Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/akVKir8D-8lXgkqSNFyztQcD2fg.roa
File:                     akVKir8D-8lXgkqSNFyztQcD2fg.roa (raw, json)
Hash identifier:          ww/TJ9YRE4x/10BiuEOp3AGmHEkYO/ETBA50g8jDTiw=
Subject key identifier:   6A:45:4A:8A:BF:03:FB:C9:57:82:4A:92:34:5C:B3:B5:07:03:D9:F8
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       0184A9160C929EEFEB4D91F0E6AA3AECD9E8
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/akVKir8D-8lXgkqSNFyztQcD2fg.roa
Signing time:             Thu 24 Nov 2022 10:01:45 +0000
ROA not before:           Thu 24 Nov 2022 10:01:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197706
IP address blocks:        92.118.68.0/22 maxlen: 22
                          45.157.124.0/22 maxlen: 24
                          109.196.160.0/22 maxlen: 22
                          2a0d:4943::/32 maxlen: 32
                          2a0d:4947::/32 maxlen: 32
                          2a0d:4940::/29 maxlen: 29
                          2a0d:4946::/32 maxlen: 32
                          2a0d:4941::/32 maxlen: 32
                          2a0d:4944::/32 maxlen: 32
                          2a0d:1dc0::/29 maxlen: 29
                          2a0f:4780::/29 maxlen: 29
                          2a0d:4945::/32 maxlen: 32
                          2a0d:4942::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a9:16:0c:92:9e:ef:eb:4d:91:f0:e6:aa:3a:ec:d9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: Nov 24 10:01:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a454a8abf03fbc957824a92345cb3b50703d9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:0d:7b:a5:be:73:09:0e:8d:06:c1:26:a2:
                    42:20:b4:5f:06:88:bf:ac:9b:a8:02:69:69:45:14:
                    e9:5e:88:81:5b:5f:fe:4b:60:44:83:f8:f3:88:2f:
                    92:07:64:71:f6:80:ae:22:02:cb:a6:77:4a:b1:1e:
                    4b:9e:b7:2f:33:5c:80:d1:b9:54:e8:07:05:2a:21:
                    d7:2d:3e:88:91:9e:32:92:22:5e:e8:05:82:ba:e6:
                    6a:08:70:08:98:09:92:ec:aa:f1:c7:f0:62:cb:84:
                    66:5b:0a:0e:1f:13:8e:b1:1a:1c:c1:2e:e2:d6:96:
                    50:08:d2:eb:8e:96:c4:e5:02:f7:eb:0e:e0:b3:57:
                    80:c0:05:2a:84:76:48:b0:f7:77:dd:b3:f1:8d:d0:
                    9e:4b:ff:4a:84:8a:fb:c6:f2:02:e8:60:8b:da:22:
                    a2:f0:cd:23:ff:47:c5:7d:0e:ee:15:b2:67:d5:8b:
                    ac:84:b0:da:7d:42:9f:03:be:f4:23:dd:b6:7e:07:
                    09:51:ad:16:34:cd:b9:e2:3b:e4:2e:cd:13:86:dd:
                    1f:98:6d:1c:cf:c8:a8:ee:71:04:bc:e5:c5:e4:c0:
                    79:36:08:b1:7d:ab:3f:4a:fa:d5:2b:30:9b:20:ca:
                    f7:74:b8:fb:99:f6:e5:af:8a:3b:46:3a:b9:31:e7:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:45:4A:8A:BF:03:FB:C9:57:82:4A:92:34:5C:B3:B5:07:03:D9:F8
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/akVKir8D-8lXgkqSNFyztQcD2fg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.124.0/22
                  92.118.68.0/22
                  109.196.160.0/22
                IPv6:
                  2a0d:1dc0::/29
                  2a0d:4940::/29
                  2a0f:4780::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:30:13:1d:4e:ea:a2:3a:a3:66:0c:ff:29:2c:f4:e2:a0:
         e5:c8:6e:f0:a7:12:63:6b:71:d9:64:11:6b:73:65:dd:2d:ab:
         d3:78:f5:10:27:2a:ea:eb:30:91:74:a0:80:a7:ef:87:08:76:
         56:7d:a8:4e:bb:2d:55:7c:69:c4:e0:e1:da:40:3d:51:5b:99:
         55:65:9f:31:41:9f:fb:88:df:1a:c7:7e:9c:21:2b:ec:31:be:
         72:a2:c3:05:d4:3e:c6:51:8b:be:3f:b6:36:e4:97:b7:2d:bd:
         06:e1:94:65:97:49:1c:2c:08:81:ee:b3:5b:82:d0:c3:c2:72:
         a2:b3:7f:f7:a4:14:70:4c:55:46:fe:c7:33:61:ef:5b:f4:da:
         0d:61:a0:6e:f1:f4:dd:c7:80:08:41:41:25:93:df:89:24:61:
         90:1c:80:4d:3b:db:01:7b:6f:11:ae:8f:20:73:fd:aa:51:da:
         db:b2:61:f8:a3:20:fa:67:19:d1:4d:46:66:69:66:48:08:eb:
         13:b6:3b:43:9d:a7:2f:61:5e:f0:71:c7:ba:b5:c6:a1:b9:aa:
         6a:30:bf:7e:79:71:89:8c:df:c0:c6:d1:49:67:08:5a:1e:ce:
         59:fb:56:94:8a:49:6a:2f:fa:db:1a:e3:d2:78:77:17:e5:9e:
         0d:68:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----