Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jXvSbYRrpMX8BuzG5WybF299nWA.roa
File:                     jXvSbYRrpMX8BuzG5WybF299nWA.roa (raw, json)
Hash identifier:          dYlKUjPZyoiPFNhcfqwA8P0eUXxMYbT0CQSzk6cSExs=
Subject key identifier:   8D:7B:D2:6D:84:6B:A4:C5:FC:06:EC:C6:E5:6C:9B:17:6F:7D:9D:60
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17E6EF42
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jXvSbYRrpMX8BuzG5WybF299nWA.roa
Signing time:             Sat 01 Jan 2022 04:54:42 +0000
ROA not before:           Sat 01 Jan 2022 04:54:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209060
IP address blocks:        45.12.161.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401010498 (0x17e6ef42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d7bd26d846ba4c5fc06ecc6e56c9b176f7d9d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:d2:45:1a:bb:7c:e6:42:6b:30:6b:33:78:
                    01:7e:0e:d9:a9:ec:fb:1b:11:1f:79:31:ed:af:04:
                    ba:9e:f1:9d:6f:76:48:8b:06:b7:16:23:09:b7:e7:
                    ca:33:08:24:d4:13:b4:88:dc:9c:1c:83:1a:f8:ba:
                    8c:c1:d7:2b:7c:b1:da:74:8e:a9:60:40:39:1a:78:
                    04:51:03:78:98:65:57:25:a8:93:ad:84:0f:d0:de:
                    b6:a0:b2:c1:be:30:00:06:df:64:ab:e7:ce:73:00:
                    38:c2:5b:dc:20:bd:60:c4:1d:53:ff:4e:9c:95:e9:
                    5d:d7:e0:1c:1e:01:94:05:ec:37:39:b4:f3:aa:22:
                    3b:9d:9e:32:d1:f2:a1:62:e8:6f:b2:a0:24:57:04:
                    ff:03:ca:b9:8e:f8:b6:27:40:5c:b3:fd:93:63:78:
                    30:ee:45:93:83:26:c2:6d:aa:05:56:bb:e7:74:32:
                    3a:a3:f6:05:c8:13:09:54:79:b1:bd:01:ae:f9:01:
                    05:a1:9e:ca:85:0e:28:13:97:8e:e0:2f:bd:01:4e:
                    a6:f5:93:89:44:52:c0:0e:cd:73:f3:c0:4b:a5:58:
                    27:9f:1e:c9:ea:b3:62:42:ff:e6:7b:61:b0:f5:ef:
                    af:59:44:6d:c5:dc:78:b8:c7:5a:72:ed:96:e5:dc:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7B:D2:6D:84:6B:A4:C5:FC:06:EC:C6:E5:6C:9B:17:6F:7D:9D:60
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jXvSbYRrpMX8BuzG5WybF299nWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d8:20:98:ef:0b:60:0a:2c:9c:68:e8:28:ad:51:23:11:c2:
         6f:b8:46:fe:06:7b:b0:1e:92:98:22:44:75:06:40:9e:ba:5f:
         8c:0e:31:00:63:35:f2:e8:fd:4e:56:fa:09:b5:85:ed:9e:49:
         a7:dd:ef:89:b9:5a:d7:55:b5:64:a9:28:a2:9a:c0:d0:4b:67:
         e4:79:ed:4a:12:c3:f1:81:aa:6d:78:cf:55:c0:4d:e0:66:b7:
         c9:b6:70:c2:b7:57:85:e6:84:89:5c:ba:0f:7a:0d:cc:45:61:
         0b:35:cd:02:20:83:be:a0:39:73:7a:63:ec:8d:d4:59:5a:db:
         e8:9c:aa:a5:bf:36:27:10:b5:5e:ae:a1:0b:97:79:36:dd:7d:
         a6:55:2d:a4:e7:3f:57:96:37:20:fe:28:8e:59:b5:a8:06:0c:
         39:fc:07:39:00:86:08:ba:cc:7a:0c:d7:95:7a:e5:05:83:e8:
         91:9c:d3:76:b2:cc:7a:c3:af:59:69:e5:d2:d2:50:75:fb:b2:
         f2:93:41:65:91:d0:5a:64:41:6e:90:28:12:9a:89:5c:a9:12:
         f6:8b:e5:c8:88:6b:7d:d4:e7:2d:ef:55:6c:61:d1:fa:15:91:
         2d:48:30:60:ee:85:b0:78:7d:02:c6:13:0c:11:f6:39:06:e1:
         e3:f8:81:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF+bvQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQ3YmQyNmQ4NDZi
YTRjNWZjMDZlY2M2ZTU2YzliMTc2ZjdkOWQ2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANL90kUau3zmQmswazN4AX4O2ans+xsRH3kx7a8Eup7xnW92
SIsGtxYjCbfnyjMIJNQTtIjcnByDGvi6jMHXK3yx2nSOqWBAORp4BFEDeJhlVyWo
k62ED9DetqCywb4wAAbfZKvnznMAOMJb3CC9YMQdU/9OnJXpXdfgHB4BlAXsNzm0
86oiO52eMtHyoWLob7KgJFcE/wPKuY74tidAXLP9k2N4MO5Fk4Mmwm2qBVa753Qy
OqP2BcgTCVR5sb0BrvkBBaGeyoUOKBOXjuAvvQFOpvWTiURSwA7Nc/PAS6VYJ58e
yeqzYkL/5nthsPXvr1lEbcXceLjHWnLtluXc+2cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSNe9JthGukxfwG7MblbJsXb32dYDAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2pYdlNiWVJycE1YOEJ1ekc1V3liRjI5OW5XQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0MoTANBgkqhkiG9w0BAQsFAAOC
AQEACtggmO8LYAosnGjoKK1RIxHCb7hG/gZ7sB6SmCJEdQZAnrpfjA4xAGM18uj9
Tlb6CbWF7Z5Jp93vibla11W1ZKkooprA0Etn5HntShLD8YGqbXjPVcBN4Ga3ybZw
wrdXheaEiVy6D3oNzEVhCzXNAiCDvqA5c3pj7I3UWVrb6Jyqpb82JxC1Xq6hC5d5
Nt19plUtpOc/V5Y3IP4ojlm1qAYMOfwHOQCGCLrMegzXlXrlBYPokZzTdrLMesOv
WWnl0tJQdfuy8pNBZZHQWmRBbpAoEpqJXKkS9ovlyIhrfdTnLe9VbGHR+hWRLUgw
YO6FsHh9AsYTDBH2OQbh4/iB4Q==
-----END CERTIFICATE-----