Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/nbpRdmNzfx_JFFdm0gu2EPKm-kc.roa
File:                     nbpRdmNzfx_JFFdm0gu2EPKm-kc.roa (raw, json)
Hash identifier:          +vX2RoNZY0slD1ZPoUeQ6asJzz6p/jktlcM09lIumaw=
Subject key identifier:   9D:BA:51:76:63:73:7F:1F:C9:14:57:66:D2:0B:B6:10:F2:A6:FA:47
Certificate issuer:       /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial:       098C7FA0
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/nbpRdmNzfx_JFFdm0gu2EPKm-kc.roa
Signing time:             Sat 01 Jan 2022 05:59:43 +0000
ROA not before:           Sat 01 Jan 2022 05:59:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        194.213.126.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160202656 (0x98c7fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
        Validity
            Not Before: Jan  1 05:59:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9dba517663737f1fc9145766d20bb610f2a6fa47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:a7:a1:6b:62:75:32:0d:a7:6d:c7:c7:a1:
                    0e:af:53:1d:9a:9b:52:78:80:81:5e:db:9d:c3:56:
                    2e:dd:27:67:02:d1:0c:03:ea:56:4f:23:25:e5:b1:
                    b1:b3:3e:c9:0f:00:cc:46:ef:52:0f:1b:ee:5c:85:
                    d8:f8:ba:d4:ec:55:14:63:68:50:1c:4f:42:e4:02:
                    6d:6b:71:69:05:e1:a5:b7:0e:2e:e9:ba:ad:a2:f0:
                    94:ad:ab:60:f0:a6:07:30:fa:8e:53:39:f8:14:8f:
                    7f:a8:79:f0:d7:c7:24:7b:3c:e4:bc:e3:32:34:bd:
                    f1:6c:c0:01:5d:31:43:e0:31:1f:3b:ba:8a:86:63:
                    ea:3b:54:aa:54:2d:43:9e:e5:ea:f6:d4:ef:06:ef:
                    97:6c:ba:22:ec:bc:bc:8a:82:20:29:50:2f:46:49:
                    06:dd:c9:bd:c7:c4:87:8e:1a:a5:b7:6c:93:58:c3:
                    26:8b:0f:40:94:b6:95:1a:17:65:82:6a:0e:d9:82:
                    27:5f:45:a8:7a:34:6d:58:e7:a4:d3:fb:2d:f9:ad:
                    b5:5d:21:ed:a1:8e:bd:c5:9d:de:76:bb:40:ec:c2:
                    1a:36:10:f4:6a:e2:55:cc:d3:18:a5:7b:3b:69:73:
                    5a:dd:c0:f2:3a:c2:31:65:47:21:9b:93:f6:cb:5e:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BA:51:76:63:73:7F:1F:C9:14:57:66:D2:0B:B6:10:F2:A6:FA:47
            X509v3 Authority Key Identifier:
                keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/nbpRdmNzfx_JFFdm0gu2EPKm-kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.213.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:32:ed:27:6b:b1:59:86:c1:2b:6c:96:82:66:da:f3:b8:
         fc:bb:ce:34:49:d5:74:03:9e:51:e5:f9:20:8c:98:bb:22:86:
         88:04:50:c2:84:db:7f:04:68:6d:40:78:52:b4:41:fa:8b:54:
         7e:b5:47:4d:07:a4:14:e5:52:20:c7:f0:c2:e3:b7:58:01:0f:
         a7:c9:f1:cf:14:0a:4e:a1:40:77:70:ab:bd:cd:e5:63:15:84:
         b0:25:65:03:f9:8b:f8:3e:34:ad:f2:21:6d:c7:53:c8:cc:44:
         d5:f6:57:67:40:5d:b3:5f:a5:3a:84:35:38:f4:ee:39:4f:66:
         f4:0b:e8:78:e5:9a:83:bb:4c:6b:bf:d0:60:eb:f7:9b:a8:c8:
         49:06:6a:c7:2b:3f:c5:53:6f:05:2c:31:b4:63:d3:25:d2:6b:
         50:7c:5f:39:e8:03:32:34:96:51:e7:b5:17:14:73:7f:17:12:
         7f:c2:ca:cd:6d:c6:20:75:59:8e:3b:3c:8d:f0:e9:e8:20:f7:
         63:ee:ef:7e:2a:2f:4c:6a:8b:16:dd:19:8d:14:a7:24:1a:85:
         25:98:c9:2a:e6:1b:5d:92:1c:f7:67:9c:c0:f8:fd:8f:24:fa:
         da:2c:5c:ac:ef:c4:cc:68:b6:70:2c:95:96:d1:48:7c:53:46:
         7e:27:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----