Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/PxAwvibE_qnyJlEq4Qt8pfYUbrk.roa
File:                     PxAwvibE_qnyJlEq4Qt8pfYUbrk.roa (raw, json)
Hash identifier:          s5QDA4nJ6XuPJASY0sXJf1Asq72kkMG8RIwPKj2TiPg=
Subject key identifier:   3F:10:30:BE:26:C4:FE:A9:F2:26:51:2A:E1:0B:7C:A5:F6:14:6E:B9
Certificate issuer:       /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial:       10EB38B7
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/PxAwvibE_qnyJlEq4Qt8pfYUbrk.roa
Signing time:             Sat 01 Jan 2022 04:03:50 +0000
ROA not before:           Sat 01 Jan 2022 04:03:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205112
IP address blocks:        185.138.54.0/24 maxlen: 24
                          2a07:a40:c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283850935 (0x10eb38b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
        Validity
            Not Before: Jan  1 04:03:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3f1030be26c4fea9f226512ae10b7ca5f6146eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:9c:27:c3:c3:e6:79:19:c0:23:99:18:f6:
                    20:7b:7f:ea:32:54:5f:aa:e1:72:d9:df:48:a6:93:
                    65:10:f9:bf:fb:d7:7d:35:17:cf:ac:12:ab:63:ff:
                    23:10:da:ee:0c:40:21:48:c5:62:23:01:6d:c1:8f:
                    25:e8:a2:a2:8e:2b:54:f4:a0:d2:b8:c0:06:ec:34:
                    ef:8f:55:b6:e9:f0:96:88:5c:8c:e8:dc:44:69:4f:
                    54:52:42:17:f0:b9:0b:9f:63:c1:e4:79:79:7c:cd:
                    b1:67:ce:91:ce:a7:79:71:0d:39:1a:03:dd:c9:84:
                    ca:dc:df:78:15:0e:90:22:e6:22:7f:ff:f2:1c:f2:
                    a1:01:e0:c4:f1:e7:68:eb:d1:65:ee:d0:c6:b3:e4:
                    90:49:f7:65:25:d3:0f:79:e0:d4:f3:03:d9:37:3d:
                    75:99:75:e0:4d:95:bd:1a:98:71:cb:ea:cf:51:a7:
                    c7:10:0f:70:31:08:38:72:19:f6:72:c9:d9:f2:a0:
                    8d:dd:42:8a:b0:c8:19:a8:c7:97:6e:b5:e1:34:ca:
                    d6:12:66:4d:70:95:bd:de:88:6d:6b:42:60:25:dc:
                    6b:df:c8:c1:fb:d4:2b:b5:dd:15:3a:88:b6:e9:5f:
                    c9:28:89:90:fe:94:24:f4:ba:6d:2e:dc:a1:c3:93:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:30:BE:26:C4:FE:A9:F2:26:51:2A:E1:0B:7C:A5:F6:14:6E:B9
            X509v3 Authority Key Identifier:
                keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/PxAwvibE_qnyJlEq4Qt8pfYUbrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.54.0/24
                IPv6:
                  2a07:a40:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:33:1a:fd:3e:f6:b6:81:46:3c:35:60:cd:a6:05:55:ac:63:
         0b:51:bd:a5:7a:81:c0:ee:92:43:da:29:5f:6d:3e:6b:05:86:
         df:10:76:b0:b0:72:57:1c:3c:f4:e1:ce:c2:a2:19:02:39:b8:
         33:4e:d7:0c:8d:8a:71:c7:a8:55:3f:42:81:11:68:cf:fa:0a:
         73:5d:c2:79:96:c6:41:2a:c7:22:6f:52:77:e0:8d:ca:5b:d9:
         24:f6:4a:b1:2f:2a:8d:2a:13:72:45:1b:a4:52:4c:36:05:76:
         5b:cb:44:11:ed:08:4f:c0:80:67:04:7a:ae:67:c1:f3:6a:71:
         ff:0a:27:ad:d2:26:a2:c8:ea:0f:95:c1:7e:4e:82:b0:5e:89:
         f4:18:51:f9:f8:c6:54:c3:d2:31:16:88:43:90:07:cf:63:86:
         cb:7a:d0:e1:8f:f2:e4:55:44:30:e4:34:00:c9:be:d5:2d:b5:
         a6:a1:49:0d:3d:b3:66:65:61:c3:9a:51:b3:d6:86:3c:2e:97:
         a6:c1:67:88:ec:48:ae:39:93:98:fa:62:52:c7:80:31:e6:ba:
         62:1a:6b:e7:8e:db:e6:98:e8:25:7a:6f:dc:61:56:b0:c6:6a:
         ba:0c:0c:03:6b:96:25:a7:6e:90:d1:a4:ab:36:df:a4:40:15:
         81:ca:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----