Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/fGXw6ks5yyIhxvW9oYny35RSYOU.roa
File:                     fGXw6ks5yyIhxvW9oYny35RSYOU.roa (raw, json)
Hash identifier:          hj2uAiXVvDhbUojxN5QCReYzH2Vx6SeC4oNCCXkf+S8=
Subject key identifier:   7C:65:F0:EA:4B:39:CB:22:21:C6:F5:BD:A1:89:F2:DF:94:52:60:E5
Certificate issuer:       /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial:       0AA0C10C
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/fGXw6ks5yyIhxvW9oYny35RSYOU.roa
Signing time:             Sat 01 Jan 2022 05:02:38 +0000
ROA not before:           Sat 01 Jan 2022 05:02:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2852
IP address blocks:        193.84.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178307340 (0xaa0c10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
        Validity
            Not Before: Jan  1 05:02:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c65f0ea4b39cb2221c6f5bda189f2df945260e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:49:99:b0:43:9e:0f:d5:67:bf:86:06:69:
                    5d:e7:8d:9b:28:a0:89:35:57:c3:46:4b:ec:95:b1:
                    e3:a6:be:25:58:3b:26:e1:63:79:10:5d:cc:80:6a:
                    1f:9e:3e:1f:c5:1b:e7:1a:82:8e:06:c6:33:09:8e:
                    76:04:48:09:7d:c0:b0:1f:7d:0a:51:44:f4:19:fb:
                    f9:67:62:4e:1a:35:31:96:27:d4:1f:4e:a0:66:35:
                    58:cd:33:0c:bc:5a:43:04:55:f2:35:80:f5:df:97:
                    94:f6:40:e9:5e:fa:8d:05:58:44:a7:da:0e:03:87:
                    5a:58:8a:27:c5:72:8e:8e:b7:84:4a:b6:f0:a3:c3:
                    1f:a2:28:1b:10:33:1d:71:41:76:f1:22:5f:e6:f1:
                    19:f8:56:d9:77:33:ae:c3:9c:3a:c4:00:48:bb:46:
                    46:46:28:82:46:ff:fd:b2:fa:05:e0:25:63:6a:a9:
                    cc:15:a3:c0:40:76:af:dc:d4:55:d7:e2:2e:04:04:
                    2b:ba:dd:f8:af:6c:cd:db:0b:14:42:fe:6c:fd:56:
                    a4:e1:33:a8:0e:8f:5b:ac:52:bb:ef:21:ed:c0:a9:
                    25:fc:df:51:ea:90:94:da:73:f6:c0:c3:3f:66:14:
                    d3:ae:d3:a3:84:fb:fb:1a:2a:25:6d:5d:71:4f:45:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:F0:EA:4B:39:CB:22:21:C6:F5:BD:A1:89:F2:DF:94:52:60:E5
            X509v3 Authority Key Identifier:
                keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/fGXw6ks5yyIhxvW9oYny35RSYOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:78:c7:c2:15:d2:f5:e9:8c:ea:9e:7e:0b:27:60:2d:ef:79:
         3e:92:a4:19:28:9f:da:30:24:73:56:ab:b4:05:35:4d:d5:2e:
         06:0c:bd:d3:93:e7:7a:85:be:f6:be:ce:2f:28:45:09:18:48:
         12:42:53:44:38:c6:9a:94:f4:08:f6:b4:30:33:d9:23:cf:ee:
         42:64:cf:fd:67:e7:4b:5d:b8:15:15:35:02:f3:b6:a7:3a:c2:
         05:82:e1:d0:b8:7d:74:4d:b3:4e:68:d2:b9:c6:e9:57:3c:77:
         e0:8b:a0:e6:3b:06:b8:ce:fb:e7:d2:b7:5c:5d:c0:4c:86:41:
         ba:5e:93:0c:51:3a:4a:0c:b5:18:73:2b:c5:22:12:9a:6d:b5:
         fd:eb:83:7d:11:b0:b3:5e:ff:04:f0:e1:58:ef:1b:2f:1a:c5:
         15:67:f3:84:e9:b4:9e:da:7a:58:f4:85:c2:a9:2c:a8:c1:11:
         5e:12:66:2c:0b:c7:56:7b:45:86:67:2e:02:0d:a5:55:c2:b6:
         26:e1:28:fb:3b:2e:63:8a:9f:f7:f2:23:18:10:46:59:e5:95:
         73:69:43:d3:de:92:2f:32:2f:c2:9b:b6:d0:7d:1e:9e:ce:8f:
         c6:80:59:eb:f0:8e:11:8a:67:ff:c5:d8:ca:a5:e9:26:78:bb:
         6a:44:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----