Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DzA_qgSdkRqQNR5A9EHA--iIEhY.roa
File:                     DzA_qgSdkRqQNR5A9EHA--iIEhY.roa (raw, json)
Hash identifier:          GhNJ8madGz1+xhpB+NXrd/qtGxkMxw5P9NnCueVOHG4=
Subject key identifier:   0F:30:3F:AA:04:9D:91:1A:90:35:1E:40:F4:41:C0:FB:E8:88:12:16
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       0189A837
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DzA_qgSdkRqQNR5A9EHA--iIEhY.roa
Signing time:             Sat 01 Jan 2022 05:52:54 +0000
ROA not before:           Sat 01 Jan 2022 05:52:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47285
IP address blocks:        185.105.236.0/24 maxlen: 24
                          185.105.238.0/24 maxlen: 24
                          2a12:2600::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25798711 (0x189a837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Jan  1 05:52:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f303faa049d911a90351e40f441c0fbe8881216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:83:5d:d3:0d:a7:35:00:f2:e0:1e:32:61:
                    5f:1e:11:8c:66:e2:72:fa:00:51:a3:d0:bb:86:a7:
                    c4:36:2a:b7:39:01:ec:49:da:74:d3:50:f1:97:ae:
                    16:08:1e:d8:1d:ff:df:c3:9a:da:49:5c:35:62:cb:
                    99:65:5c:51:02:44:e8:9c:88:38:f0:8e:54:ce:14:
                    e2:a4:76:15:26:18:ab:0b:f6:df:c4:93:ba:3d:f6:
                    d5:8b:3e:18:d3:ba:48:c2:83:2a:0f:0e:d5:d9:43:
                    77:cc:46:44:ca:b9:4f:d2:f1:a3:f4:65:e7:fe:4d:
                    c4:79:05:37:1a:c1:b9:a6:de:a9:8f:6c:36:f5:71:
                    51:55:7b:d0:67:0c:46:67:a5:0c:1f:55:86:b4:f0:
                    78:11:cf:9f:02:a7:1a:1b:f8:fa:92:75:af:31:0a:
                    34:34:bc:df:42:c6:f3:d1:23:fa:84:e4:dd:f0:2d:
                    38:71:c3:bc:4e:21:c1:f6:cd:51:ec:eb:c1:93:56:
                    62:89:b4:63:23:cf:21:b2:31:3d:35:52:de:04:75:
                    f4:78:41:d0:f4:f5:b8:61:6e:9f:35:ee:9d:04:f0:
                    c5:fe:fc:44:65:01:cd:e8:f1:15:2a:07:49:b9:d4:
                    3f:e4:89:01:4d:6c:55:e7:ce:6e:78:40:51:a0:20:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:30:3F:AA:04:9D:91:1A:90:35:1E:40:F4:41:C0:FB:E8:88:12:16
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DzA_qgSdkRqQNR5A9EHA--iIEhY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.236.0/24
                  185.105.238.0/24
                IPv6:
                  2a12:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:ef:66:dc:67:b3:f7:ff:37:ba:7a:7a:10:af:d1:3d:76:ee:
         90:85:11:01:60:f7:74:6b:99:7b:2b:d3:d0:b3:e5:ae:ef:93:
         a3:7b:2d:b5:55:6a:85:bf:7d:8d:ba:39:5a:dc:b1:4d:9d:3c:
         5e:ed:d7:cc:48:97:3d:7c:d2:87:02:c8:f4:8e:8d:74:4d:a4:
         a8:ef:70:15:0e:24:29:b7:96:f9:1a:71:da:9f:88:65:23:23:
         1d:14:64:fd:6a:a8:af:d2:76:86:28:6b:68:e2:7f:cb:de:7c:
         55:da:e1:db:65:43:f8:26:91:9e:25:b9:32:19:9a:2f:ee:2f:
         68:71:20:d5:33:c0:95:11:26:6c:4d:41:c1:00:d4:10:f3:98:
         8c:69:aa:db:b1:8e:2c:29:d8:c5:14:34:97:ea:36:7c:70:49:
         fa:37:9c:4e:88:dc:84:9c:c7:95:74:d1:27:da:a1:6c:74:15:
         b8:20:75:05:6c:cd:24:2f:a7:33:7c:8c:9f:2c:e6:6f:cd:90:
         b7:e1:34:75:fb:fd:de:af:fc:b9:31:2c:fe:e0:f5:18:44:64:
         39:57:9e:78:42:f6:ad:b6:ca:55:5f:d5:aa:a6:6c:96:73:92:
         20:68:39:88:0c:47:37:83:38:0f:16:b7:a1:fd:9a:57:ad:33:
         b9:29:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----