Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/tRkUdrTnwEe-z_DhWcB9y22VyLI.roa
File:                     tRkUdrTnwEe-z_DhWcB9y22VyLI.roa (raw, json)
Hash identifier:          DyxOMEGmj/SwRDXA5TgrV3lyg+TNUtVeXEgHTk+SxNA=
Subject key identifier:   B5:19:14:76:B4:E7:C0:47:BE:CF:F0:E1:59:C0:7D:CB:6D:95:C8:B2
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       07802E65
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/tRkUdrTnwEe-z_DhWcB9y22VyLI.roa
Signing time:             Sat 01 Jan 2022 11:59:45 +0000
ROA not before:           Sat 01 Jan 2022 11:59:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42399
IP address blocks:        91.189.112.0/24 maxlen: 24
                          91.189.112.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125840997 (0x7802e65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: Jan  1 11:59:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5191476b4e7c047becff0e159c07dcb6d95c8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0c:e0:28:bf:0a:6c:fa:00:71:0a:a8:5b:7f:
                    a5:06:4c:c8:26:4c:49:f8:20:06:36:bf:75:73:d1:
                    2d:8b:ab:f8:a7:30:c7:df:07:11:ae:8c:57:88:63:
                    77:cb:ab:75:92:20:7e:88:b0:c7:f5:5e:64:fa:8c:
                    af:7a:e3:45:4c:06:7f:aa:46:08:50:ce:22:54:50:
                    af:f6:e5:d4:ac:ed:d0:1b:76:90:6e:c6:6d:97:74:
                    eb:8a:9e:7d:27:98:e9:20:9d:4e:ea:3f:29:4e:61:
                    5c:64:e9:10:c2:b9:56:88:86:b4:3c:af:9c:3c:64:
                    e2:6a:fe:95:65:f5:c5:24:ce:95:05:8f:01:b1:08:
                    6c:91:f8:64:9d:7a:ab:cd:61:65:b6:95:c1:96:ed:
                    5c:10:1f:35:0b:dd:0c:2d:5b:34:7c:39:b3:69:00:
                    d9:22:a2:c5:ed:fb:c0:2e:51:e0:02:fc:a1:a4:11:
                    89:88:17:6f:10:56:7a:39:26:5b:52:32:5c:ef:01:
                    1c:ea:c9:05:96:b9:0f:d7:a2:99:3c:9f:7a:93:48:
                    48:16:8e:a3:44:a1:88:c9:d5:93:f9:db:ac:97:47:
                    e2:86:dd:43:f5:7c:ea:10:5b:ea:87:2c:1d:71:c6:
                    13:50:23:ca:77:7d:1a:c2:94:b9:fe:86:b0:1c:8d:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:14:76:B4:E7:C0:47:BE:CF:F0:E1:59:C0:7D:CB:6D:95:C8:B2
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/tRkUdrTnwEe-z_DhWcB9y22VyLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.189.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:18:d6:fa:9f:74:43:fa:fd:2f:c2:7e:ca:7a:bb:ad:9e:01:
         bc:6d:9f:14:1f:3b:e6:19:15:c9:7b:68:6e:22:23:f1:dd:11:
         61:9e:5d:7c:20:62:97:87:fd:78:b1:3e:d5:e0:76:c8:f0:24:
         6d:a1:8f:63:d5:06:29:c9:a5:e4:8e:d2:f2:dc:72:82:95:e1:
         a7:e4:93:76:25:57:cd:2e:1c:e0:a2:f5:dc:8c:7b:37:d9:57:
         52:91:8e:1f:7c:79:5e:68:55:7a:8b:3f:3e:6c:d2:e5:c5:0a:
         db:51:9e:d4:5f:ad:b3:91:00:aa:1c:5b:a1:ac:77:98:4b:63:
         3f:85:d0:96:c5:39:a6:50:f2:a5:44:69:e1:c5:33:51:03:8c:
         47:18:6a:1f:38:af:d8:dc:ef:72:e4:b4:e8:91:c1:d4:08:b8:
         d7:ce:72:0e:c8:6b:1f:c9:31:05:18:91:91:1d:6f:c6:9d:61:
         56:06:76:d6:6c:0a:91:b5:cc:1e:20:30:d3:83:90:96:53:34:
         90:46:14:d2:36:78:87:cf:51:db:a4:0b:06:ac:2f:6d:2b:54:
         85:e8:35:a9:6b:18:1d:b9:63:0d:c2:42:23:e8:89:16:d5:85:
         eb:7f:63:38:bd:ea:81:ad:cb:2c:31:66:c4:72:9c:d6:69:7f:
         c4:3a:b8:b9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB4AuZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZGZhZDIzZTExY2YwZDI0YTQ3NzU5NGViYTA5Zjk5YWNjNmYxZmZmMB4XDTIyMDEw
MTExNTk0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjUxOTE0NzZiNGU3
YzA0N2JlY2ZmMGUxNTljMDdkY2I2ZDk1YzhiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgM4Ci/Cmz6AHEKqFt/pQZMyCZMSfggBja/dXPRLYur+Kcw
x98HEa6MV4hjd8urdZIgfoiwx/VeZPqMr3rjRUwGf6pGCFDOIlRQr/bl1Kzt0Bt2
kG7GbZd064qefSeY6SCdTuo/KU5hXGTpEMK5VoiGtDyvnDxk4mr+lWX1xSTOlQWP
AbEIbJH4ZJ16q81hZbaVwZbtXBAfNQvdDC1bNHw5s2kA2SKixe37wC5R4AL8oaQR
iYgXbxBWejkmW1IyXO8BHOrJBZa5D9eimTyfepNISBaOo0ShiMnVk/nbrJdH4obd
Q/V86hBb6ocsHXHGE1Ajynd9GsKUuf6GsByNGbMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS1GRR2tOfAR77P8OFZwH3LbZXIsjAfBgNVHSMEGDAWgBS9+tI+Ec8NJKR3
WU66CfmazG8f/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZmclNQaEhQRFNTa2QxbE91Z241bXN4dkhfOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvZTI1MjM5LTZhYjAtNDkxOS1hNzZhLTRmNGU3MWUzMjA4NC8x
L3RSa1VkclRud0VlLXpfRGhXY0I5eTIyVnlMSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
ZTI1MjM5LTZhYjAtNDkxOS1hNzZhLTRmNGU3MWUzMjA4NC8xL3ZmclNQaEhQRFNT
a2QxbE91Z241bXN4dkhfOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVu9cDANBgkqhkiG9w0BAQsFAAOC
AQEAqxjW+p90Q/r9L8J+ynq7rZ4BvG2fFB875hkVyXtobiIj8d0RYZ5dfCBil4f9
eLE+1eB2yPAkbaGPY9UGKcml5I7S8txygpXhp+STdiVXzS4c4KL13Ix7N9lXUpGO
H3x5XmhVeos/PmzS5cUK21Ge1F+ts5EAqhxboax3mEtjP4XQlsU5plDypURp4cUz
UQOMRxhqHziv2NzvcuS06JHB1Ai4185yDshrH8kxBRiRkR1vxp1hVgZ21mwKkbXM
HiAw04OQllM0kEYU0jZ4h89R26QLBqwvbStUheg1qWsYHbljDcJCI+iJFtWF639j
OL3qga3LLDFmxHKc1ml/xDq4uQ==
-----END CERTIFICATE-----