Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/OUppyy-rYM8lPa2KDHcdYWv6bno.roa
File:                     OUppyy-rYM8lPa2KDHcdYWv6bno.roa (raw, json)
Hash identifier:          /+gIK1t9J1C7Yfjot2MSvhAd3Ma/G2r4t3wa+gqnY8g=
Subject key identifier:   39:4A:69:CB:2F:AB:60:CF:25:3D:AD:8A:0C:77:1D:61:6B:FA:6E:7A
Certificate issuer:       /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial:       105193EB
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/OUppyy-rYM8lPa2KDHcdYWv6bno.roa
Signing time:             Sat 01 Jan 2022 13:03:11 +0000
ROA not before:           Sat 01 Jan 2022 13:03:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     680
IP address blocks:        141.75.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273781739 (0x105193eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
        Validity
            Not Before: Jan  1 13:03:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=394a69cb2fab60cf253dad8a0c771d616bfa6e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:71:00:8e:a9:4d:e6:4b:49:5a:62:13:3a:
                    b4:63:41:f3:42:d0:8a:3d:5f:65:8e:d8:cb:9c:55:
                    de:77:2c:6c:07:14:e6:97:1d:d7:71:9d:ac:0e:d6:
                    d8:c6:5a:29:22:e7:d1:d7:d6:3b:e6:50:c1:80:20:
                    de:8c:e4:2c:85:f4:4f:4c:ff:c4:bb:30:35:19:27:
                    c5:a0:59:89:28:5b:f6:23:f1:55:eb:7e:c3:3c:a5:
                    97:34:d6:96:fb:8a:48:5d:9a:92:01:e9:f5:ae:21:
                    33:8b:6d:4d:23:e3:3b:3c:52:41:a1:73:e7:f5:b1:
                    b3:97:7c:56:73:5d:e2:54:ce:d7:80:c4:0d:86:54:
                    a9:dd:0f:b1:1b:6f:17:e3:cb:9c:4f:79:f9:1e:06:
                    b7:ed:83:4e:d6:c6:04:85:b6:88:3f:85:37:03:3a:
                    df:18:23:41:82:6a:f6:3c:4d:35:61:c5:ce:5e:c6:
                    6b:77:0e:7b:e2:a6:2b:38:f5:d1:dc:63:ed:8a:7c:
                    fa:58:01:a7:f8:bf:f5:e4:5d:ee:be:4a:3a:b3:bb:
                    8a:de:8f:98:02:5a:63:e4:5d:a6:be:96:6b:ad:f6:
                    fb:9c:df:5b:56:a5:a9:81:ec:89:25:d2:38:86:af:
                    4a:e5:e0:47:78:a6:b1:37:a4:22:5b:b8:8b:91:1c:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4A:69:CB:2F:AB:60:CF:25:3D:AD:8A:0C:77:1D:61:6B:FA:6E:7A
            X509v3 Authority Key Identifier:
                keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/OUppyy-rYM8lPa2KDHcdYWv6bno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:cf:ca:40:60:df:a8:ad:54:21:85:bb:ff:80:cd:ed:7a:5b:
         01:52:c4:88:73:03:18:26:80:2b:d8:5c:f4:a7:56:32:de:31:
         7d:51:08:34:5e:6b:fc:76:cb:4c:de:d0:c3:a8:27:89:02:eb:
         fc:5b:1a:f8:b5:b7:af:b6:b7:ba:63:cb:85:fa:90:df:b4:ba:
         ee:f7:e5:e0:8e:07:5d:7d:79:24:56:a1:ac:f4:e9:07:7f:37:
         02:f5:80:1c:59:d1:f1:c2:2f:ea:01:32:17:fc:6e:2b:0c:46:
         f5:62:92:b8:cd:45:37:8e:a1:4c:31:fe:6b:1a:78:e2:fb:3f:
         f5:2f:5a:eb:15:a5:c8:b6:45:6e:bf:6c:ce:c8:db:99:31:23:
         8d:fa:ae:1e:e0:8a:29:48:81:00:e3:c3:26:92:2a:71:1b:1b:
         cf:e9:85:32:6a:4e:50:4c:0f:d5:44:1e:35:7f:7d:52:8f:5e:
         7a:21:8a:8b:34:ac:fc:f8:69:8b:83:f6:a9:28:75:0e:90:b0:
         b1:da:5a:1d:45:ca:1f:d4:79:88:67:07:0e:6f:2a:ad:27:cb:
         88:d9:cc:db:c1:8e:e8:11:22:18:4d:ef:5f:53:b6:cd:5c:f4:
         9b:6a:05:c1:3f:9d:c5:00:04:6c:70:07:e4:3d:a6:ad:e7:76:
         9d:44:05:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----