Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/wqDB8OeDb1cKejATzfcFoClN3d0.roa
File:                     wqDB8OeDb1cKejATzfcFoClN3d0.roa (raw, json)
Hash identifier:          Amz+0BZl8/lEvV3e3VIFaW14ND7Xb5BUDvcSGPhkJjY=
Subject key identifier:   C2:A0:C1:F0:E7:83:6F:57:0A:7A:30:13:CD:F7:05:A0:29:4D:DD:DD
Certificate issuer:       /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial:       12EB0D01
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/wqDB8OeDb1cKejATzfcFoClN3d0.roa
Signing time:             Tue 15 Feb 2022 12:02:28 +0000
ROA not before:           Tue 15 Feb 2022 12:02:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203099
IP address blocks:        185.142.60.0/22 maxlen: 24
                          2a07:2a00::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317394177 (0x12eb0d01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
        Validity
            Not Before: Feb 15 12:02:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2a0c1f0e7836f570a7a3013cdf705a0294ddddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:4d:e0:69:d8:df:6d:ea:72:28:e8:57:d6:
                    8c:5b:61:11:ad:b3:5f:b2:10:87:d3:cb:62:e7:71:
                    93:b3:8f:2f:52:04:a9:75:38:f7:67:c7:76:9e:7c:
                    20:80:80:2f:ef:62:11:f1:b3:66:e1:64:8c:d4:31:
                    fd:ef:16:8b:23:c6:a5:10:f2:b1:37:97:b0:33:8b:
                    50:11:9d:25:fb:22:31:f2:1c:0b:3d:56:e4:f5:85:
                    f0:9c:1e:39:b1:e6:df:01:42:01:08:0b:9a:81:cf:
                    3d:43:70:84:48:01:30:13:9c:2c:6a:03:39:1a:12:
                    9a:a6:6e:a0:0a:e3:9f:fb:9a:1c:60:ce:cc:7f:d9:
                    e6:6d:93:f2:e0:af:7c:bc:c2:ed:93:df:67:b0:bc:
                    dc:a8:99:bb:6c:2e:d3:0a:65:55:7f:52:fc:3d:6d:
                    cd:56:4e:59:83:a4:18:fb:bc:96:ae:74:53:36:07:
                    fd:4e:c3:1b:15:17:6a:d0:da:12:12:f1:bf:29:42:
                    1a:7b:ec:41:ba:5d:b9:14:3c:f6:99:c3:ee:4a:d3:
                    22:c7:87:14:6e:c5:a8:94:1a:25:09:52:01:1e:03:
                    23:7a:55:8d:36:0f:87:17:74:f5:53:65:15:42:94:
                    93:73:35:ee:84:80:dc:63:d3:ca:52:46:c8:4f:e4:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:C1:F0:E7:83:6F:57:0A:7A:30:13:CD:F7:05:A0:29:4D:DD:DD
            X509v3 Authority Key Identifier:
                keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/wqDB8OeDb1cKejATzfcFoClN3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.60.0/22
                IPv6:
                  2a07:2a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:04:4a:44:a8:8e:b0:26:35:4b:99:0d:77:5f:92:e9:c2:
         e4:45:3c:f3:9c:2c:9f:ea:ac:ca:75:c1:fc:3c:28:b2:4f:86:
         4d:cd:54:24:65:54:a2:77:d9:16:f8:eb:e5:f5:de:2e:7d:76:
         2e:5b:04:e9:0b:20:53:84:99:35:d0:80:da:29:79:c2:0e:87:
         7c:24:c3:a3:f7:53:a2:18:0f:64:1c:d0:11:46:22:b7:0d:a3:
         f7:41:9a:d2:f8:1b:a4:de:40:80:fc:ea:0e:ca:22:e6:80:15:
         55:c0:d9:83:85:c8:0f:4e:af:55:4e:6b:c8:45:fb:88:f8:de:
         70:05:15:86:14:24:11:ac:b7:27:2f:e8:f4:49:42:3c:30:51:
         cf:6d:1a:05:a9:1d:ac:13:4e:89:96:5c:e4:71:c5:73:ff:51:
         5d:79:59:49:53:5c:66:e7:ea:05:46:e7:d3:90:9a:dc:19:24:
         d4:e8:86:50:ac:47:dc:6b:a9:1f:ca:bc:bc:c4:8e:65:58:20:
         0e:f8:37:07:7f:a7:25:d9:9f:ac:3c:73:69:1b:c3:11:41:b8:
         c2:aa:92:9a:08:5d:25:35:79:1a:8b:a3:5b:e4:af:fe:d0:af:
         5d:37:e6:7c:24:13:34:e1:7b:0d:2f:a2:00:0b:05:b2:82:19:
         71:9c:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----