Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/h3rpSxXl0Vq5MAaEiDm9wldRXYE.roa
File:                     h3rpSxXl0Vq5MAaEiDm9wldRXYE.roa (raw, json)
Hash identifier:          P+mXXpFHTm7daZdU1vexwvwx18hUI+CD/rkKvwt6jG4=
Subject key identifier:   87:7A:E9:4B:15:E5:D1:5A:B9:30:06:84:88:39:BD:C2:57:51:5D:81
Certificate issuer:       /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial:       0A30F374
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/h3rpSxXl0Vq5MAaEiDm9wldRXYE.roa
Signing time:             Sat 01 Jan 2022 06:58:21 +0000
ROA not before:           Sat 01 Jan 2022 06:58:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41689
IP address blocks:        86.57.0.0/17 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170980212 (0xa30f374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
        Validity
            Not Before: Jan  1 06:58:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=877ae94b15e5d15ab93006848839bdc257515d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:fe:ec:12:27:d0:b2:e3:ee:b4:67:4d:24:
                    07:ed:85:d7:d0:fb:48:d8:4a:46:15:f6:5a:94:49:
                    5f:be:a0:4f:bd:20:11:f7:12:9e:b9:02:59:36:f2:
                    38:9f:a9:8e:c4:e0:47:65:6c:b6:73:81:40:8d:3b:
                    da:92:fb:4c:76:2c:26:25:93:f8:6f:f7:4d:5c:71:
                    9f:47:ca:5e:87:ce:b8:50:82:cf:33:fa:ca:0c:f3:
                    60:0d:52:05:00:f2:58:f8:9a:64:af:57:ac:97:f9:
                    82:12:b1:eb:3e:fa:ea:ac:85:fd:c1:9e:79:ad:61:
                    77:92:bc:ee:39:9d:8c:e9:e3:e0:b1:a5:79:d5:c6:
                    43:4a:f4:9f:d5:5d:de:20:51:34:87:d1:41:95:06:
                    32:a0:8b:45:68:71:0a:09:9b:ee:87:13:51:98:da:
                    5a:3d:cb:be:ba:c3:c1:6b:b1:c4:fb:6a:6d:55:d5:
                    7d:cf:18:50:88:27:88:35:5a:5b:8a:31:aa:06:e6:
                    af:39:1c:8b:19:63:ea:71:a3:1a:eb:0f:8d:3a:90:
                    8e:13:4f:93:00:53:4e:3c:27:5f:15:24:23:d0:a7:
                    01:48:89:df:c9:07:ef:58:c8:b5:ea:00:7a:6b:95:
                    99:14:38:ff:1e:b0:52:87:38:4d:82:84:25:3d:5d:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:E9:4B:15:E5:D1:5A:B9:30:06:84:88:39:BD:C2:57:51:5D:81
            X509v3 Authority Key Identifier:
                keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/h3rpSxXl0Vq5MAaEiDm9wldRXYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.57.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         23:b3:17:fa:4e:f3:f5:27:5e:b1:3f:b9:26:6b:77:98:92:0a:
         3b:cb:51:05:dc:d1:08:a7:de:20:76:b6:d4:80:1d:6b:a2:8d:
         7f:94:77:92:47:52:2a:16:91:fa:c9:0f:32:37:a3:3f:44:1d:
         97:86:3d:5d:1f:b8:31:3c:ab:d8:0b:3c:2f:a7:fb:37:0a:3a:
         4a:13:fb:a9:df:7f:31:9c:83:33:d9:99:19:e1:87:02:bc:f3:
         70:21:92:cf:a5:dc:77:c3:4a:eb:d6:92:67:e1:93:9b:d8:1c:
         95:e2:5b:0c:5d:16:7d:5c:37:03:56:90:e7:94:c7:e7:f3:5e:
         8f:05:e8:5b:b4:ee:60:b9:8a:42:ec:a3:34:a3:d9:f9:85:f3:
         72:90:b8:c9:9e:1f:96:5d:39:b9:19:36:b0:70:aa:a4:ce:99:
         52:29:1c:0c:7d:40:a6:e4:16:14:53:37:a2:1d:de:de:2b:37:
         f5:93:87:7b:7b:95:20:79:6f:ea:9b:61:d1:2a:a1:03:ad:ee:
         5b:4b:b8:92:d5:77:6f:4d:0f:d3:71:6e:01:c8:31:0c:fc:36:
         4b:42:47:03:9b:69:4e:4e:19:cc:3e:ff:c3:53:ac:db:92:55:
         81:6e:18:67:a8:e4:6c:73:49:f8:c7:52:e3:c1:9a:e3:17:31:
         f4:6d:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----