Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/wCmw1ltbw9-EpkOxIiKCEoebahs.roa
File:                     wCmw1ltbw9-EpkOxIiKCEoebahs.roa (raw, json)
Hash identifier:          AWpZyDswforGTb7cWdE3BJ0Y0mraMibpdrawDOoJm4s=
Subject key identifier:   C0:29:B0:D6:5B:5B:C3:DF:84:A6:43:B1:22:22:82:12:87:9B:6A:1B
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       4B4047
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/wCmw1ltbw9-EpkOxIiKCEoebahs.roa
Signing time:             Wed 06 Apr 2022 13:06:46 +0000
ROA not before:           Wed 06 Apr 2022 13:06:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        212.46.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4931655 (0x4b4047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Apr  6 13:06:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c029b0d65b5bc3df84a643b122228212879b6a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:1a:65:42:ac:d1:d4:c3:d8:6c:a4:79:22:
                    55:0e:dd:4e:c3:7d:04:a7:e3:11:a4:e0:e9:6d:7f:
                    0b:94:a6:fd:6a:63:ca:fb:e0:c2:67:a5:d9:9e:fe:
                    af:5d:3f:cb:97:85:d4:4d:84:65:1b:33:3c:60:b2:
                    f6:51:c8:82:6a:30:fb:48:8a:bf:69:84:5a:33:99:
                    9c:8c:98:d7:2f:dd:7a:0e:42:85:76:fc:7a:ba:fb:
                    15:1c:12:3a:92:9a:35:fb:5a:5e:b6:41:d2:7d:94:
                    d5:2c:8c:d2:c9:0f:b6:09:3e:67:8a:b8:a2:37:81:
                    fd:8c:14:af:dc:1f:93:6d:55:50:cf:f0:8d:f9:39:
                    a1:09:10:64:cd:88:cf:4c:c3:d8:63:40:1a:ca:14:
                    35:90:35:24:03:f4:c0:f0:b5:9d:27:ab:bb:57:4f:
                    b9:bf:15:94:ea:dd:46:b1:8a:b3:3f:0b:ec:fc:a8:
                    06:ab:76:3c:f0:75:34:3e:01:ba:a8:35:a4:c7:85:
                    5e:91:71:55:e1:a3:5a:34:b7:b2:1e:bd:65:53:99:
                    cf:ee:72:d2:ea:dd:83:08:cf:39:ba:59:74:16:66:
                    a4:fb:04:64:72:11:a5:73:72:71:70:d4:ad:6a:20:
                    5a:64:f9:ff:45:31:d7:01:cf:2d:83:d8:3a:60:0f:
                    15:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:29:B0:D6:5B:5B:C3:DF:84:A6:43:B1:22:22:82:12:87:9B:6A:1B
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/wCmw1ltbw9-EpkOxIiKCEoebahs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:04:1d:ed:78:ac:4a:84:17:40:d6:99:ad:b4:a2:25:55:82:
         b5:aa:dc:5d:af:a4:7a:22:ab:dc:73:90:ce:9f:61:79:e3:36:
         42:f0:66:20:79:1a:d1:df:e1:fe:f8:56:27:c0:d0:e6:0b:a1:
         67:70:b0:40:09:f1:c2:49:a9:dc:2c:ac:3d:1b:1d:74:ec:c5:
         58:25:db:c3:fb:ce:60:54:5d:4e:09:93:d4:75:8a:7b:4b:c4:
         8a:65:56:28:c5:22:fe:9a:98:9e:da:77:3c:82:d5:fe:87:53:
         b1:73:45:b9:56:aa:d5:7d:47:9e:a4:33:b1:08:61:3d:ef:3c:
         71:41:5c:9e:dc:5c:a3:66:3a:7f:95:eb:19:dc:a4:73:55:c6:
         89:52:73:51:5d:5f:62:92:ff:c2:f1:f8:76:e7:e9:e0:a2:63:
         20:6f:2f:4e:45:67:bd:07:ba:8c:f3:44:d5:66:0f:52:62:9a:
         40:8f:78:9f:0a:d4:f3:e0:ba:43:24:16:52:b8:f4:82:c1:ac:
         d1:99:a0:59:3c:b7:ca:a0:a5:3f:28:7c:11:88:8d:e9:55:41:
         90:52:fd:ae:ab:a1:ee:a7:6f:3b:84:e3:32:a1:32:4c:08:55:
         51:42:64:1d:9a:89:66:23:92:60:27:78:33:53:de:30:c1:4e:
         37:c4:5e:46
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDS0BHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRh
YzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBiNmJkY2MwHhcNMjIwNDA2
MTMwNjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMDI5YjBkNjViNWJj
M2RmODRhNjQzYjEyMjIyODIxMjg3OWI2YTFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq2EaZUKs0dTD2GykeSJVDt1Ow30Ep+MRpODpbX8LlKb9amPK
++DCZ6XZnv6vXT/Ll4XUTYRlGzM8YLL2UciCajD7SIq/aYRaM5mcjJjXL916DkKF
dvx6uvsVHBI6kpo1+1petkHSfZTVLIzSyQ+2CT5niriiN4H9jBSv3B+TbVVQz/CN
+TmhCRBkzYjPTMPYY0AayhQ1kDUkA/TA8LWdJ6u7V0+5vxWU6t1GsYqzPwvs/KgG
q3Y88HU0PgG6qDWkx4VekXFV4aNaNLeyHr1lU5nP7nLS6t2DCM85ull0Fmak+wRk
chGlc3JxcNStaiBaZPn/RTHXAc8tg9g6YA8VAwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMApsNZbW8PfhKZDsSIighKHm2obMB8GA1UdIwQYMBaAFNrDJjKqkVQlPG3N
IzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEyLzEv
d0NtdzFsdGJ3OS1FcGtPeElpS0NFb2ViYWhzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80
OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4
YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C45MA0GCSqGSIb3DQEBCwUAA4IB
AQDZBB3teKxKhBdA1pmttKIlVYK1qtxdr6R6Iqvcc5DOn2F54zZC8GYgeRrR3+H+
+FYnwNDmC6FncLBACfHCSancLKw9Gx107MVYJdvD+85gVF1OCZPUdYp7S8SKZVYo
xSL+mpie2nc8gtX+h1Oxc0W5VqrVfUeepDOxCGE97zxxQVye3FyjZjp/lesZ3KRz
VcaJUnNRXV9ikv/C8fh25+ngomMgby9ORWe9B7qM80TVZg9SYppAj3ifCtTz4LpD
JBZSuPSCwazRmaBZPLfKoKU/KHwRiI3pVUGQUv2uq6Hup287hOMyoTJMCFVRQmQd
molmI5JgJ3gzU94wwU43xF5G
-----END CERTIFICATE-----