Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/6eWRvm_s97drosmY03SBiQd9ju4.roa
File:                     6eWRvm_s97drosmY03SBiQd9ju4.roa (raw, json)
Hash identifier:          yqgmZ7QAXFtjMhl2HnaMG4E8ho2SAGmizwAs8UAzhvk=
Subject key identifier:   E9:E5:91:BE:6F:EC:F7:B7:6B:A2:C9:98:D3:74:81:89:07:7D:8E:EE
Certificate issuer:       /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial:       0162786C
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/6eWRvm_s97drosmY03SBiQd9ju4.roa
Signing time:             Sat 01 Jan 2022 07:58:38 +0000
ROA not before:           Sat 01 Jan 2022 07:58:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30791
IP address blocks:        193.7.168.0/21 maxlen: 21
                          2a0d:1700::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23230572 (0x162786c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
        Validity
            Not Before: Jan  1 07:58:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9e591be6fecf7b76ba2c998d3748189077d8eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:62:e1:68:1a:59:1e:74:96:03:d8:32:ea:
                    a9:e9:e6:85:85:4b:91:0b:72:41:e1:51:b6:27:59:
                    5b:6c:b9:b9:06:26:32:e6:56:50:0b:d7:d5:2d:86:
                    cd:6f:93:ea:78:7a:b2:47:af:9e:2d:0e:f6:7f:e9:
                    d9:36:20:ac:c4:57:4c:83:9e:54:0d:18:4a:d4:00:
                    fb:a2:7d:dd:67:5c:3c:ec:92:0e:14:06:84:86:a7:
                    d4:7a:e4:7a:83:00:f8:d5:a3:ed:52:3d:08:56:03:
                    03:2f:d2:85:13:fc:f4:61:75:d1:72:ce:be:00:8e:
                    9c:56:99:5f:fd:fe:4c:d7:c3:37:3d:4b:e1:f3:42:
                    32:b3:d8:78:96:23:b1:5f:78:b0:fd:6e:27:34:f6:
                    bd:cb:a3:58:db:be:6c:df:e0:22:d6:54:24:12:79:
                    ee:1d:cb:59:2b:40:ea:6b:14:1c:d1:0b:1b:44:f0:
                    e8:71:42:cc:67:41:a5:21:7b:b6:50:ac:3b:fa:de:
                    91:f6:43:ed:3c:05:5a:e8:a0:f1:d9:a3:30:87:d6:
                    bb:29:a1:b5:25:e2:39:ef:62:c6:bb:cb:43:b7:9b:
                    5a:46:d6:b5:77:5b:c1:6a:49:70:22:6b:5f:3c:68:
                    1a:c8:86:55:75:4b:bd:9d:16:89:c1:b4:f9:26:f1:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E5:91:BE:6F:EC:F7:B7:6B:A2:C9:98:D3:74:81:89:07:7D:8E:EE
            X509v3 Authority Key Identifier:
                keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/6eWRvm_s97drosmY03SBiQd9ju4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.7.168.0/21
                IPv6:
                  2a0d:1700::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:7e:8d:35:6a:89:a0:3a:02:8b:bc:fb:c3:85:73:5d:d5:
         0f:f5:71:d7:c8:b3:e3:4b:03:2b:a9:3a:ef:20:5e:0e:45:c0:
         bf:ee:2f:eb:17:b9:f7:d9:a3:af:76:ad:48:bb:a6:6f:99:5e:
         ee:5a:3f:fc:d8:d9:ab:e5:3f:dd:02:46:be:f9:d8:09:b7:50:
         0d:41:79:da:c4:bb:37:33:ef:94:f4:19:f6:59:f7:c9:2b:ad:
         c6:ae:7e:c9:91:97:c3:b4:dc:21:c0:2e:c9:aa:db:c5:f7:0e:
         9f:20:87:e5:d9:4c:37:a5:5c:09:db:05:3d:0e:79:82:20:96:
         ff:83:91:92:aa:81:f8:8b:38:7b:52:c8:d1:11:7d:6c:d7:31:
         fb:09:c5:31:80:6a:8d:95:bf:00:52:b5:b4:c6:90:9b:e8:f5:
         27:8d:92:28:bf:34:26:b2:61:4d:0b:7a:bd:31:23:1e:6f:85:
         48:ba:0c:7f:55:c4:f7:a7:2c:62:3e:2e:1c:81:d5:7f:20:5e:
         61:af:0d:72:06:4a:71:b7:96:75:65:5e:f4:5a:ce:c8:17:bf:
         9d:a6:4c:32:44:e1:2b:f7:9c:d0:76:4b:a7:7b:49:08:24:a3:
         4c:3a:85:b2:2a:54:ff:a7:57:b3:5a:a3:dc:1a:aa:8f:55:c7:
         5a:59:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----