Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/PvLg8lVCScCt7HiIw65BhfQuCgM.roa
File:                     PvLg8lVCScCt7HiIw65BhfQuCgM.roa (raw, json)
Hash identifier:          GcgX7aoSIEiwW3lFue17FCR62KwX0oUjXl/PaKtL1CQ=
Subject key identifier:   3E:F2:E0:F2:55:42:49:C0:AD:EC:78:88:C3:AE:41:85:F4:2E:0A:03
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       35B8A3D7
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/PvLg8lVCScCt7HiIw65BhfQuCgM.roa
Signing time:             Sat 01 Jan 2022 03:54:50 +0000
ROA not before:           Sat 01 Jan 2022 03:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199604
IP address blocks:        46.227.172.0/24 maxlen: 24
                          2a02:7a00:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901293015 (0x35b8a3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Jan  1 03:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3ef2e0f2554249c0adec7888c3ae4185f42e0a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:5e:bb:7a:25:64:4e:95:49:42:53:06:21:
                    05:d0:2c:82:fc:13:f2:52:68:13:71:86:27:33:59:
                    c5:17:32:ab:79:45:78:50:32:ca:79:7d:21:71:dd:
                    ca:92:ef:1e:8c:46:73:90:7c:d5:68:1b:a0:05:ae:
                    2e:45:ab:95:97:29:c1:a9:cb:f6:1b:96:9f:a7:ad:
                    7c:ec:c9:50:6d:78:8b:db:20:1e:bf:c9:4f:2c:c3:
                    29:f5:0f:af:77:84:c0:2e:ef:ac:1a:e7:1f:76:19:
                    64:13:89:fd:6f:b1:82:8b:e3:61:8b:cd:38:68:77:
                    e2:70:c6:c5:a1:83:80:b6:20:c7:06:e0:ef:f1:11:
                    04:6a:e2:30:e8:2b:8a:72:a9:49:66:7b:60:70:57:
                    f0:5b:79:e5:d6:1c:84:a4:58:9f:88:45:ac:1e:02:
                    1e:48:7d:ed:3b:0e:e8:62:e0:7c:df:a0:5d:2d:3d:
                    de:f0:39:2e:a6:8d:81:ee:a8:2b:c8:db:eb:4a:d5:
                    da:f5:59:e1:98:42:69:80:7b:40:aa:ba:cd:06:56:
                    b9:03:5c:e5:6a:7c:a7:09:72:71:0c:f0:c4:db:04:
                    c3:61:32:66:b5:37:d9:17:b7:49:18:9f:62:dc:7c:
                    54:41:ef:55:51:28:90:29:04:6a:99:a5:f4:25:c9:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F2:E0:F2:55:42:49:C0:AD:EC:78:88:C3:AE:41:85:F4:2E:0A:03
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/PvLg8lVCScCt7HiIw65BhfQuCgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.172.0/24
                IPv6:
                  2a02:7a00:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:da:1b:03:63:43:be:0f:ab:8b:fc:99:40:41:0c:1f:f9:fc:
         41:f1:5a:5d:2f:7f:90:7b:33:2f:fa:27:f8:f3:46:f8:f4:09:
         8f:77:8b:d1:2b:ba:36:40:52:39:b1:f1:93:7f:73:f3:17:bf:
         24:72:c0:9f:5d:9a:cd:85:b0:f2:86:21:04:e4:a8:03:22:a3:
         64:87:38:45:bb:8c:22:c0:2f:0e:e1:27:49:e6:06:eb:fb:b6:
         03:ea:f3:6b:48:ff:db:33:33:be:2f:38:d0:58:e7:fe:a6:79:
         25:92:c2:43:aa:a8:b5:2d:df:8a:69:9c:dc:d1:2b:ae:53:9e:
         63:86:8a:1b:9c:6c:4f:79:49:84:57:84:0a:ee:ba:a2:a7:5f:
         3b:b5:c0:c6:cb:45:5e:fb:45:d2:88:83:3a:cc:76:e7:a7:a3:
         39:6d:d9:0f:02:2f:11:f6:d4:0a:d4:a1:c7:ca:8a:a1:c7:6f:
         d6:9c:67:70:15:75:c6:31:e9:fe:9f:dc:14:b3:ce:3d:5e:8d:
         06:44:ed:21:e4:4b:49:2a:7d:6d:be:ae:ec:b8:fc:9b:23:9a:
         6a:8a:c4:9c:2c:77:25:05:f7:bf:d3:5d:ce:35:b5:8f:8a:74:
         72:db:e3:45:2a:ae:ab:d4:56:c6:d7:f1:de:0e:56:ca:a1:59:
         91:02:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----