Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211375.roa
File:                     AS211375.roa (raw, json)
Hash identifier:          6HBwJXHMfhH+iPMd53WKfq7kekDKsJKWpzyHIIMTqdg=
Subject key identifier:   20:04:65:81:E2:97:0B:2C:31:2C:C2:2A:00:D5:8A:F7:93:1F:34:D3
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       2C4D5DBC9A1AED3A55DF0D8ACF121997D5CE4C02
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211375.roa
Signing time:             Wed 01 Mar 2023 07:08:17 +0000
ROA not before:           Wed 01 Mar 2023 07:03:17 +0000
ROA not after:            Wed 28 Feb 2024 07:08:17 +0000
asID:                     211375
IP address blocks:        2a0a:9204:30::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:5d:bc:9a:1a:ed:3a:55:df:0d:8a:cf:12:19:97:d5:ce:4c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Mar  1 07:03:17 2023 GMT
            Not After : Feb 28 07:08:17 2024 GMT
        Subject: CN=20046581E2970B2C312CC22A00D58AF7931F34D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:99:e9:82:e2:79:f0:c3:0a:48:e3:9b:66:
                    21:bc:cd:56:48:e2:16:dd:07:f6:5d:c8:98:b6:4c:
                    d6:10:24:73:1c:65:62:1f:25:e6:75:7e:9d:b9:2c:
                    ed:fa:5b:05:35:98:7b:5b:23:56:e7:02:86:9e:b7:
                    5c:01:01:ae:f8:23:c8:28:97:c6:69:b1:32:56:70:
                    5e:7b:9f:a7:27:9c:e4:eb:25:7d:0a:da:b8:b9:33:
                    0c:20:ce:4b:0f:c6:01:04:1c:c2:71:12:12:d7:d6:
                    3d:2e:63:21:83:e8:89:08:cd:e3:8b:1a:da:7d:0a:
                    1d:4a:b3:73:c8:1f:00:82:51:62:cf:b2:5c:3d:94:
                    4f:df:1b:2f:9a:e1:4c:f4:54:2b:00:72:18:be:f1:
                    a4:dd:a8:9e:52:30:22:c4:ee:79:3e:79:7d:0f:db:
                    05:35:ad:96:8e:11:bf:03:08:b5:69:06:7a:8c:51:
                    71:a9:64:d3:b5:dd:60:55:de:9a:04:c6:6a:f0:d5:
                    6f:b5:89:58:9d:65:7b:8e:80:84:f6:c5:49:7c:54:
                    cd:d6:46:6b:83:dc:41:0a:b7:f9:1a:37:7b:78:46:
                    9c:4c:f6:76:01:df:29:87:a6:b7:28:0d:45:c8:88:
                    6b:f3:8e:ab:5e:18:9a:f9:ed:04:08:20:7a:12:e2:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:65:81:E2:97:0B:2C:31:2C:C2:2A:00:D5:8A:F7:93:1F:34:D3
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:9204:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:6e:37:93:7f:78:21:1e:24:a4:99:d0:0d:1d:a4:24:b0:6a:
         33:dd:15:8b:96:d7:d2:3e:e0:b2:be:62:2e:1a:53:12:a1:bb:
         fa:50:36:87:18:39:b3:69:ff:d5:e7:15:25:73:4f:b9:3c:62:
         6c:23:b0:7f:7e:35:cc:82:69:ea:f4:56:ba:c5:b0:88:4b:f2:
         39:d6:55:90:3a:0c:42:bd:79:2a:7e:d4:23:33:fc:30:8b:a8:
         b7:f3:70:8d:97:7d:33:0a:ba:ae:1a:39:a6:ea:5a:8b:c0:2a:
         a9:8d:50:a3:4c:e5:a0:e1:fe:68:1e:70:05:a7:a3:6e:fc:6e:
         98:90:fd:d3:70:46:60:57:b1:56:05:3a:5a:72:60:a4:04:27:
         ce:60:a4:9e:fb:77:52:4d:72:42:2e:d5:36:6e:4d:a6:af:2e:
         8b:7b:86:5b:60:82:0f:2b:df:a2:07:da:84:40:27:ba:85:94:
         f1:f8:6c:03:3d:db:f9:fc:4b:c6:d4:e8:84:82:b8:fa:79:98:
         ad:7b:ae:fc:74:83:d4:02:d8:02:1d:36:b3:cb:5a:0b:69:09:
         05:9a:9b:da:a9:80:e2:e7:17:5e:dd:b7:51:72:4d:77:65:97:
         eb:f7:1f:3f:68:74:76:55:40:fb:12:07:4a:d4:f3:65:38:a6:
         b5:da:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----