Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/oP1rLtH5lszYE5Ylx8iSRmg2x1A.roa
File:                     oP1rLtH5lszYE5Ylx8iSRmg2x1A.roa (raw, json)
Hash identifier:          9U+jHf/VFbC86KhgVh2v/3fEan6BxxCFo2Yml+6B6gE=
Subject key identifier:   A0:FD:6B:2E:D1:F9:96:CC:D8:13:96:25:C7:C8:92:46:68:36:C7:50
Certificate issuer:       /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial:       018245E7EBC5F1758E569D70DA4B99880784
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/oP1rLtH5lszYE5Ylx8iSRmg2x1A.roa
Signing time:             Thu 28 Jul 2022 17:43:23 +0000
ROA not before:           Thu 28 Jul 2022 17:43:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15987
IP address blocks:        188.246.0.0/23 maxlen: 24
                          188.246.0.0/19 maxlen: 22
                          185.112.252.0/22 maxlen: 24
                          188.246.17.0/24 maxlen: 24
                          188.246.23.0/24 maxlen: 24
                          46.41.14.0/24 maxlen: 24
                          46.41.32.0/24 maxlen: 24
                          46.41.47.0/24 maxlen: 24
                          217.144.128.0/24 maxlen: 24
                          217.144.129.0/24 maxlen: 24
                          217.144.128.0/20 maxlen: 20
                          217.144.143.0/24 maxlen: 24
                          46.41.0.0/18 maxlen: 22
                          2a02:a00:1009::/48 maxlen: 48
                          2a02:a00:f::/48 maxlen: 48
                          2a02:a00:1f::/48 maxlen: 48
                          2a02:a00:d::/48 maxlen: 48
                          2a02:a00::/34 maxlen: 34
                          2a02:a00:3000::/36 maxlen: 36
                          2a02:a00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:45:e7:eb:c5:f1:75:8e:56:9d:70:da:4b:99:88:07:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
        Validity
            Not Before: Jul 28 17:43:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0fd6b2ed1f996ccd8139625c7c892466836c750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:ee:ab:8c:54:7f:2f:8d:fb:6d:59:53:9e:
                    19:5f:b2:c1:42:d2:4f:c9:92:5f:15:f9:eb:e4:66:
                    17:53:a3:f5:b4:07:a8:56:c6:14:87:66:2e:c0:f9:
                    34:b9:7a:3c:ae:a6:93:0c:4b:b6:6d:70:92:b9:05:
                    de:3b:a5:c5:af:53:20:c5:6d:94:7c:b2:6c:58:d1:
                    6d:6b:ba:4d:b9:db:86:e5:aa:09:57:5c:74:83:db:
                    8b:4d:1e:40:18:01:f8:a3:fa:14:0c:9d:6d:51:ba:
                    fb:4b:37:19:b2:bd:76:7f:19:99:d0:3b:50:5c:bc:
                    f9:ec:49:31:d9:30:78:ae:71:ed:46:5b:8a:8b:c8:
                    3b:87:a3:32:57:bf:2c:c8:25:1a:a7:0a:01:03:d8:
                    8f:13:5a:9d:fb:73:11:8f:76:3f:72:99:c3:d6:d8:
                    82:5f:61:84:6f:97:fa:12:99:e9:d8:3f:d8:82:15:
                    a6:b8:ad:d6:3b:ba:b3:d7:7e:a7:30:38:6e:d3:7d:
                    e7:ff:d1:51:9a:cb:6e:5c:54:1f:ed:6d:dc:90:15:
                    40:85:aa:7c:47:6f:1c:23:5e:62:e6:f0:4d:1c:c0:
                    a8:08:90:9a:3f:34:37:3a:c9:c4:99:ad:36:b7:f4:
                    2c:6b:42:41:3d:0b:f4:82:c7:28:b4:60:c8:ca:68:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:6B:2E:D1:F9:96:CC:D8:13:96:25:C7:C8:92:46:68:36:C7:50
            X509v3 Authority Key Identifier:
                keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/oP1rLtH5lszYE5Ylx8iSRmg2x1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.41.0.0/18
                  185.112.252.0/22
                  188.246.0.0/19
                  217.144.128.0/20
                IPv6:
                  2a02:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:e9:54:5d:2a:c1:5a:80:8e:b0:95:e7:28:53:3e:0b:1e:
         67:94:3a:b4:15:22:2c:52:17:37:64:f7:29:4d:fc:c8:8b:65:
         f2:14:15:7f:b6:72:4a:ce:9b:93:4a:5b:10:ed:9c:ab:3a:63:
         84:de:23:3c:f6:be:bf:b3:a0:43:00:cc:7d:44:d0:02:92:34:
         14:5f:1c:3d:22:9c:bd:61:a6:41:a3:c1:b7:8d:0b:f8:ee:e5:
         f3:a7:19:be:68:c4:9e:7f:70:d1:98:0c:59:cc:b5:ff:32:4a:
         db:3e:9d:08:39:35:e1:e7:54:8d:e4:89:ed:aa:eb:01:57:cf:
         01:31:e5:63:60:b6:45:e3:f6:7d:8c:ae:66:67:0b:9b:55:42:
         50:e3:10:7a:a3:19:86:cc:3e:13:e6:2b:9f:24:ba:64:62:cf:
         ff:2d:ff:3f:c2:e7:4c:ce:61:b0:d4:67:72:aa:34:00:61:5e:
         63:a0:b8:05:9c:d1:4a:b8:79:04:27:02:dc:79:85:da:4d:3c:
         36:bb:ea:63:2f:23:d7:b0:6e:75:a8:40:c2:cd:fc:11:a1:b5:
         cb:45:ed:5e:b1:40:8c:79:8e:75:2b:c8:18:dc:1f:09:15:a2:
         13:41:f2:cd:7c:95:60:5d:68:98:41:f8:4b:9d:a7:2e:57:14:
         8b:40:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----