Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/bfolEXk4U83RF3aW9xPOJfd5uOc.roa
File:                     bfolEXk4U83RF3aW9xPOJfd5uOc.roa (raw, json)
Hash identifier:          JQHi0Oy+NEr65D4S8uvlvRi6XPWFE/3TVJheYMXcezs=
Subject key identifier:   6D:FA:25:11:79:38:53:CD:D1:17:76:96:F7:13:CE:25:F7:79:B8:E7
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       36AB10EA
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/bfolEXk4U83RF3aW9xPOJfd5uOc.roa
Signing time:             Sat 01 Jan 2022 04:03:43 +0000
ROA not before:           Sat 01 Jan 2022 04:03:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47886
IP address blocks:        88.84.152.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917180650 (0x36ab10ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Jan  1 04:03:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6dfa2511793853cdd1177696f713ce25f779b8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:b5:1a:39:42:76:80:16:c6:b7:25:47:55:
                    9d:87:f3:e1:63:b1:00:37:e1:1e:d3:6b:45:30:fc:
                    0c:45:3a:d6:1d:a7:e5:64:bf:df:5f:2a:4f:fe:2f:
                    ae:5f:79:d5:b6:e9:e4:cf:77:cc:51:fd:90:ec:01:
                    fc:8e:aa:5e:82:67:f1:d2:f7:b5:05:78:c6:08:b9:
                    88:30:0b:83:5e:2d:66:76:4c:16:91:4b:82:48:28:
                    e6:74:49:20:76:2f:a8:33:c5:94:2a:8b:c9:c6:25:
                    2b:38:a8:fe:3f:27:6d:6c:0d:72:d9:30:d6:aa:db:
                    b6:45:50:b7:c7:b1:1d:b5:2a:08:5d:8d:be:91:a8:
                    1f:49:bd:da:27:44:0b:0c:44:65:d1:d7:f0:2b:f4:
                    5f:4d:a4:7a:23:b4:e0:0f:8f:67:90:76:ad:ac:11:
                    ae:00:af:14:a1:86:14:bb:de:0e:31:43:4d:b9:68:
                    0c:37:41:13:14:f2:95:3d:02:8d:20:9d:93:b1:fe:
                    db:dc:84:30:bd:51:68:50:6e:d4:18:88:b7:ac:38:
                    08:f3:df:eb:0d:bf:d5:34:d9:f0:ca:53:2d:8f:50:
                    6d:1b:21:7e:ee:34:c4:b2:6f:e0:b5:15:19:08:3a:
                    7d:73:ac:7c:0a:fc:b6:a3:09:91:ee:32:c1:de:3a:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FA:25:11:79:38:53:CD:D1:17:76:96:F7:13:CE:25:F7:79:B8:E7
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/bfolEXk4U83RF3aW9xPOJfd5uOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.84.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:68:50:b2:26:a1:21:cd:e6:b7:0c:00:42:3e:41:88:1d:
         f5:8f:0e:88:9c:30:94:f1:7e:2e:73:6f:14:9e:b9:1d:08:6a:
         01:ea:f6:5b:c0:be:d8:0b:70:78:75:9d:5e:5c:90:98:ac:86:
         64:78:04:39:19:c3:4d:ab:72:5f:98:b8:2b:2f:9b:b1:43:e6:
         61:c4:7e:ff:2f:5a:a3:59:86:f5:b3:9b:b5:f2:d8:a0:54:52:
         69:8a:ce:c6:5b:76:a0:c9:5a:49:47:51:0e:7f:d5:56:41:12:
         a9:08:f4:15:29:1d:88:28:bc:21:fc:75:a2:7b:e4:b1:15:3b:
         f8:48:96:c1:66:c3:c3:50:b6:84:49:4d:ed:2c:cc:64:19:56:
         ac:b0:24:2a:a4:ef:54:b5:ec:3e:6d:92:3f:4d:6a:9e:40:03:
         fd:6c:f1:05:fc:ac:ec:c3:94:1a:fb:89:58:30:3f:bc:70:b3:
         9f:5c:8e:6e:b7:8f:c7:67:40:da:b9:72:04:e2:f5:76:b2:17:
         88:2c:ae:9b:e0:15:7a:a4:4d:dc:a2:e8:91:15:11:99:c5:34:
         13:52:94:0d:6d:80:0c:4a:0c:33:2a:c0:38:b4:0c:30:57:a9:
         6a:ad:48:9d:5d:fd:13:14:8e:71:fd:ae:a1:55:25:3f:52:42:
         16:9e:f7:13
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENqsQ6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Y2E3N2M3MDhhZjBiYTFmODE1NDljOWY4NzA4OTU1OTM5MDE2N2E1MB4XDTIyMDEw
MTA0MDM0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmRmYTI1MTE3OTM4
NTNjZGQxMTc3Njk2ZjcxM2NlMjVmNzc5YjhlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALY+tRo5QnaAFsa3JUdVnYfz4WOxADfhHtNrRTD8DEU61h2n
5WS/318qT/4vrl951bbp5M93zFH9kOwB/I6qXoJn8dL3tQV4xgi5iDALg14tZnZM
FpFLgkgo5nRJIHYvqDPFlCqLycYlKzio/j8nbWwNctkw1qrbtkVQt8exHbUqCF2N
vpGoH0m92idECwxEZdHX8Cv0X02keiO04A+PZ5B2rawRrgCvFKGGFLveDjFDTblo
DDdBExTylT0CjSCdk7H+29yEML1RaFBu1BiIt6w4CPPf6w2/1TTZ8MpTLY9QbRsh
fu40xLJv4LUVGQg6fXOsfAr8tqMJke4ywd46Yd8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRt+iUReThTzdEXdpb3E84l93m45zAfBgNVHSMEGDAWgBSsp3xwivC6H4FU
nJ+HCJVZOQFnpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JLZDhjSXJ3dWgtQlZKeWZod2lWV1RrQlo2VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvOGZlN2Q4LTAxN2ItNDFhYS1hOTFmLTI4YjE5ZTNmZDRhNi8x
L2Jmb2xFWGs0VTgzUkYzYVc5eFBPSmZkNXVPYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
OGZlN2Q4LTAxN2ItNDFhYS1hOTFmLTI4YjE5ZTNmZDRhNi8xL3JLZDhjSXJ3dWgt
QlZKeWZod2lWV1RrQlo2VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1hUmDANBgkqhkiG9w0BAQsFAAOC
AQEAb59oULImoSHN5rcMAEI+QYgd9Y8OiJwwlPF+LnNvFJ65HQhqAer2W8C+2Atw
eHWdXlyQmKyGZHgEORnDTatyX5i4Ky+bsUPmYcR+/y9ao1mG9bObtfLYoFRSaYrO
xlt2oMlaSUdRDn/VVkESqQj0FSkdiCi8Ifx1onvksRU7+EiWwWbDw1C2hElN7SzM
ZBlWrLAkKqTvVLXsPm2SP01qnkAD/WzxBfys7MOUGvuJWDA/vHCzn1yObrePx2dA
2rlyBOL1drIXiCyum+AVeqRN3KLokRURmcU0E1KUDW2ADEoMMyrAOLQMMFepaq1I
nV39ExSOcf2uoVUlP1JCFp73Ew==
-----END CERTIFICATE-----