Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/qzDX5popdDb1-nA9tvFUHH7D6uA.roa
File:                     qzDX5popdDb1-nA9tvFUHH7D6uA.roa (raw, json)
Hash identifier:          26zETCKwJ+U1DG4dA3aij6FL4Go3ZNdPNsIzNecJ+N4=
Subject key identifier:   AB:30:D7:E6:9A:29:74:36:F5:FA:70:3D:B6:F1:54:1C:7E:C3:EA:E0
Certificate issuer:       /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial:       A6113D
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/qzDX5popdDb1-nA9tvFUHH7D6uA.roa
Signing time:             Sat 01 Jan 2022 00:52:40 +0000
ROA not before:           Sat 01 Jan 2022 00:52:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212435
IP address blocks:        193.163.76.0/24 maxlen: 24
                          2a12:4b80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10883389 (0xa6113d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
        Validity
            Not Before: Jan  1 00:52:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab30d7e69a297436f5fa703db6f1541c7ec3eae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:c2:d0:ac:f3:1f:f8:bb:cf:ec:5a:7f:9a:
                    fb:7d:58:70:ed:48:d0:ff:eb:74:fa:fe:3f:d2:1c:
                    da:c9:ce:1e:2a:ce:d5:6d:6a:50:4e:c8:2a:f0:55:
                    f7:3e:9c:3b:a2:7d:3f:d3:a1:40:b9:62:88:cc:08:
                    a7:55:5a:4c:c5:17:c7:52:1f:1b:08:b9:60:08:3a:
                    77:6a:10:ec:3a:c5:22:c9:46:8b:4f:b9:de:a5:19:
                    da:10:7e:93:31:e8:47:45:3f:ba:f6:eb:5d:d6:b9:
                    06:72:60:b3:ff:72:68:d9:a5:ae:12:c4:7c:91:17:
                    f1:ec:a0:d1:ea:a6:17:2a:77:6a:f0:51:36:0c:44:
                    01:2a:23:4e:2b:2d:0d:1e:cc:28:f5:f1:a6:ab:5c:
                    02:09:5b:8d:d3:65:9a:a4:07:ce:2a:52:1b:4e:20:
                    04:ea:4c:7a:e7:51:e2:f4:dc:f7:53:cf:d5:d9:29:
                    e2:a4:d8:2c:56:f9:fc:0c:24:8d:aa:8b:fa:9e:62:
                    c7:04:a1:0c:ee:46:1a:53:9a:c2:82:02:90:b8:60:
                    50:64:a5:dc:b2:d0:11:e4:c2:c3:f2:4b:2a:78:d0:
                    07:e7:8f:27:aa:94:f1:04:54:ab:13:3d:d5:cc:31:
                    c5:59:f3:bb:ee:16:56:18:f3:d6:ac:00:09:5c:09:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:D7:E6:9A:29:74:36:F5:FA:70:3D:B6:F1:54:1C:7E:C3:EA:E0
            X509v3 Authority Key Identifier:
                keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/qzDX5popdDb1-nA9tvFUHH7D6uA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.76.0/24
                IPv6:
                  2a12:4b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:18:f2:fa:9f:8d:ea:ec:8c:a6:52:dd:32:dc:a0:e1:17:
