Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/1TOHyn0oaO9izFclPSLBB0MPt0g.roa
File:                     1TOHyn0oaO9izFclPSLBB0MPt0g.roa (raw, json)
Hash identifier:          +HiAgzqhCeuiwghKqsDIa86E1c9mGveyeNLI3FnUyX4=
Subject key identifier:   D5:33:87:CA:7D:28:68:EF:62:CC:57:25:3D:22:C1:07:43:0F:B7:48
Certificate issuer:       /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial:       0B02C783
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/1TOHyn0oaO9izFclPSLBB0MPt0g.roa
Signing time:             Sat 01 Jan 2022 10:58:29 +0000
ROA not before:           Sat 01 Jan 2022 10:58:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41709
IP address blocks:        176.109.176.0/21 maxlen: 21
                          176.109.184.0/21 maxlen: 21
                          176.109.224.0/20 maxlen: 20
                          193.192.37.0/24 maxlen: 24
                          193.192.36.0/24 maxlen: 24
                          94.158.32.0/21 maxlen: 21
                          94.158.40.0/21 maxlen: 21
                          185.33.142.0/23 maxlen: 23
                          185.33.140.0/23 maxlen: 23
                          194.246.94.0/23 maxlen: 23
                          194.246.92.0/23 maxlen: 23
                          176.109.240.0/20 maxlen: 20
                          2a03:a9c0::/30 maxlen: 32
                          2a0d:ec4::/30 maxlen: 30
                          2a0d:ec0::/30 maxlen: 30
                          2a03:a9c4::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184731523 (0xb02c783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
        Validity
            Not Before: Jan  1 10:58:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d53387ca7d2868ef62cc57253d22c107430fb748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:e1:9e:a3:bc:f7:be:9e:82:ea:1a:06:4a:
                    f5:84:0a:6d:15:07:ed:98:9e:44:27:20:fd:de:ce:
                    da:8b:b0:3b:32:d8:28:ee:17:65:f7:f5:66:af:15:
                    a5:ac:0b:6e:84:fc:11:36:b0:eb:2a:76:7a:29:ca:
                    21:7e:33:6a:9c:99:2f:df:10:b9:26:93:8a:67:ad:
                    43:8f:a0:16:72:5d:68:11:91:45:e8:b6:0c:0d:ed:
                    40:e0:1c:ae:a9:1b:6a:45:0f:c9:4b:0b:59:37:61:
                    53:97:da:a0:2b:9d:1f:04:a9:fb:a3:41:9c:83:e0:
                    3c:68:d3:67:ec:72:d3:f7:ef:b6:74:71:bd:70:73:
                    cc:bc:82:1e:7a:ae:c2:13:ad:a9:c6:51:b9:42:26:
                    f4:33:ec:b7:ad:9a:66:69:d9:19:0c:d3:0f:7d:c6:
                    40:b8:ba:79:e0:66:34:44:85:35:47:75:d0:4c:de:
                    41:80:02:a1:ea:81:60:38:d0:88:c1:22:ad:6d:18:
                    62:c1:09:eb:87:04:7e:d3:32:09:0d:fc:cd:ea:49:
                    c1:f3:16:19:c2:f6:1b:51:52:5b:fa:52:ea:6e:99:
                    16:ae:6f:12:85:c9:86:79:ff:eb:8b:32:87:4b:27:
                    11:12:6b:b1:33:18:69:c4:2e:18:1a:be:e8:48:7a:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:33:87:CA:7D:28:68:EF:62:CC:57:25:3D:22:C1:07:43:0F:B7:48
            X509v3 Authority Key Identifier:
                keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/1TOHyn0oaO9izFclPSLBB0MPt0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.158.32.0/20
                  176.109.176.0/20
                  176.109.224.0/19
                  185.33.140.0/22
                  193.192.36.0/23
                  194.246.92.0/22
                IPv6:
                  2a03:a9c0::/29
                  2a0d:ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:8b:29:45:41:6f:63:20:cb:b6:ca:a8:2d:fa:33:4c:08:62:
         31:72:0c:c1:88:cd:35:a9:72:ac:a2:ae:40:3a:7d:a2:d4:ba:
         a7:30:8e:3d:02:17:e9:b3:c6:49:22:49:eb:f2:11:16:a6:5e:
         b0:d0:ef:0d:29:4a:19:de:f2:f5:d3:08:ae:d9:04:1f:7c:4a:
         32:be:cf:4e:65:1f:f4:2a:d0:3a:39:46:15:5a:2c:7a:9a:8a:
         76:cd:96:cc:94:1f:b8:01:3d:46:b4:5b:cb:1f:bf:aa:13:5c:
         ce:02:d8:b6:73:ab:97:ba:d6:55:cd:24:fd:d0:db:e6:51:4c:
         e7:b1:fc:f8:b1:91:2e:db:e2:2c:e7:65:31:ff:ec:61:b0:03:
         86:38:2e:9c:be:01:30:b9:45:04:e7:60:ed:88:e7:3d:c5:1e:
         03:0b:aa:24:a6:3b:b8:53:db:f8:46:97:ae:1b:9c:ae:d6:d9:
         9b:35:e3:fc:82:64:d9:8e:81:eb:ff:7e:e3:ee:ef:01:91:1f:
         cd:94:71:72:4a:f7:2e:36:5a:66:f3:29:4c:24:45:f1:5b:76:
         15:fd:63:65:e8:b2:bf:a8:63:68:28:6e:23:d8:61:bf:0d:29:
         6b:b7:0e:e1:43:48:4c:12:4c:73:b5:f8:5b:46:2e:3b:ab:a1:
         2a:9f:25:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----