Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gQyRnBYkfXGEZ4HeCI_ENOakMUk.roa
File:                     gQyRnBYkfXGEZ4HeCI_ENOakMUk.roa (raw, json)
Hash identifier:          iXup2Fs6AeWM+zGIT6ngjpiR0ZhB4qK0d47pYobuJbA=
Subject key identifier:   81:0C:91:9C:16:24:7D:71:84:67:81:DE:08:8F:C4:34:E6:A4:31:49
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       1852946F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gQyRnBYkfXGEZ4HeCI_ENOakMUk.roa
Signing time:             Thu 20 Jan 2022 11:54:07 +0000
ROA not before:           Thu 20 Jan 2022 11:54:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212322
IP address blocks:        193.160.215.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408065135 (0x1852946f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan 20 11:54:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=810c919c16247d71846781de088fc434e6a43149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:10:66:78:65:63:6a:79:77:b4:59:6b:d7:
                    af:c9:99:4d:d0:fb:03:38:c8:ee:de:e6:59:26:51:
                    a7:6e:2a:bd:13:47:15:6c:f6:1d:11:1d:33:b5:f1:
                    5a:7f:bb:c9:ee:56:61:d3:4a:c3:63:2e:27:c9:9c:
                    e6:ed:d1:90:d6:c1:3c:d3:55:b6:1b:52:4a:20:82:
                    4c:83:5e:88:bf:67:48:f4:bb:28:c5:a2:77:23:f5:
                    07:94:18:60:3f:2e:79:bc:b8:c0:b4:e3:19:d6:32:
                    ee:f4:5a:fb:4d:fd:35:b1:a8:63:58:97:f4:00:3d:
                    71:0d:a2:d2:90:4f:ec:cc:81:b6:fe:1c:e5:93:fa:
                    bd:33:77:85:4d:c9:96:d7:53:3e:bb:b3:af:1a:18:
                    94:87:0c:ca:cc:2d:1f:ff:17:b8:7d:4f:ca:4b:de:
                    66:a2:f0:9c:3d:fe:f6:00:cf:79:d1:0d:65:b8:a8:
                    30:f0:de:77:0e:6e:12:7e:fa:59:bf:c2:c4:1c:30:
                    12:64:03:b8:cc:4e:01:ad:9b:81:08:ef:ff:4c:b6:
                    28:94:98:fd:b3:a6:80:a4:cf:ff:a8:72:60:97:79:
                    0c:1f:db:c7:b7:52:ad:68:4d:36:fb:7a:a8:81:3e:
                    d1:0e:08:a1:0e:90:39:9e:50:32:d0:ad:cd:54:f8:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0C:91:9C:16:24:7D:71:84:67:81:DE:08:8F:C4:34:E6:A4:31:49
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gQyRnBYkfXGEZ4HeCI_ENOakMUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:dc:f0:47:2d:6e:54:ff:f4:73:67:76:b0:f6:8c:67:05:0c:
         cd:7a:2f:1b:a6:05:70:81:c4:c9:7c:7b:18:65:e8:d0:9c:65:
         55:4b:50:05:56:ad:6a:e6:17:e2:67:6b:e1:a6:37:29:e1:55:
         43:a1:cc:57:d3:e0:ee:5c:3f:16:5a:4a:61:09:91:78:12:4f:
         61:e7:15:aa:25:9d:88:44:07:ce:16:19:05:f2:b4:6b:5a:7b:
         3a:54:30:de:28:6e:0c:2c:87:f5:46:0a:79:9c:61:38:c8:82:
         cd:e0:ae:bd:a3:9c:bd:83:8b:60:53:13:eb:61:98:c9:63:46:
         f5:47:dc:96:18:1d:5b:7b:e0:dd:1b:95:f5:04:90:60:bc:f9:
         5f:08:af:e8:72:d4:52:2f:8f:f2:0f:eb:8e:dc:10:e1:73:2f:
         c0:fb:8c:b7:29:a8:b6:82:f9:62:78:76:cf:59:50:db:10:5e:
         94:4e:b9:76:f0:65:dd:b1:db:98:db:45:fa:5a:91:61:94:2b:
         a0:eb:ef:6a:4c:24:66:d9:5c:28:51:0b:c2:e4:7e:b4:57:c7:
         c9:0f:2e:62:cb:05:49:1c:eb:dc:bc:69:3d:1b:fd:b7:08:28:
         bb:70:41:78:10:6f:1c:d8:e4:3a:56:e3:3b:6c:cc:76:30:af:
         8c:7e:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----