Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/yFOmSAZJKyiyIViK-YH_vsZr1Xw.roa
File:                     yFOmSAZJKyiyIViK-YH_vsZr1Xw.roa (raw, json)
Hash identifier:          Ow/+JqSEvQDZd2EnV0rQUFucD1t7Q7a1brRceyS4aMM=
Subject key identifier:   C8:53:A6:48:06:49:2B:28:B2:21:58:8A:F9:81:FF:BE:C6:6B:D5:7C
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       175AE483
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/yFOmSAZJKyiyIViK-YH_vsZr1Xw.roa
Signing time:             Tue 19 Apr 2022 08:06:41 +0000
ROA not before:           Tue 19 Apr 2022 08:06:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57370
IP address blocks:        2a02:21b2:ac14::/48 maxlen: 48
                          2a02:21b2:beee::/48 maxlen: 48
                          2a02:21b2:b3ee::/48 maxlen: 48
                          2a02:21b2:b2ee::/48 maxlen: 48
                          2a02:21b2:ac18::/48 maxlen: 48
                          2a02:21b1::/32 maxlen: 48
                          2a02:21b4:c000::/34 maxlen: 48
                          2a02:21b4:8000::/34 maxlen: 48
                          2a02:21b4:8000::/33 maxlen: 48
                          2a02:21b4:4000::/34 maxlen: 48
                          2a02:21b4::/34 maxlen: 48
                          2a02:21b4::/33 maxlen: 48
                          2a02:21b4::/32 maxlen: 48
                          2a02:21b0::/32 maxlen: 48
                          2a02:21b2:ac10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391832707 (0x175ae483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Apr 19 08:06:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c853a64806492b28b221588af981ffbec66bd57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:2c:55:b9:6c:38:56:40:40:95:d6:75:59:
                    18:5c:41:01:75:18:c9:e6:7b:5e:3a:08:5d:ee:8a:
                    2c:1b:8f:51:fd:42:dc:7f:45:07:a4:17:ef:b4:15:
                    c6:41:db:da:ab:4f:b7:5f:b8:9e:b1:9e:f9:db:bd:
                    c8:d2:72:f9:dd:a7:21:eb:07:3e:bd:17:44:0a:4a:
                    4f:48:e5:f7:b6:9b:0d:6d:eb:1e:4d:6c:0a:fd:3e:
                    3d:e2:7b:bf:ad:7a:3c:c1:5c:72:61:70:29:63:b5:
                    ca:f2:e2:da:59:ba:1b:da:da:25:bc:a0:69:0a:5b:
                    5d:eb:18:84:a3:11:7f:e4:69:97:d1:8d:f0:36:df:
                    9a:6d:04:72:d9:12:af:d4:5b:1d:a9:cf:af:ec:ad:
                    55:01:39:da:3f:c5:f1:aa:f1:b9:62:98:91:f7:dd:
                    ad:f5:75:1d:f9:c7:76:75:64:51:f6:1e:fc:6e:90:
                    6d:fd:5c:47:cc:33:0f:79:66:93:6b:29:c1:80:18:
                    41:0a:6f:27:ad:e0:d8:5f:52:eb:a7:f4:f4:58:87:
                    d2:bd:a1:db:22:44:2f:a4:db:a2:02:a0:37:f4:2a:
                    41:9f:19:16:d5:30:6b:28:60:fb:8e:61:a6:4e:ee:
                    93:d2:17:9c:00:4d:52:a3:ee:a8:3a:53:b4:1e:9f:
                    e0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:53:A6:48:06:49:2B:28:B2:21:58:8A:F9:81:FF:BE:C6:6B:D5:7C
