Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hZ2UPPyP_wUBSipUMfEzcHxY9v8.roa
File:                     hZ2UPPyP_wUBSipUMfEzcHxY9v8.roa (raw, json)
Hash identifier:          ull3LXrEACS3KXQ5OStoSltXpq5DtqatwNAS4En0RQI=
Subject key identifier:   85:9D:94:3C:FC:8F:FF:05:01:4A:2A:54:31:F1:33:70:7C:58:F6:FF
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17EEF8A0
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hZ2UPPyP_wUBSipUMfEzcHxY9v8.roa
Signing time:             Sat 01 Jan 2022 04:54:48 +0000
ROA not before:           Sat 01 Jan 2022 04:54:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211398
IP address blocks:        87.239.48.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401537184 (0x17eef8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=859d943cfc8fff05014a2a5431f133707c58f6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:e8:c7:f8:d1:22:15:07:76:16:7e:07:8a:
                    77:20:32:27:00:44:6c:17:fa:4f:ff:83:a3:c2:aa:
                    6f:0e:4f:9b:4d:a4:4c:ed:f5:c2:72:1e:74:b7:74:
                    7c:6b:24:98:23:ce:a6:a9:1e:d4:a9:28:12:e7:d3:
                    ac:c4:90:a9:b1:92:7c:66:93:6a:fe:35:12:b4:a2:
                    5b:28:c3:e9:9a:e3:f7:d6:69:b4:55:62:b9:73:12:
                    f5:7a:5b:16:c9:ec:fc:8d:22:2a:8b:63:02:0e:98:
                    34:42:b4:3c:9b:56:c6:25:be:e2:26:ae:1d:9c:78:
                    eb:c1:8b:c2:f2:e9:06:d4:44:4c:a1:4a:f9:02:ad:
                    ef:20:53:20:f0:d0:15:41:3d:64:71:2e:07:d5:b0:
                    43:72:5b:19:0d:14:b7:c4:5e:c7:ad:23:1d:12:07:
                    46:71:2d:ed:53:15:5a:ce:ef:3d:02:78:af:72:3d:
                    55:19:87:d8:59:9e:ea:91:8d:1b:c3:4f:ef:3f:b4:
                    d0:9f:4f:2a:9b:0a:9f:93:d1:e0:f3:cd:2e:8e:95:
                    c6:91:ae:71:35:8a:43:d4:9b:9c:4d:bd:ba:73:67:
                    26:eb:d5:6d:03:df:2f:aa:ae:7a:b0:3e:82:e6:55:
                    fd:2b:d0:ec:57:3a:8c:7f:fe:e4:7c:c7:92:4a:9c:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:94:3C:FC:8F:FF:05:01:4A:2A:54:31:F1:33:70:7C:58:F6:FF
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hZ2UPPyP_wUBSipUMfEzcHxY9v8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.239.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:7b:40:05:17:6d:67:fb:8d:1d:c7:7f:cf:13:d4:0b:5c:
         12:b4:de:04:bf:a5:c5:ac:57:c5:51:f3:92:ee:ce:ef:d1:34:
         b7:1c:c8:bb:32:9d:2a:ac:4b:6d:8e:a0:80:69:53:50:af:33:
         20:aa:1b:5e:6c:27:fa:9f:7d:38:ac:8a:32:4c:6c:25:e0:0f:
         65:cb:b6:32:de:f1:73:82:4a:14:70:b9:3b:da:a8:21:ae:07:
         67:36:a0:6e:28:bb:2f:02:34:39:e9:56:f9:8e:75:79:b5:04:
         d0:ea:b1:fa:3c:b2:30:b5:10:a3:00:71:01:d0:5b:b1:d2:0f:
         d7:56:c0:a7:0a:80:63:e7:8c:8c:a9:e9:83:6f:de:aa:dc:37:
         09:bf:ef:cd:5a:8d:db:75:52:fd:05:cd:4b:1c:4c:4b:f7:57:
         77:fd:2c:90:43:d5:7e:97:db:fd:a0:2a:08:a3:42:3b:6b:77:
         81:3c:60:dd:44:25:d9:ab:23:4c:e5:06:37:98:7b:a8:25:ee:
         64:ad:4e:e5:bf:42:62:02:c3:e1:80:c3:66:f8:fa:08:8a:ac:
         30:51:69:e7:06:6a:e2:8a:eb:bf:a1:49:1f:93:f0:d5:52:0f:
         02:18:4f:79:d4:de:9a:d3:47:c2:62:a5:fd:51:ba:97:53:8b:
         8b:cf:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----