Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/RpQdqVKN-s5dlTOhiYwIMoSWtT0.roa
File:                     RpQdqVKN-s5dlTOhiYwIMoSWtT0.roa (raw, json)
Hash identifier:          6oE1xLiqlQK9ekKcvyRe+agoKOg+L8Lk3N1Ft7H1JU0=
Subject key identifier:   46:94:1D:A9:52:8D:FA:CE:5D:95:33:A1:89:8C:08:32:84:96:B5:3D
Certificate issuer:       /CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Certificate serial:       37CF4718
Authority key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/RpQdqVKN-s5dlTOhiYwIMoSWtT0.roa
Signing time:             Sat 01 Jan 2022 10:58:01 +0000
ROA not before:           Sat 01 Jan 2022 10:58:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39405
IP address blocks:        185.116.128.0/22 maxlen: 24
                          185.117.16.0/22 maxlen: 24
                          193.84.73.0/24 maxlen: 24
                          185.244.72.0/22 maxlen: 24
                          45.153.92.0/22 maxlen: 22
                          185.253.92.0/22 maxlen: 24
                          141.0.200.0/21 maxlen: 24
                          185.249.184.0/22 maxlen: 24
                          185.227.0.0/22 maxlen: 24
                          185.246.96.0/22 maxlen: 24
                          93.93.40.0/21 maxlen: 24
                          45.145.112.0/22 maxlen: 22
                          185.247.86.0/23 maxlen: 24
                          2a01:6600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936331032 (0x37cf4718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
        Validity
            Not Before: Jan  1 10:58:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46941da9528dface5d9533a1898c08328496b53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:67:c7:b7:80:0e:24:1c:34:b9:b7:a4:db:
                    8f:56:6d:aa:e2:e8:21:97:a3:09:ed:50:70:35:b1:
                    19:be:c8:c9:25:3c:1c:d0:32:62:8a:71:6f:e4:a7:
                    b6:c1:69:e2:84:36:3b:84:ea:3e:44:03:3f:00:8e:
                    8b:bc:7a:3c:ba:ab:d5:91:fd:f5:f7:f5:94:21:39:
                    82:91:be:db:1a:ef:86:71:52:6b:d2:95:db:4f:68:
                    3b:8e:89:d9:d7:e0:91:c3:b6:4d:19:f2:9d:bf:21:
                    48:10:0a:f1:26:e4:2b:96:02:8b:ea:55:f6:a3:3c:
                    e3:d1:2b:45:1f:5a:b9:7c:3d:12:d6:fd:bf:dd:bd:
                    be:96:65:f3:08:4d:66:cc:50:7a:b3:6e:ff:fa:da:
                    55:74:bc:9a:f2:ea:86:8c:04:39:91:87:e6:af:02:
                    52:07:d4:7a:33:89:a7:90:a9:3f:cc:52:51:71:a1:
                    e7:2c:11:42:be:97:f4:98:25:25:f4:4e:17:39:0e:
                    71:43:e7:93:6d:ba:9e:83:23:1a:79:20:e6:e9:76:
                    65:9f:f0:7a:b4:8d:6d:78:3b:15:67:5e:d6:84:9d:
                    c3:3f:48:bb:28:23:1a:c3:b6:92:85:23:54:9e:8d:
                    03:09:f4:02:47:1b:6c:1b:fa:f9:24:96:a5:bb:90:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:1D:A9:52:8D:FA:CE:5D:95:33:A1:89:8C:08:32:84:96:B5:3D
            X509v3 Authority Key Identifier:
                keyid:07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/RpQdqVKN-s5dlTOhiYwIMoSWtT0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.112.0/22
                  45.153.92.0/22