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/yFOmSAZJKyiyIViK-YH_vsZr1Xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:21b0::/31
                  2a02:21b2:ac10::/48
                  2a02:21b2:ac14::/48
                  2a02:21b2:ac18::/48
                  2a02:21b2:b2ee::/48
                  2a02:21b2:b3ee::/48
                  2a02:21b2:beee::/48
                  2a02:21b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:35:d4:12:c8:97:73:61:8a:24:1e:e0:a7:b1:49:1e:6f:d1:
         30:c4:20:bb:0b:a5:0b:2f:34:06:05:07:c1:35:0a:e3:07:59:
         77:73:9d:f7:fe:08:36:b2:27:66:6c:3b:cf:6e:a9:cf:a7:59:
         7c:17:01:fd:9a:8b:e4:67:42:d1:68:f6:99:91:6c:bb:60:00:
         89:ac:73:df:6d:85:1c:d8:7d:b5:09:61:6c:aa:a5:4c:37:c2:
         ee:82:51:70:c1:9b:d4:4c:aa:24:7a:84:7a:89:36:70:32:2a:
         56:72:f6:e9:e6:09:91:db:ac:84:26:91:79:9a:63:f2:ef:2b:
         69:44:0e:29:ac:c2:6c:3a:be:21:c0:0a:49:54:53:84:ec:c3:
         30:ee:c9:86:59:b2:77:1b:0c:aa:d4:af:82:a5:9f:87:e3:8b:
         93:2c:e0:69:ef:b8:f6:dc:74:1b:87:d8:17:bd:6a:97:3a:ec:
         2c:85:16:d4:33:9d:d5:f0:cb:76:2f:f3:a6:8c:8f:8b:7b:09:
         a6:73:69:21:17:d0:77:07:5f:8c:d3:13:c0:ba:23:1b:a8:2c:
         db:64:fb:ed:9e:e5:ec:c8:16:43:d6:3d:24:08:e1:55:5f:56:
         42:ba:4d:14:58:90:94:67:bc:e4:5a:5f:ea:e0:e3:7c:75:72:
         64:f9:d6:d5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIEF1rkgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NDFkNGI5MmRkMTUwMzY0YzY1YjdkMjEyOTkwMjg2NzhiMGE1Mjk2MB4XDTIyMDQx
OTA4MDY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzg1M2E2NDgwNjQ5
MmIyOGIyMjE1ODhhZjk4MWZmYmVjNjZiZDU3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXBLFW5bDhWQECV1nVZGFxBAXUYyeZ7XjoIXe6KLBuPUf1C
3H9FB6QX77QVxkHb2qtPt1+4nrGe+du9yNJy+d2nIesHPr0XRApKT0jl97abDW3r
Hk1sCv0+PeJ7v616PMFccmFwKWO1yvLi2lm6G9raJbygaQpbXesYhKMRf+Rpl9GN
8Dbfmm0EctkSr9RbHanPr+ytVQE52j/F8arxuWKYkffdrfV1HfnHdnVkUfYe/G6Q
bf1cR8wzD3lmk2spwYAYQQpvJ63g2F9S66f09FiH0r2h2yJEL6TbogKgN/QqQZ8Z
FtUwayhg+45hpk7uk9IXnABNUqPuqDpTtB6f4B8CAwEAAaOCAkcwggJDMB0GA1Ud
DgQWBBTIU6ZIBkkrKLIhWIr5gf++xmvVfDAfBgNVHSMEGDAWgBREHUuS3RUDZMZb
fSEpkChniwpSljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JCMUxrdDBWQTJUR1czMGhLWkFvWjRzS1VwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvNWQ0NTRiLTlkMWQtNGU3ZC1hZTczLTdmNWY0ZDYwNDczMS8x
L3lGT21TQVpKS3lpeUlWaUstWUhfdnNacjFYdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
NWQ0NTRiLTlkMWQtNGU3ZC1hZTczLTdmNWY0ZDYwNDczMS8xL1JCMUxrdDBWQTJU
R1czMGhLWkFvWjRzS1VwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd
BggrBgEFBQcBBwEB/wROMEwwSgQCAAIwRAMFASoCIbADBwAqAiGyrBADBwAqAiGy
rBQDBwAqAiGyrBgDBwAqAiGysu4DBwAqAiGys+4DBwAqAiGyvu4DBQAqAiG0MA0G
CSqGSIb3DQEBCwUAA4IBAQCpNdQSyJdzYYokHuCnsUkeb9EwxCC7C6ULLzQGBQfB
NQrjB1l3c533/gg2sidmbDvPbqnPp1l8FwH9movkZ0LRaPaZkWy7YACJrHPfbYUc
2H21CWFsqqVMN8LuglFwwZvUTKokeoR6iTZwMipWcvbp5gmR26yEJpF5mmPy7ytp
RA4prMJsOr4hwApJVFOE7MMw7smGWbJ3Gwyq1K+CpZ+H44uTLOBp77j23HQbh9gX
vWqXOuwshRbUM53V8Mt2L/OmjI+Lewmmc2khF9B3B1+M0xPAuiMbqCzbZPvtnuXs
yBZD1j0kCOFVX1ZCuk0UWJCUZ7zkWl/q4ON8dXJk+dbV
-----END CERTIFICATE-----