Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa
File:                     r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa (raw, json)
Hash identifier:          rsbOyuNDkaRuakE/BdIspVRS/mzeb73VCwIR+7KumBU=
Subject key identifier:   AF:95:F6:2B:0A:FC:0D:82:4B:74:5A:5F:21:F1:A9:79:89:07:20:9B
Certificate issuer:       /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial:       043FA705
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa
Signing time:             Sat 01 Jan 2022 16:02:16 +0000
ROA not before:           Sat 01 Jan 2022 16:02:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207715
IP address blocks:        185.229.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71280389 (0x43fa705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
        Validity
            Not Before: Jan  1 16:02:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af95f62b0afc0d824b745a5f21f1a9798907209b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:39:1c:aa:56:de:1e:0b:18:e7:8a:06:2e:
                    16:cf:d5:5a:a7:50:f5:ac:dd:7d:40:56:95:ff:9f:
                    e7:38:e9:ea:83:8e:8a:0b:2f:36:6b:36:c6:81:4a:
                    a2:82:28:9c:4d:23:c0:d9:6d:1a:c1:91:56:9b:43:
                    e5:2e:4b:b3:cb:6e:c4:4c:36:b4:7d:78:e6:67:78:
                    02:ca:cc:45:8c:0e:e1:ea:e1:e4:82:60:c5:40:d3:
                    f8:56:34:de:11:63:b0:25:14:37:11:7f:78:9f:62:
                    84:78:24:d1:6f:2b:89:fe:b8:df:02:ba:e3:36:c8:
                    17:84:96:21:7a:2b:bc:c5:db:8d:d4:ad:3d:47:25:
                    7b:77:66:0a:86:95:6c:5e:ad:ce:4a:08:54:dd:75:
                    99:d7:d8:d5:23:37:33:21:82:02:82:fb:34:d6:47:
                    b9:09:f2:c9:84:0d:33:76:5f:ae:23:8a:e1:91:b3:
                    32:41:cf:8c:01:e8:ea:2f:a7:2a:2a:a0:64:cd:f2:
                    1e:0f:c4:a1:99:e9:03:c8:1d:83:80:cc:72:92:f8:
                    cf:af:4d:d6:8e:67:b9:d9:5f:a5:5d:b7:9d:87:e1:
                    74:78:31:f6:87:15:7f:e8:42:18:88:ca:75:da:de:
                    6e:38:37:8f:ba:3c:0a:51:8b:ca:04:89:4e:36:3a:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:95:F6:2B:0A:FC:0D:82:4B:74:5A:5F:21:F1:A9:79:89:07:20:9B
            X509v3 Authority Key Identifier:
                keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:55:6f:7b:cb:35:81:02:1a:14:76:2d:02:4e:15:99:70:
         bd:4e:ef:ed:58:42:27:e3:5d:69:26:f7:e7:4f:7d:bd:eb:5a:
         50:37:3b:a7:f0:f0:a6:85:8a:c1:03:4e:64:3a:10:58:20:08:
         52:0b:e3:12:9d:5f:5c:94:ef:de:44:b1:80:89:ba:23:ba:d1:
         3f:ff:5a:53:45:34:ba:79:e4:07:47:27:27:a1:1d:60:f0:5c:
         99:45:34:84:b7:7f:bd:4e:6a:18:75:66:f8:ee:7f:24:a5:da:
         81:53:6c:30:7e:88:1a:47:b3:7e:7e:a6:81:81:39:9f:c6:7c:
         5e:d3:77:07:59:b4:fe:0a:ea:f6:6f:14:78:4d:0a:10:1d:76:
         f4:8c:a7:29:0e:c6:e4:56:fd:99:18:2d:84:93:3d:fc:d3:6a:
         88:3d:d0:03:3e:7d:9c:c2:2f:a3:db:74:c2:c7:b2:d6:e6:22:
         3e:05:e4:d7:df:50:c6:47:69:e3:18:d4:d4:b4:9c:f5:16:5a:
         a7:62:99:78:84:05:fc:fd:45:8a:96:92:16:98:de:77:5f:f7:
         94:5b:c3:76:a7:42:a5:9a:3e:5a:4a:8c:13:78:a9:71:93:30:
         ef:fa:ae:23:c4:05:28:77:a5:f6:c6:38:d4:03:ca:ae:42:51:
         08:2e:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----