Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/wOo5DBe60Dj9-KBwdCDfoIZkiGQ.roa
File:                     wOo5DBe60Dj9-KBwdCDfoIZkiGQ.roa (raw, json)
Hash identifier:          dfeEiTi7gSQwOPOoaeQUcm2n04/61WxCTPj8T1JWADk=
Subject key identifier:   C0:EA:39:0C:17:BA:D0:38:FD:F8:A0:70:74:20:DF:A0:86:64:88:64
Certificate issuer:       /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial:       063851D2
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/wOo5DBe60Dj9-KBwdCDfoIZkiGQ.roa
Signing time:             Sat 01 Jan 2022 12:02:52 +0000
ROA not before:           Sat 01 Jan 2022 12:02:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49544
IP address blocks:        85.159.114.0/24 maxlen: 24
                          2a0f:efc0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104354258 (0x63851d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
        Validity
            Not Before: Jan  1 12:02:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0ea390c17bad038fdf8a0707420dfa086648864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:b1:92:09:b4:df:bf:84:37:24:83:f4:79:
                    a0:0c:9b:da:73:aa:8e:f6:7d:cb:fa:27:78:c9:a9:
                    5d:38:a3:b4:b6:a5:c8:e1:f5:93:f9:86:91:40:b1:
                    71:83:18:d9:dc:86:45:ff:fd:34:a9:4a:2b:7b:97:
                    4f:de:b7:fe:fe:c8:10:47:f1:3c:fb:2d:65:7b:4b:
                    46:bb:e9:36:3f:6b:e3:54:cf:65:80:1b:c6:a8:76:
                    41:54:fd:6a:a4:5a:71:c2:c3:9b:55:7d:eb:a8:a0:
                    17:c8:cc:3e:48:67:88:0f:ee:4f:a8:92:1c:85:23:
                    1c:9c:a4:65:c9:01:a4:25:f7:5f:60:d8:7e:e7:88:
                    40:09:61:7b:21:bf:ee:a2:bc:8d:5b:fe:0b:26:13:
                    6b:d0:20:15:97:7b:fb:be:d3:47:b9:2f:52:eb:5e:
                    73:78:11:62:39:12:21:10:82:1c:2f:35:fb:a9:9a:
                    30:94:39:68:b6:5c:23:ad:ea:3e:4a:04:58:72:74:
                    97:e3:17:67:39:82:f3:c4:b8:71:68:8b:83:97:0c:
                    e4:f4:08:21:95:ec:db:f3:61:30:e0:74:27:40:bd:
                    72:3c:ec:dd:40:6b:a3:fb:03:40:aa:9a:1b:cd:0c:
                    40:21:6f:38:b9:1d:6b:d8:95:a2:5c:91:a0:89:86:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EA:39:0C:17:BA:D0:38:FD:F8:A0:70:74:20:DF:A0:86:64:88:64
            X509v3 Authority Key Identifier:
                keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/wOo5DBe60Dj9-KBwdCDfoIZkiGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.159.114.0/24
                IPv6:
                  2a0f:efc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:3b:7a:3e:c0:17:ae:17:d8:69:89:f0:77:fd:36:9c:a0:
         25:73:89:c3:66:4f:92:63:d5:07:fe:8b:a0:d6:c8:4a:56:57:
         7e:9d:86:8e:83:1b:3d:86:e9:b2:78:13:a3:75:cb:5f:db:1a:
         f7:66:cb:31:26:04:c3:d4:07:ca:9b:c3:b9:fc:fe:98:dd:bf:
         9c:93:d6:37:24:25:fa:85:37:91:2f:b2:d7:17:5a:c2:c4:cf:
         c2:4f:be:09:da:10:28:c6:fe:f4:28:09:0b:9a:f8:d0:d2:1f:
         d9:cf:ce:47:37:c3:0f:38:40:f2:3c:e3:c4:59:0b:a5:b2:6f:
         fd:6a:83:0f:73:50:11:9e:9d:13:e1:11:bc:b5:ff:a8:17:8d:
         0c:c9:43:4e:06:16:47:21:3c:63:9f:78:37:f3:52:35:e8:2f:
         1e:b7:ff:1f:cc:bf:c6:4a:9f:b3:38:4e:33:5f:0f:43:5c:2d:
         48:0f:fd:41:30:81:71:9b:2c:17:77:17:35:d9:bd:63:08:fb:
         f6:d2:c7:88:1f:65:0b:aa:5b:56:07:d1:81:f8:e2:d5:40:c2:
         89:62:34:27:3f:cf:0a:af:3c:54:c5:d2:72:0f:1c:b9:02:9b:
         81:f0:e8:72:ca:34:3e:18:b0:9a:dd:9c:4c:ae:2f:4c:4d:45:
         e1:45:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----