Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/EDfiBgMWrtdY0-t7FyRiBhChDxI.roa
File:                     EDfiBgMWrtdY0-t7FyRiBhChDxI.roa (raw, json)
Hash identifier:          h8dv2GpQRB10jC2rz/SjDa/NesTRg8bzEK8ZpmG1y14=
Subject key identifier:   10:37:E2:06:03:16:AE:D7:58:D3:EB:7B:17:24:62:06:10:A1:0F:12
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       12882E44
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/EDfiBgMWrtdY0-t7FyRiBhChDxI.roa
Signing time:             Sat 01 Jan 2022 10:05:47 +0000
ROA not before:           Sat 01 Jan 2022 10:05:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56503
IP address blocks:        185.177.234.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310914628 (0x12882e44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Jan  1 10:05:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1037e2060316aed758d3eb7b1724620610a10f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:23:c2:94:dd:7d:ce:f0:e8:86:6a:61:08:
                    5b:4f:dd:cc:51:1a:ba:04:42:ad:43:dc:b3:40:4f:
                    42:0a:03:73:bd:4d:0f:f1:d8:81:b3:c8:8e:6f:f7:
                    70:ae:fe:0f:54:7a:40:4d:1a:96:ed:13:a7:28:9c:
                    2c:15:80:9a:a1:7c:06:8c:0a:72:6d:c0:d2:e3:6f:
                    d7:2e:89:59:81:40:a2:fa:6d:03:8e:e7:83:d5:8a:
                    21:04:3b:f5:c4:89:17:62:b1:17:3d:bc:82:95:9d:
                    d5:07:32:01:21:91:d6:84:d7:07:9b:61:a8:1f:c8:
                    30:28:bc:7a:c0:bb:03:3d:65:96:ef:f0:33:4d:3f:
                    12:e9:54:3c:d0:43:7b:cc:ce:99:bb:cb:21:84:69:
                    f0:a1:52:4c:2f:8e:24:f9:cc:cf:c0:7e:90:fe:79:
                    eb:0c:ab:f5:9f:6b:12:97:3b:7e:9e:1a:18:d7:ba:
                    a1:66:a5:c9:7a:c4:3b:11:16:3b:3e:aa:cc:5a:68:
                    46:25:b2:39:40:cc:90:ab:8c:41:90:3f:c3:b5:4e:
                    e9:21:1e:a9:db:04:62:c2:c3:b8:9e:7c:25:96:93:
                    fa:c0:fd:78:d1:18:ab:29:d0:fa:ff:ff:95:a8:f7:
                    03:8e:63:23:17:07:72:fe:97:44:f8:18:80:07:5b:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:37:E2:06:03:16:AE:D7:58:D3:EB:7B:17:24:62:06:10:A1:0F:12
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/EDfiBgMWrtdY0-t7FyRiBhChDxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:1b:1b:d8:9f:11:71:ab:59:97:1d:4d:c4:7b:ed:04:6d:
         8b:80:dd:d4:aa:4d:e1:3a:87:b0:27:07:e3:cf:64:c4:aa:4f:
         70:a3:1b:9d:e3:af:1c:96:3d:8f:9e:cf:1e:6f:b7:12:f0:7d:
         20:a7:51:45:23:fc:73:10:c5:77:8f:02:e3:de:74:7b:25:65:
         dd:d8:6e:2f:7b:d8:8c:21:ca:a4:52:b7:f3:16:74:65:18:86:
         56:fb:ac:57:01:96:db:97:5c:fd:20:88:2a:cd:ce:3c:02:08:
         44:cd:8f:f5:98:ee:6e:d4:67:7d:5b:1a:f4:92:76:b2:44:67:
         4d:de:37:54:41:d2:4b:95:c3:e0:5d:c1:5a:bd:ef:a2:68:45:
         9d:b2:87:c3:e0:18:c4:60:ef:8e:48:cf:19:36:50:88:e7:be:
         3f:46:67:68:05:81:c5:a9:d7:38:35:d5:bf:e3:a8:4d:fb:d9:
         f8:46:0e:f9:14:b5:36:a2:42:1f:f6:8b:9d:ae:91:57:dc:b4:
         e6:f4:7c:7b:04:f1:45:18:44:e8:c3:76:71:54:d4:d0:14:25:
         c2:3f:e6:fc:58:b7:18:70:88:e7:1d:ea:cd:8b:39:14:66:55:
         88:4a:cb:12:a6:46:f6:db:5f:fe:3e:00:49:35:9f:9b:03:44:
         3f:70:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----