Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/0ll2qDFikTmD_sK_yN5V9UQo2aE.roa
File:                     0ll2qDFikTmD_sK_yN5V9UQo2aE.roa (raw, json)
Hash identifier:          kYO0WD8mGIXx19VlKw9Bhd4Z66DWZzPV/KEAIxqlzjw=
Subject key identifier:   D2:59:76:A8:31:62:91:39:83:FE:C2:BF:C8:DE:55:F5:44:28:D9:A1
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       0171CF
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/0ll2qDFikTmD_sK_yN5V9UQo2aE.roa
Signing time:             Mon 10 Jan 2022 13:59:50 +0000
ROA not before:           Mon 10 Jan 2022 13:59:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        62.85.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94671 (0x171cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: Jan 10 13:59:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d25976a83162913983fec2bfc8de55f54428d9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:4a:7f:31:6c:ed:0e:c8:c1:26:44:eb:7a:
                    33:cf:bb:95:3c:d5:3e:f2:3d:3c:d6:a6:ad:97:8c:
                    5e:9f:90:ca:8a:5e:8f:2b:f2:ca:9f:f7:54:09:08:
                    e6:50:e0:44:f5:77:7c:0f:40:63:75:92:5b:95:35:
                    a6:61:ad:43:a6:13:0c:2e:ec:cf:f1:28:62:10:02:
                    1e:79:f8:77:31:ae:ed:f5:80:06:c5:77:62:66:97:
                    e5:e3:a4:db:37:b8:29:18:e4:1a:22:5a:4f:51:a2:
                    32:1e:22:80:cc:e6:20:04:3c:bf:5d:ac:ed:37:24:
                    d4:5d:90:c8:c0:fb:49:21:63:c5:9a:fd:95:d0:78:
                    e7:55:fe:e9:1e:cb:ec:b4:0c:3d:7b:41:21:22:13:
                    72:4f:e8:67:41:db:cb:4b:c0:ad:b4:f5:be:e0:05:
                    5e:3a:1f:c5:05:65:e8:b8:5d:af:77:73:f4:40:52:
                    cb:95:f3:d5:68:de:05:03:fd:98:cd:dc:af:25:0b:
                    bb:9a:e5:01:2b:bc:ad:09:31:47:1e:25:54:54:23:
                    6c:c4:be:1d:bc:ea:1a:e1:f9:e2:b2:03:e9:3f:89:
                    8e:23:c8:cf:79:72:49:d0:2c:f8:cc:97:f4:24:fa:
                    dd:1a:aa:1e:32:a1:85:58:73:77:91:5e:5f:5a:1f:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:59:76:A8:31:62:91:39:83:FE:C2:BF:C8:DE:55:F5:44:28:D9:A1
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/0ll2qDFikTmD_sK_yN5V9UQo2aE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.85.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:52:42:6e:47:f2:d0:5c:e7:4e:d9:39:1a:b9:a2:88:34:ba:
         eb:4f:e7:93:97:87:c2:39:c6:30:26:3d:63:ff:ba:56:04:14:
         f4:3d:1e:2a:6e:ee:6b:95:07:f6:fe:4e:1a:21:08:a9:40:f3:
         60:9d:9c:1a:1b:18:f2:dc:64:b3:a8:23:b5:c9:ee:9c:ba:f7:
         f9:0c:4a:58:83:36:6e:a1:dc:79:9e:cd:4a:d2:da:24:48:d3:
         99:4e:20:97:3a:7e:7a:f6:78:90:d3:d1:c7:33:fb:22:f5:f7:
         47:a8:42:d2:fd:a6:60:5a:38:bc:f5:de:4b:f8:f9:ff:bc:73:
         50:ed:5a:53:3f:ca:9c:51:8e:a1:9a:53:94:47:08:21:d6:81:
         05:d1:ce:ef:80:de:e3:62:b5:a3:18:5b:c8:ac:a5:7d:d1:a0:
         13:38:46:d1:03:d0:f5:5f:2b:f3:cc:ce:09:5a:a1:4f:ee:94:
         aa:b0:c4:d2:79:72:1b:44:30:37:ed:c2:7d:30:71:33:50:a3:
         0a:03:37:60:c6:de:1e:7c:0d:7c:f7:f7:81:63:72:2e:53:ce:
         b7:d1:c9:54:a4:66:e2:62:21:19:f0:0e:78:5a:ba:13:2e:89:
         5e:76:61:28:e2:00:71:81:a7:5f:72:83:57:07:67:5e:96:c3:
         f7:12:09:8a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAXHPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE4
MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFkMzUxNDUwHhcNMjIwMTEw
MTM1OTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMjU5NzZhODMxNjI5
MTM5ODNmZWMyYmZjOGRlNTVmNTQ0MjhkOWExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm0hKfzFs7Q7IwSZE63ozz7uVPNU+8j081qatl4xen5DKil6P
K/LKn/dUCQjmUOBE9Xd8D0BjdZJblTWmYa1DphMMLuzP8ShiEAIeefh3Ma7t9YAG
xXdiZpfl46TbN7gpGOQaIlpPUaIyHiKAzOYgBDy/XaztNyTUXZDIwPtJIWPFmv2V
0HjnVf7pHsvstAw9e0EhIhNyT+hnQdvLS8CttPW+4AVeOh/FBWXouF2vd3P0QFLL
lfPVaN4FA/2YzdyvJQu7muUBK7ytCTFHHiVUVCNsxL4dvOoa4fnisgPpP4mOI8jP
eXJJ0Cz4zJf0JPrdGqoeMqGFWHN3kV5fWh948QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNJZdqgxYpE5g/7Cv8jeVfVEKNmhMB8GA1UdIwQYMBaAFKgXx0U/N36ctvrl
yJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2LzEv
MGxsMnFERmlrVG1EX3NLX3lONVY5VVFvMmFFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85
NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHky
LXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPlWgMA0GCSqGSIb3DQEBCwUAA4IB
AQBCUkJuR/LQXOdO2TkauaKINLrrT+eTl4fCOcYwJj1j/7pWBBT0PR4qbu5rlQf2
/k4aIQipQPNgnZwaGxjy3GSzqCO1ye6cuvf5DEpYgzZuodx5ns1K0tokSNOZTiCX
On569niQ09HHM/si9fdHqELS/aZgWji89d5L+Pn/vHNQ7VpTP8qcUY6hmlOURwgh
1oEF0c7vgN7jYrWjGFvIrKV90aATOEbRA9D1XyvzzM4JWqFP7pSqsMTSeXIbRDA3
7cJ9MHEzUKMKAzdgxt4efA189/eBY3IuU8630clUpGbiYiEZ8A54WroTLoledmEo
4gBxgadfcoNXB2delsP3EgmK
-----END CERTIFICATE-----