Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/36Abo6xrm294Plvx2yEkaRiMKKQ.roa
File:                     36Abo6xrm294Plvx2yEkaRiMKKQ.roa (raw, json)
Hash identifier:          /5/6rCo0MupQOszPWF3VMrg0KWMYQoGG4dv9wl5Zdnk=
Subject key identifier:   DF:A0:1B:A3:AC:6B:9B:6F:78:3E:5B:F1:DB:21:24:69:18:8C:28:A4
Certificate issuer:       /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial:       032E4275
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/36Abo6xrm294Plvx2yEkaRiMKKQ.roa
Signing time:             Sat 01 Jan 2022 13:07:49 +0000
ROA not before:           Sat 01 Jan 2022 13:07:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60651
IP address blocks:        83.217.8.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53363317 (0x32e4275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
        Validity
            Not Before: Jan  1 13:07:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dfa01ba3ac6b9b6f783e5bf1db212469188c28a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:ee:c2:00:f9:c7:de:27:68:ef:8f:3e:40:
                    fe:b5:f4:6d:07:45:a5:db:55:ec:ab:8f:36:be:78:
                    ba:da:28:0f:57:75:27:d8:88:01:95:8c:f2:09:25:
                    30:55:a6:2b:f8:96:54:35:26:0f:6d:d8:3e:8d:23:
                    69:16:af:72:c6:40:1f:75:2f:27:c2:95:65:d6:f6:
                    86:c9:5d:10:c6:3e:99:71:9e:ef:d7:bf:1e:91:ba:
                    e1:ea:aa:59:b3:47:a9:4b:6c:54:3e:cd:2a:37:d1:
                    7a:57:f9:f4:46:c9:3e:0f:a4:e3:97:9d:ae:e8:0b:
                    e3:73:a9:2f:5e:16:66:f8:a4:c8:0c:5d:61:57:e5:
                    aa:37:22:ce:10:a8:c2:6a:25:04:cc:37:a8:d1:f6:
                    08:ee:3f:cc:c2:ef:40:65:96:27:17:86:6c:a6:22:
                    4b:78:8e:b3:8d:59:f6:05:eb:f6:6d:eb:4f:c4:64:
                    23:80:2c:88:c8:7b:a0:c9:9b:d7:23:12:c7:2e:db:
                    44:93:ac:3f:e2:73:54:bf:51:19:17:3d:71:75:25:
                    03:4e:32:d7:0a:09:1b:2c:66:48:88:2e:cc:94:1a:
                    db:3b:4d:6c:62:07:5f:b7:e8:3e:e7:6c:30:ad:4e:
                    01:7d:af:0b:6f:70:3a:ee:22:53:95:63:40:48:55:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A0:1B:A3:AC:6B:9B:6F:78:3E:5B:F1:DB:21:24:69:18:8C:28:A4
            X509v3 Authority Key Identifier:
                keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/36Abo6xrm294Plvx2yEkaRiMKKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.217.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:65:1b:0a:bf:34:51:f7:80:19:09:f7:f1:33:43:e5:8e:46:
         a3:d4:42:d3:c4:79:3c:03:4b:cc:86:bd:1a:55:fb:87:c5:2b:
         ea:0b:91:f7:bc:cc:31:16:a5:b4:cf:3f:d1:2e:15:f6:1c:0b:
         30:16:34:12:ef:f8:06:87:60:d0:58:4d:bc:97:8a:83:4e:a6:
         26:70:43:6e:e1:5f:e3:9c:74:37:94:6e:70:9b:57:9f:16:1d:
         85:ed:63:63:60:e3:d4:5e:a2:3e:0f:3f:9b:8b:a4:8a:8a:71:
         7f:48:5b:77:d1:a8:d0:15:e0:a3:a9:a3:5e:51:1f:ae:18:a8:
         dd:46:ee:2e:6b:82:89:2e:78:90:2d:cd:22:4d:f0:e3:3c:f8:
         39:48:15:c2:a3:a1:38:c1:9a:34:4e:39:1f:0a:73:94:50:55:
         45:68:fd:57:69:57:f3:5a:0f:04:72:e0:79:84:1c:40:cb:7f:
         b5:c1:ae:15:48:49:d8:4e:1d:6a:86:31:aa:50:17:7c:da:54:
         71:e0:46:88:6e:8e:bb:e4:6b:7e:a0:59:00:33:a9:7c:39:ec:
         c7:7e:7d:43:fc:47:27:c2:6f:84:db:ad:4a:ca:c3:4e:50:22:
         5a:a4:d3:e2:fd:34:7a:b7:9e:1f:8a:27:40:2a:2b:74:fe:9a:
         80:22:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----