Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/ljjSUtZ_2EaxqLTkhaXvx1yGLJI.roa
File:                     ljjSUtZ_2EaxqLTkhaXvx1yGLJI.roa (raw, json)
Hash identifier:          P3u9Fy30hfAjUrnfpSWRQLHDZghNzOwRSNtG0AEIwo4=
Subject key identifier:   96:38:D2:52:D6:7F:D8:46:B1:A8:B4:E4:85:A5:EF:C7:5C:86:2C:92
Certificate issuer:       /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial:       037B8080
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/ljjSUtZ_2EaxqLTkhaXvx1yGLJI.roa
Signing time:             Sat 01 Jan 2022 11:54:48 +0000
ROA not before:           Sat 01 Jan 2022 11:54:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197226
IP address blocks:        176.105.253.0/24 maxlen: 24
                          2a0d:c740:3c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58425472 (0x37b8080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
        Validity
            Not Before: Jan  1 11:54:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9638d252d67fd846b1a8b4e485a5efc75c862c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:41:ab:51:aa:e9:17:ec:74:60:13:dd:14:
                    1b:19:41:03:c9:a3:e6:18:75:f2:9c:40:25:4b:30:
                    da:ff:72:b2:d7:47:1f:99:c1:85:bf:af:1f:bb:02:
                    85:b2:59:bd:0a:a9:04:e5:8a:fe:80:23:a2:51:cb:
                    6a:ba:21:aa:99:29:61:10:43:34:f5:bd:89:5c:c3:
                    b1:bf:86:6d:9c:4f:c3:5e:c7:c9:20:a6:8a:dd:d2:
                    96:68:24:58:28:a8:87:a8:17:c5:71:7b:bd:d2:b8:
                    82:6e:dd:b4:1e:00:98:80:30:ad:bf:db:b8:fc:bc:
                    23:6a:6d:1a:e9:40:d7:38:34:bd:e3:f0:fa:f9:d4:
                    07:b5:4c:e7:cb:fb:fd:8f:d2:8d:ae:f9:07:84:8a:
                    e7:7c:3f:a1:e1:8a:b0:6d:38:71:03:c3:37:88:8a:
                    4d:ee:02:38:8b:a8:ed:4c:dc:a3:d3:0f:2f:81:21:
                    a3:60:98:69:af:af:3b:57:e3:ab:da:58:da:78:e8:
                    94:b6:32:a3:d3:ac:02:a9:84:99:80:13:b6:c1:08:
                    d6:ca:c3:62:3b:9a:ab:88:1d:75:02:c6:a2:20:45:
                    d2:e2:20:15:bc:f0:f5:38:08:ca:9d:53:52:b9:f3:
                    d7:05:78:03:74:22:33:be:84:32:1a:72:d8:c2:59:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:38:D2:52:D6:7F:D8:46:B1:A8:B4:E4:85:A5:EF:C7:5C:86:2C:92
            X509v3 Authority Key Identifier:
                keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/ljjSUtZ_2EaxqLTkhaXvx1yGLJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.253.0/24
                IPv6:
                  2a0d:c740:3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:62:eb:43:6e:b0:f8:2b:88:c6:ee:31:af:87:53:09:ac:88:
         b2:81:16:8e:b8:9f:0d:3d:67:0e:47:c0:a5:e6:b6:91:20:4d:
         4a:79:38:8c:02:a6:ef:09:7a:2e:a8:d6:83:5d:cb:bd:37:a0:
         68:0b:d2:dd:94:8e:8c:4c:b8:38:2c:a9:8d:0a:35:67:4a:c6:
         18:6d:9f:ce:5c:cc:7c:07:91:e9:0d:bf:92:6e:21:06:99:3f:
         24:06:dc:17:21:bf:3b:03:56:0c:08:32:74:3e:73:9b:03:ff:
         b7:32:31:89:1a:56:9b:a7:d6:7f:eb:20:65:1f:cf:db:fa:5e:
         79:89:f3:83:b6:5c:0b:e8:54:1b:10:ea:80:86:42:66:ea:c4:
         db:ee:f3:81:c7:bb:f2:02:cd:02:46:ad:a6:30:d8:53:30:d9:
         91:78:1a:44:39:fe:1d:53:2b:c8:b9:53:e9:52:b2:87:9d:70:
         55:d0:0f:02:8f:60:2d:7c:a2:fb:4b:90:e7:9f:6c:19:0f:66:
         90:72:d3:d8:0b:42:09:93:c5:4c:7f:97:0a:5c:68:64:6b:87:
         61:35:05:47:a8:9e:9a:82:1a:0e:f2:a1:eb:8b:61:f1:6c:0a:
         e9:75:92:ad:9a:ce:c4:2e:36:39:f6:3a:a7:f8:6e:63:4f:b3:
         50:63:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----