a:52:1e:e8:72:fa:
         72:59:d1:45:9c:17:2f:06:ff:f1:8f:d2:0e:ae:68:0b:0a:5d:
         1c:ec:07:48:4f:64:4e:7b:1f:33:1a:ff:85:f4:f3:9e:67:c4:
         9e:20:82:20:43:65:09:77:4b:40:a5:d8:b4:62:82:ad:ba:3e:
         7a:34:71:23:c1:46:34:a8:2f:6f:f7:fb:e2:64:57:4d:a7:43:
         21:70:d6:25:72:93:71:f2:4b:62:64:43:1b:22:48:76:38:67:
         4a:42:ec:ac:78:b5:2a:22:06:2a:91:77:27:74:5b:dd:4d:05:
         15:bc:ff:33:44:b7:32:78:3b:d5:a1:0b:68:92:f6:58:ba:ff:
         41:6e:a7:e5:83:8c:9f:0b:e1:eb:18:ba:de:11:ea:cf:f4:64:
         e7:a7:83:0e:99:a8:37:2d:b5:23:23:60:f0:05:31:0c:f4:bf:
         69:ff:0d:a3:af:7e:d9:28:2a:9c:2d:61:31:30:92:8a:be:f6:
         05:87:a2:55:b4:59:b8:fa:c1:28:2f:97:ef:15:70:9c:8c:e0:
         94:02:65:13:4e:1f:5f:24:14:b6:62:58:5c:7c:3d:6a:d0:c6:
         a2:d2:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----