Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/Q0C6ku1AuBz0Se9Snh9-MOZiFeI.roa
File:                     Q0C6ku1AuBz0Se9Snh9-MOZiFeI.roa (raw, json)
Hash identifier:          4bjVP2YGjYs4tEPIuEmIbEfsxmb4v5abCqn1WhBTTDE=
Subject key identifier:   43:40:BA:92:ED:40:B8:1C:F4:49:EF:52:9E:1F:7E:30:E6:62:15:E2
Certificate issuer:       /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial:       0184C3A2DB8885D27A84A54AA282B08059D6
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/Q0C6ku1AuBz0Se9Snh9-MOZiFeI.roa
Signing time:             Tue 29 Nov 2022 13:45:40 +0000
ROA not before:           Tue 29 Nov 2022 13:45:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210756
IP address blocks:        5.101.68.0/24 maxlen: 24
                          5.101.69.0/24 maxlen: 24
                          5.101.70.0/24 maxlen: 24
                          5.188.176.0/24 maxlen: 24
                          5.188.177.0/24 maxlen: 24
                          5.188.178.0/24 maxlen: 24
                          5.188.179.0/24 maxlen: 24
                          37.9.37.0/24 maxlen: 24
                          37.9.38.0/24 maxlen: 24
                          37.9.36.0/24 maxlen: 24
                          37.9.39.0/24 maxlen: 24
                          146.185.197.0/24 maxlen: 24
                          146.185.198.0/24 maxlen: 24
                          146.185.199.0/24 maxlen: 24
                          146.185.196.0/24 maxlen: 24
                          2a11:27c0:140::/44 maxlen: 44
                          2a11:27c0:110::/44 maxlen: 44
                          2a11:27c0:120::/44 maxlen: 44
                          2a11:27c0:130::/44 maxlen: 44
                          2a11:27c0:150::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c3:a2:db:88:85:d2:7a:84:a5:4a:a2:82:b0:80:59:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
        Validity
            Not Before: Nov 29 13:45:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4340ba92ed40b81cf449ef529e1f7e30e66215e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:62:48:b8:9a:55:8c:8b:7c:d2:fd:4f:2a:
                    5d:58:35:58:71:d3:7f:c3:64:d4:af:a9:88:e9:f6:
                    3c:36:69:09:51:31:6c:92:db:79:37:e1:b7:fd:f0:
                    d5:84:15:d8:e2:93:66:26:35:a7:98:00:0b:2a:c9:
                    7d:00:a4:4d:db:1d:90:a4:f0:93:5f:3e:d5:e9:fb:
                    6f:59:2c:2d:30:93:ef:11:6c:ab:c9:80:95:cf:80:
                    86:6f:a3:12:2c:14:ac:a3:8e:60:08:cd:11:61:09:
                    68:aa:3a:61:3d:34:d0:38:35:a8:e7:5e:bc:f5:d4:
                    d2:c3:ad:a4:73:a5:d7:87:d7:3d:67:bf:46:be:75:
                    ff:c9:ac:d8:e3:94:8e:50:6f:ad:91:10:b0:f2:c8:
                    81:d1:b8:8e:73:cd:c2:e9:69:62:31:8d:97:bf:e6:
                    92:f8:7d:26:cf:5d:79:67:11:56:9f:9b:94:14:86:
                    d9:16:44:c9:6c:22:99:2f:0c:f8:32:e0:05:e8:e2:
                    c9:18:72:5a:47:7a:a8:85:2f:1e:18:d0:1e:50:51:
                    45:c5:f7:fe:29:43:7e:01:7a:59:fc:a1:2b:d9:93:
                    6b:c0:3b:21:f1:7a:17:15:f9:a5:78:e0:32:b9:5f:
                    dc:9e:6f:66:37:fa:85:8d:d4:1b:9a:5b:3f:15:03:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:40:BA:92:ED:40:B8:1C:F4:49:EF:52:9E:1F:7E:30:E6:62:15:E2
            X509v3 Authority Key Identifier:
                keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/Q0C6ku1AuBz0Se9Snh9-MOZiFeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.101.68.0-5.101.70.255
                  5.188.176.0/22
                  37.9.36.0/22
                  146.185.196.0/22
                IPv6:
                  2a11:27c0:110::-2a11:27c0:15f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:7a:d4:99:ee:f3:09:32:3a:00:a6:b3:c2:ca:9f:f9:0f:
         b0:4d:73:cf:12:99:9b:70:2f:e2:98:10:7f:9b:52:56:bb:30:
         b1:71:15:b6:0d:ae:f8:c9:0d:2f:ae:22:3e:eb:91:b0:e1:10:
         be:30:ca:07:10:c3:be:51:f7:70:86:09:b6:0a:1b:a4:f0:d5:
         30:78:a4:f7:4b:4a:13:7e:de:9b:9d:4b:87:64:e1:8a:f6:10:
         a6:3f:7d:0b:01:f3:f7:43:9a:95:b6:68:e5:b3:e2:a2:d0:f4:
         4f:f1:41:06:bf:e2:37:50:b0:9c:bf:ee:b8:62:fa:ea:6a:5a:
         fa:50:44:36:78:2b:97:15:9d:01:19:57:f5:bc:f3:f5:a5:98:
         dc:7c:97:d3:30:60:62:15:93:24:81:9d:19:c2:7e:1e:b0:f3:
         f8:24:fa:5f:50:29:f2:3a:66:8f:4d:68:66:1d:27:bb:55:5d:
         37:33:ad:e2:8a:b0:f2:d5:4e:a5:6f:3b:04:25:25:c2:58:a1:
         35:cc:7e:8c:42:1b:e4:31:92:80:19:17:03:25:a6:de:e2:2f:
         34:28:a2:e7:2d:37:fc:15:61:10:0c:d0:61:7e:66:3f:8e:3b:
         7c:76:ba:01:8d:16:b1:73:2d:78:0a:d2:28:cf:17:3c:ae:c7:
         55:54:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----