                  93.93.40.0/21
                  141.0.200.0/21
                  185.116.128.0/22
                  185.117.16.0/22
                  185.227.0.0/22
                  185.244.72.0/22
                  185.246.96.0/22
                  185.247.86.0/23
                  185.249.184.0/22
                  185.253.92.0/22
                  193.84.73.0/24
                IPv6:
                  2a01:6600::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:6a:db:c7:01:ee:92:6b:0a:16:e3:72:73:c9:14:96:93:bb:
         cc:67:95:37:2f:5c:73:13:4c:f7:6a:74:00:f9:a4:71:f6:59:
         53:8e:52:c1:af:7e:a7:39:96:d5:b3:eb:47:ac:74:44:cd:27:
         c5:64:a0:dc:4a:68:11:3b:fc:c3:05:4b:c6:0c:fb:24:a3:03:
         5b:24:c7:be:c4:01:94:cf:0f:86:e6:28:01:b7:ba:2f:07:b8:
         17:42:f9:0b:d8:2e:d1:6b:69:b0:d7:93:60:af:a0:50:87:27:
         6c:77:8b:25:8d:57:51:f8:8d:0e:21:37:d0:c7:d5:08:7b:f9:
         07:c4:e9:bb:10:7f:78:14:48:8a:65:9e:c6:40:f0:d3:36:50:
         6e:12:b0:0f:a2:96:5c:e0:16:35:86:40:cf:9e:57:2e:37:dc:
         b0:3c:a8:aa:3c:a3:74:1d:7f:c9:6e:18:dd:cb:62:e3:41:49:
         14:bf:76:c0:6e:44:9b:b6:1a:25:bc:41:3f:55:13:6f:85:20:
         7a:90:8e:64:48:f3:d0:65:84:89:39:d1:b2:de:a8:38:e4:58:
         34:ee:c4:23:2d:3d:f7:49:7d:88:1b:59:c4:1a:1d:8b:c8:79:
         a0:c3:98:c3:72:91:31:79:c5:ff:98:37:3c:f9:3a:c7:7e:15:
         97:ad:8f:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIEN89HGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzNhNmQzZGU1YzEyNWMxZmU4YjVmYmU4OTU4NDY1NmU1ODYxYTJkMB4XDTIyMDEw
MTEwNTgwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDY5NDFkYTk1Mjhk
ZmFjZTVkOTUzM2ExODk4YzA4MzI4NDk2YjUzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1CZ8e3gA4kHDS5t6Tbj1ZtquLoIZejCe1QcDWxGb7IySU8
HNAyYopxb+SntsFp4oQ2O4TqPkQDPwCOi7x6PLqr1ZH99ff1lCE5gpG+2xrvhnFS
a9KV209oO46J2dfgkcO2TRnynb8hSBAK8SbkK5YCi+pV9qM849ErRR9auXw9Etb9
v929vpZl8whNZsxQerNu//raVXS8mvLqhowEOZGH5q8CUgfUejOJp5CpP8xSUXGh
5ywRQr6X9JglJfROFzkOcUPnk226noMjGnkg5ul2ZZ/werSNbXg7FWde1oSdwz9I
uygjGsO2koUjVJ6NAwn0AkcbbBv6+SSWpbuQRNcCAwEAAaOCAmAwggJcMB0GA1Ud
DgQWBBRGlB2pUo36zl2VM6GJjAgyhJa1PTAfBgNVHSMEGDAWgBQHOm095cElwf6L
X76JWEZW5YYaLTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J6cHRQZVhCSmNILWkxLS1pVmhHVnVXR0dpMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvOGQ3ZTdjLWRiN2EtNDY1Zi04MDMyLTI1NTEwMGYyMDE2YS8x
L1JwUWRxVktOLXM1ZGxUT2hpWXdJTW9TV3RUMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
OGQ3ZTdjLWRiN2EtNDY1Zi04MDMyLTI1NTEwMGYyMDE2YS8xL0J6cHRQZVhCSmNI
LWkxLS1pVmhHVnVXR0dpMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB2
BggrBgEFBQcBBwEB/wRnMGUwVAQCAAEwTgMEAi2RcAMEAi2ZXAMEA11dKAMEA40A
yAMEArl0gAMEArl1EAMEArnjAAMEArn0SAMEArn2YAMEAbn3VgMEArn5uAMEArn9
XAMEAMFUSTANBAIAAjAHAwUAKgFmADANBgkqhkiG9w0BAQsFAAOCAQEAEWrbxwHu
kmsKFuNyc8kUlpO7zGeVNy9ccxNM92p0APmkcfZZU45Swa9+pzmW1bPrR6x0RM0n
xWSg3EpoETv8wwVLxgz7JKMDWyTHvsQBlM8PhuYoAbe6Lwe4F0L5C9gu0WtpsNeT
YK+gUIcnbHeLJY1XUfiNDiE30MfVCHv5B8TpuxB/eBRIimWexkDw0zZQbhKwD6KW
XOAWNYZAz55XLjfcsDyoqjyjdB1/yW4Y3cti40FJFL92wG5Em7YaJbxBP1UTb4Ug
epCOZEjz0GWEiTnRst6oOORYNO7EIy0990l9iBtZxBodi8h5oMOYw3KRMXnF/5g3
PPk6x34Vl62PHA==
-----END CERTIFICATE-----