Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa
File:                     YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa (raw, json)
Hash identifier:          R3VdwfZhi8azEHuALrSuG7K9fzfno1J6KWqJV165iww=
Subject key identifier:   60:DD:21:66:AB:02:49:DD:AE:9A:71:69:CF:91:BD:A9:91:09:FA:6B
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17D0464C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa
Signing time:             Sat 01 Jan 2022 04:54:32 +0000
ROA not before:           Sat 01 Jan 2022 04:54:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138145
IP address blocks:        85.209.254.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399525452 (0x17d0464c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60dd2166ab0249ddae9a7169cf91bda99109fa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:30:fd:86:48:34:99:5b:74:52:cb:28:08:
                    23:71:92:44:16:ec:c4:e2:58:bc:b1:7d:f9:f8:3b:
                    a2:ff:a1:06:62:33:db:05:05:dc:75:57:72:80:84:
                    7a:5a:13:88:17:ca:f4:43:2a:48:9d:1d:e5:1f:41:
                    af:e7:69:bd:fb:76:c4:a5:5a:3a:eb:b7:0d:b8:d0:
                    bd:d6:39:e2:c3:53:ee:a8:bd:2d:1e:71:05:a2:79:
                    8e:ae:d8:8f:39:f8:42:7c:9e:58:cc:69:87:51:a6:
                    22:34:b7:ad:c2:8d:3f:0e:1c:d2:c0:9a:53:65:5f:
                    cc:ec:41:8b:41:8f:f2:6f:d0:63:72:52:52:7f:f3:
                    33:61:77:30:11:09:d2:7d:f1:67:97:99:93:cb:15:
                    ea:02:7c:4a:e3:02:5d:06:d8:53:79:a3:92:39:3f:
                    b0:2f:e5:cf:41:49:86:8c:be:97:3b:51:7d:1d:f8:
                    e8:65:07:3c:17:73:6d:9e:c4:df:f6:31:f1:be:1b:
                    e3:af:d3:af:70:dc:af:a4:7a:f8:bb:c8:f7:29:fb:
                    02:a2:cc:cc:55:0b:2e:29:de:05:c6:5e:f1:11:ce:
                    b7:be:67:c2:b5:48:43:cc:be:2d:14:34:40:e5:eb:
                    76:de:22:e9:b8:d3:5a:93:65:a9:6f:76:c1:e2:66:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DD:21:66:AB:02:49:DD:AE:9A:71:69:CF:91:BD:A9:91:09:FA:6B
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YN0hZqsCSd2umnFpz5G9qZEJ-ms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:6c:95:a0:a8:33:50:f9:d2:13:13:76:fa:01:9e:cb:34:
         83:c9:56:c4:6a:ca:71:55:fe:bb:e6:21:50:ec:38:b5:17:f6:
         3d:a2:82:bb:75:58:2c:6e:76:1b:09:87:86:e4:f2:ba:cf:3d:
         21:85:0a:ec:32:3c:d3:8f:b7:f1:32:00:c5:1d:d8:82:94:c6:
         43:bc:09:8c:d7:81:11:45:b8:2a:9e:82:b3:23:fd:c4:8f:2b:
         f7:6f:df:ae:3a:ea:70:15:30:3f:71:ea:79:85:67:73:5c:1b:
         46:b3:a5:ad:96:75:47:32:77:af:b8:6f:20:7d:34:81:9f:18:
         96:0f:9e:0a:79:57:b9:9d:2e:f1:2b:10:1b:e3:62:b8:fb:b6:
         99:87:da:40:84:a9:51:c0:8f:5d:50:3e:8f:29:1d:9a:62:c4:
         19:bb:5c:16:50:31:a4:88:45:c0:40:19:f3:ff:71:b6:67:8a:
         92:cb:9e:36:ab:7f:80:0d:e0:97:66:18:e4:75:31:2f:7f:41:
         82:f8:e9:db:b4:c1:23:58:5e:d6:25:37:30:8e:2d:fb:e9:8b:
         a6:d4:35:53:b8:a2:31:f5:26:c6:4b:d3:33:b1:2a:fb:bf:e5:
         42:ce:1a:25:13:88:7c:6e:6d:2d:d3:7b:5f:07:0b:a8:0d:4d:
         ac:4f:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----