Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/_7ZE4KCVd3gKdwStZwPQ7btJjBQ.roa
File:                     _7ZE4KCVd3gKdwStZwPQ7btJjBQ.roa (raw, json)
Hash identifier:          b7jyQcaKjY0YNXe5YUVICa8M7I2zvlN4rn6KhWhnKtU=
Subject key identifier:   FF:B6:44:E0:A0:95:77:78:0A:77:04:AD:67:03:D0:ED:BB:49:8C:14
Certificate issuer:       /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial:       0E4757DC
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/_7ZE4KCVd3gKdwStZwPQ7btJjBQ.roa
Signing time:             Sat 01 Jan 2022 05:57:13 +0000
ROA not before:           Sat 01 Jan 2022 05:57:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205834
IP address blocks:        185.202.176.0/22 maxlen: 24
                          2a0e:c000::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239556572 (0xe4757dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
        Validity
            Not Before: Jan  1 05:57:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffb644e0a09577780a7704ad6703d0edbb498c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:99:24:39:67:4b:90:d6:ce:f3:cc:75:fa:
                    8a:cf:18:72:d5:42:c7:e7:91:71:49:a3:ed:81:e1:
                    e7:5b:b1:fd:1b:27:d6:38:e4:2d:39:44:9d:9f:75:
                    06:c2:7e:35:59:9a:b3:bb:ed:a1:95:01:25:3f:72:
                    15:e4:3c:87:5c:e3:6c:58:f2:8a:da:97:ba:6d:58:
                    c4:c9:7f:7f:54:17:1f:0b:43:a6:86:e5:7b:ad:42:
                    52:18:5d:5f:4a:9f:ea:d0:85:bd:cf:d2:82:f6:34:
                    26:e1:95:6d:11:02:61:d1:0b:6e:05:18:ee:c1:42:
                    30:2d:6c:7c:1a:59:dd:96:67:c1:c1:de:38:cd:ce:
                    19:0e:83:b5:63:2d:d7:2c:6a:27:14:5e:11:82:f1:
                    81:56:98:61:b5:13:90:8c:01:5b:3b:e3:95:b2:a6:
                    7c:7d:60:88:0a:95:75:02:24:fd:a0:74:d6:4c:28:
                    b4:9e:41:15:8f:86:05:b4:d2:b7:b2:7b:d3:67:b9:
                    04:0b:26:aa:82:ed:8e:05:5d:eb:f9:33:9e:7a:5d:
                    4e:52:f4:84:10:b6:76:36:05:09:e5:0b:56:ff:a5:
                    95:94:64:2e:4c:3c:c7:7d:06:00:ca:33:36:74:2a:
                    eb:f3:6a:18:6a:34:57:76:c6:49:66:9e:47:cf:83:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B6:44:E0:A0:95:77:78:0A:77:04:AD:67:03:D0:ED:BB:49:8C:14
            X509v3 Authority Key Identifier:
                keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/_7ZE4KCVd3gKdwStZwPQ7btJjBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.176.0/22
                IPv6:
                  2a0e:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:31:f8:c6:51:9b:6a:e6:cc:4e:c9:22:2f:a0:5f:97:b6:90:
         4b:b4:36:59:ba:94:08:a8:15:3f:23:80:a5:bc:1f:7f:ee:4c:
         53:ed:e3:49:30:5e:88:74:97:fa:c0:67:20:f2:0f:89:f0:99:
         5c:03:4a:8f:b7:13:08:93:b2:fc:52:9d:5a:c4:d7:bb:ed:40:
         77:5e:9f:ba:bd:8d:2d:05:6f:e1:23:c4:6f:00:5c:2e:66:fc:
         b0:d0:d8:7f:a2:d2:d8:96:c4:8c:f2:cb:da:5f:2b:b0:ff:0b:
         f3:b8:8f:e6:fd:82:7f:09:d9:39:9e:fd:91:9f:33:0d:c1:43:
         d1:ef:84:e6:aa:61:60:fb:38:fc:72:9e:24:a5:a6:a0:b8:04:
         f4:e4:50:af:01:e1:30:46:e9:ef:3f:be:a4:e6:9c:bb:9f:3d:
         a5:da:3b:0f:e5:f6:a3:45:ed:63:8f:51:51:02:95:f5:bd:b4:
         92:e4:8c:b5:a0:f2:56:8a:19:93:69:39:52:57:7c:a6:8d:48:
         68:74:a5:5f:26:3b:28:9a:ba:c9:23:30:f8:c2:8d:91:91:bf:
         e1:44:53:e4:a1:8f:b0:4b:58:95:68:f3:e1:0f:78:47:fc:88:
         4c:b0:2f:ee:76:d7:ef:48:1b:28:26:d7:56:6a:f7:e4:69:4e:
         ee:68:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----