Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/ZC84SWVyX_L_9GPwhQm_Xl9blqA.roa
File:                     ZC84SWVyX_L_9GPwhQm_Xl9blqA.roa (raw, json)
Hash identifier:          5iaJdvINQcAqBlQprkIsTJCpsxPrPJYMCE3RcG86MX8=
Subject key identifier:   64:2F:38:49:65:72:5F:F2:FF:F4:63:F0:85:09:BF:5E:5F:5B:96:A0
Certificate issuer:       /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial:       0182E3962DDA2BAA6669876AC2928C098306
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/ZC84SWVyX_L_9GPwhQm_Xl9blqA.roa
Signing time:             Sun 28 Aug 2022 08:34:06 +0000
ROA not before:           Sun 28 Aug 2022 08:34:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212910
IP address blocks:        77.221.60.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e3:96:2d:da:2b:aa:66:69:87:6a:c2:92:8c:09:83:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
        Validity
            Not Before: Aug 28 08:34:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=642f384965725ff2fff463f08509bf5e5f5b96a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:99:3b:dd:ae:2d:c9:93:af:2e:f3:39:fc:
                    8b:d9:dd:be:1e:62:43:f1:8a:8a:22:6f:9c:88:38:
                    18:84:52:69:29:8c:11:04:1c:20:0c:f4:ca:49:19:
                    94:fb:1e:14:c7:69:62:ba:d0:e0:4b:05:5e:06:e9:
                    87:f0:c2:91:bc:a1:e5:78:59:18:24:42:87:be:3b:
                    bd:94:06:31:b8:28:38:24:38:01:a4:9c:b1:0f:0d:
                    98:e2:d8:aa:e4:51:82:ea:81:91:25:c8:06:ba:2a:
                    05:dd:5a:66:85:67:6f:0c:ea:ca:97:ce:28:77:85:
                    35:b5:75:59:c2:7d:56:df:00:d2:a4:cc:b8:91:22:
                    f6:74:4b:9e:c3:48:3e:80:2b:d0:29:a0:6d:44:22:
                    94:4e:15:0b:d8:50:f3:08:de:2e:5d:eb:db:ef:f9:
                    9d:18:5c:4a:d9:5d:20:28:2c:de:fc:d8:68:1d:dc:
                    bf:c6:c9:4d:0a:c0:95:c1:c3:0c:b1:e2:81:2e:0e:
                    1f:aa:31:a8:02:45:33:a9:c0:09:d9:f8:09:b1:d2:
                    53:bf:0d:1f:7a:ca:96:2a:6f:7f:e7:66:84:f2:64:
                    ef:e0:e1:9c:c3:4c:71:ec:e0:8c:66:44:a7:ba:c1:
                    b7:c7:11:74:4c:b5:57:43:db:fd:94:cc:85:11:fc:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2F:38:49:65:72:5F:F2:FF:F4:63:F0:85:09:BF:5E:5F:5B:96:A0
            X509v3 Authority Key Identifier:
                keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/ZC84SWVyX_L_9GPwhQm_Xl9blqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.221.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:e1:6b:3b:41:70:da:58:d5:91:f2:17:ad:54:4b:2b:fb:
         f4:42:42:a3:9f:5a:04:e1:90:f1:6d:e1:4e:2e:b9:15:2d:97:
         a3:c6:b6:3b:ab:58:e5:63:52:7e:39:03:b0:bf:51:86:90:3e:
         25:84:c4:05:55:f5:0a:c7:80:55:c6:b2:f4:51:fd:0c:5a:ff:
         a7:c7:34:8e:0f:aa:f5:45:a1:15:99:35:e3:2b:84:e1:b1:15:
         7a:70:4f:86:02:3a:24:34:7a:09:44:ba:97:1c:cd:6c:38:89:
         54:d1:1d:1c:e1:8a:41:95:7b:9c:16:62:31:94:a6:32:e7:9c:
         3f:d5:68:e8:2a:ce:f3:80:a5:25:15:e5:8b:61:ae:57:ad:53:
         90:73:12:1a:cf:cb:0c:0d:fd:89:c0:3d:73:11:b8:6e:2d:2c:
         bb:54:fe:ab:25:ef:17:d0:d2:de:83:71:f5:24:2e:23:2c:13:
         55:82:fa:0b:d6:f7:3c:13:29:25:3e:b1:2a:27:2e:ea:49:5b:
         e4:32:b6:9e:92:26:48:45:a0:21:ca:a6:0a:67:dd:56:88:d7:
         ab:c7:14:19:86:e9:f4:2e:3a:4b:59:a4:6c:4a:4b:12:02:e8:
         ce:26:0e:46:e6:30:5e:99:f5:bd:cc:db:42:5b:82:84:b3:01:
         4f:16:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----