Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/F7NAFo-qvYATcaF8-uLi7xG-aIY.roa
File:                     F7NAFo-qvYATcaF8-uLi7xG-aIY.roa (raw, json)
Hash identifier:          sZgmRtvAEkdTx6ghfGCRWU4OwHoMbKKU0sxlxuz4eHk=
Subject key identifier:   17:B3:40:16:8F:AA:BD:80:13:71:A1:7C:FA:E2:E2:EF:11:BE:68:86
Certificate issuer:       /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial:       052F597E
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/F7NAFo-qvYATcaF8-uLi7xG-aIY.roa
Signing time:             Sat 01 Jan 2022 12:54:32 +0000
ROA not before:           Sat 01 Jan 2022 12:54:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45015
IP address blocks:        194.35.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86989182 (0x52f597e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
        Validity
            Not Before: Jan  1 12:54:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17b340168faabd801371a17cfae2e2ef11be6886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:ab:f2:b9:24:d1:22:cf:f1:28:4e:f2:b4:
                    78:21:91:7a:3a:27:93:57:99:12:ea:b1:f5:77:78:
                    11:67:67:53:9c:9a:3a:ba:a8:24:55:3e:16:44:4c:
                    91:8d:95:5d:7f:7d:a5:04:ac:7b:cf:94:8e:3e:57:
                    27:89:78:88:b8:98:cb:6f:0f:79:d1:ce:8f:2e:41:
                    25:75:e1:c6:7f:41:2b:6f:8b:9e:8b:e2:e1:d2:2a:
                    29:b4:18:b6:79:ea:5b:94:39:b7:5c:91:41:af:b6:
                    2a:bf:58:75:45:bf:f3:26:39:6b:5d:fd:94:55:a9:
                    d3:56:3a:f8:aa:2b:a5:ba:03:ff:47:5c:54:9d:b7:
                    4a:0f:95:6a:04:e8:bd:c8:1a:3a:62:71:cc:ec:11:
                    e7:ad:d4:f5:91:8a:7a:43:64:27:69:61:26:9f:06:
                    7c:37:80:81:75:7c:c9:31:bb:4f:e0:4c:01:7e:2c:
                    83:3a:6b:aa:c0:6a:04:ef:60:d7:34:cc:35:2d:34:
                    1d:3e:32:6a:57:c5:d9:e2:57:98:ea:19:b3:8b:8d:
                    96:7c:d1:9b:c2:a8:cd:6c:7a:45:55:4e:0e:86:90:
                    c2:78:57:fd:5f:9f:3f:30:61:0c:6e:9d:9b:03:30:
                    71:71:19:51:8f:b0:e6:73:f3:2a:b5:d1:80:a3:49:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:40:16:8F:AA:BD:80:13:71:A1:7C:FA:E2:E2:EF:11:BE:68:86
            X509v3 Authority Key Identifier:
                keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/F7NAFo-qvYATcaF8-uLi7xG-aIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:66:e9:cb:2a:16:c7:3e:d1:8b:81:2a:b9:6f:4e:ef:96:
         2c:2d:a3:23:2b:90:f9:9b:16:9a:fd:0b:3e:c9:6d:e6:36:ee:
         0c:99:98:da:e8:79:b2:a6:db:f5:8c:11:fe:4a:c4:bf:47:c4:
         31:ca:15:d7:37:5d:27:a8:9f:12:87:1b:d3:bb:27:e0:0e:9e:
         d7:8d:0e:ea:66:fc:46:11:25:80:10:ba:ed:73:83:e9:2f:a6:
         d1:fd:6a:4e:3b:a1:30:3d:48:0d:2f:b8:6b:8a:33:6d:44:d7:
         88:23:a5:ff:72:d7:f7:1b:f4:8c:f4:10:38:4c:2c:7d:70:6b:
         79:2c:33:47:78:a6:bc:7b:35:84:a7:d4:78:19:20:bf:24:94:
         f0:23:98:a1:ca:07:cf:6c:d0:96:ae:6e:eb:33:8e:f9:50:21:
         ec:0e:5f:f4:59:5c:d0:9d:a9:27:04:22:99:be:4d:4b:34:95:
         45:a5:06:53:63:7c:6a:cb:1f:15:69:db:0d:11:29:8b:ca:3f:
         ee:f9:6a:e2:c7:5a:fd:30:dc:ae:10:d9:2c:d6:06:4d:48:79:
         d7:69:b3:8b:ff:a1:54:9e:01:af:b8:a4:0c:3e:4d:e3:54:5e:
         9c:c9:35:9d:dd:42:81:14:70:7f:5a:eb:cb:f1:f5:77:33:e6:
         39:dd:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----