         dc:39:d2:46:52:e6:cd:55:80:af:5c:c5:0e:54:7e:50:f1:62:
         a0:17:8c:ea:df:9b:cc:3c:c4:76:bb:c8:6a:98:e4:ba:ed:fd:
         cd:f9:14:6b:20:31:e1:70:1a:3d:cb:e3:7d:fc:ab:1d:e2:a1:
         8b:ec:6a:ee:fb:f2:04:ad:3d:30:51:b4:6b:b2:1a:22:ad:26:
         50:42:3b:ad:a2:9a:92:31:86:f5:69:ec:3e:65:11:7b:a2:06:
         5f:8f:d2:ab:f6:58:d9:d8:db:c9:0d:5a:21:8a:1f:65:bd:aa:
         4c:dc:88:a7:13:d2:64:82:a9:f8:f7:b6:a8:44:28:42:ad:f2:
         cf:87:f9:7d:03:43:c3:90:83:c0:29:d2:5d:6a:60:43:f5:45:
         35:0a:e9:89:e0:0e:fa:0e:9c:3a:7b:3c:58:00:6b:51:9e:eb:
         bf:40:a9:69:66:33:d6:74:07:4e:2b:54:36:b0:d8:20:98:6c:
         a8:c1:93:46:26:40:a7:97:2e:80:7e:b3:6c:3e:13:18:c9:46:
         5f:45:92:fb:8c:42:47:b0:50:af:ac:18:20:f8:98:48:8c:c4:
         5d:c8:c7:bb:50:b6:9a:4e:90:44:49:4a:1a:49:67:48:ce:b9:
         2b:b0:05:b7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAKYRPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODA2OWI0ZWMwNDdjNmMyZDgwYTQ5OTJlNDIyOGIzMTdjYzhiMjBjMB4XDTIyMDEw
MTAwNTI0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWIzMGQ3ZTY5YTI5
NzQzNmY1ZmE3MDNkYjZmMTU0MWM3ZWMzZWFlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKR8wtCs8x/4u8/sWn+a+31YcO1I0P/rdPr+P9Ic2snOHirO
1W1qUE7IKvBV9z6cO6J9P9OhQLliiMwIp1VaTMUXx1IfGwi5YAg6d2oQ7DrFIslG
i0+53qUZ2hB+kzHoR0U/uvbrXda5BnJgs/9yaNmlrhLEfJEX8eyg0eqmFyp3avBR
NgxEASojTistDR7MKPXxpqtcAglbjdNlmqQHzipSG04gBOpMeudR4vTc91PP1dkp
4qTYLFb5/AwkjaqL+p5ixwShDO5GGlOawoICkLhgUGSl3LLQEeTCw/JLKnjQB+eP
J6qU8QRUqxM91cwxxVnzu+4WVhjz1qwACVwJoJUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSrMNfmmil0NvX6cD228VQcfsPq4DAfBgNVHSMEGDAWgBQoBptOwEfGwtgK
SZLkIosxfMiyDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tBYWJUc0JIeHNMWUNrbVM1Q0tMTVh6SXNndy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvMDI0NTU0LTdhYTYtNGM5Zi1hNDg3LWRmN2I0NWJlNDZjNy8x
L3F6RFg1cG9wZERiMS1uQTl0dkZVSEg3RDZ1QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
MDI0NTU0LTdhYTYtNGM5Zi1hNDg3LWRmN2I0NWJlNDZjNy8xL0tBYWJUc0JIeHNM
WUNrbVM1Q0tMTVh6SXNndy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMGjTDANBAIAAjAHAwUDKhJLgDAN
BgkqhkiG9w0BAQsFAAOCAQEAaZoY8vqfjersjKZS3TLcoOEX3DnSRlLmzVWAr1zF
DlR+UPFioBeM6t+bzDzEdrvIapjkuu39zfkUayAx4XAaPcvjffyrHeKhi+xq7vvy
BK09MFG0a7IaIq0mUEI7raKakjGG9WnsPmURe6IGX4/Sq/ZY2djbyQ1aIYofZb2q
TNyIpxPSZIKp+Pe2qEQoQq3yz4f5fQNDw5CDwCnSXWpgQ/VFNQrpieAO+g6cOns8
WABrUZ7rv0CpaWYz1nQHTitUNrDYIJhsqMGTRiZAp5cugH6zbD4TGMlGX0WS+4xC
R7BQr6wYIPiYSIzEXcjHu1C2mk6QRElKGklnSM65K7AFtw==
-----END CERTIFICATE-----