Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/il5zkGlq9ZYaxEw9MUf7cNMGBlE.roa
File:                     il5zkGlq9ZYaxEw9MUf7cNMGBlE.roa (raw, json)
Hash identifier:          mRrL8LVnwVZ85JyW7RAsAwLsLRlOCqYhXNwxafoVhJw=
Subject key identifier:   8A:5E:73:90:69:6A:F5:96:1A:C4:4C:3D:31:47:FB:70:D3:06:06:51
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       08FB2612
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/il5zkGlq9ZYaxEw9MUf7cNMGBlE.roa
Signing time:             Sat 01 Jan 2022 08:59:06 +0000
ROA not before:           Sat 01 Jan 2022 08:59:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10429
IP address blocks:        192.109.147.0/24 maxlen: 24
                          2a07:8143::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150677010 (0x8fb2612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: Jan  1 08:59:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a5e7390696af5961ac44c3d3147fb70d3060651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:85:2a:43:00:05:03:5b:20:99:61:3b:30:
                    dc:38:28:34:03:04:d8:d6:dd:c9:e9:2e:fb:eb:77:
                    af:b9:22:e8:28:2b:29:ea:df:24:80:c6:01:a3:ae:
                    8d:6d:f7:2f:93:d3:42:75:03:f8:62:9f:0c:ee:da:
                    bb:5c:e4:c0:25:1a:32:4a:48:eb:4b:9a:b5:8f:b7:
                    7d:a2:ab:fe:3c:cd:09:0e:12:f1:d1:79:05:c8:5a:
                    78:bc:96:57:52:bb:60:40:bd:ca:b1:10:b3:e5:c6:
                    77:d8:bd:6c:69:a7:44:ca:67:d0:d5:5d:ce:ce:62:
                    b9:4f:8b:5b:c8:c6:57:e5:68:bb:86:9a:8b:51:6e:
                    72:24:6c:5f:13:99:7b:b7:5a:ba:3f:6c:70:7c:bb:
                    9d:9b:64:ce:69:f8:3f:07:3b:f7:25:ab:c1:d7:f8:
                    44:75:69:ce:22:f0:bc:57:44:0e:26:6c:0f:60:bd:
                    1f:eb:94:d0:3c:88:65:3e:e3:db:c1:cc:b2:9d:66:
                    0a:01:e4:60:f2:1e:46:58:18:84:d3:da:46:87:d1:
                    06:c6:52:4b:3e:f8:ff:22:bc:a8:59:bf:c5:f0:40:
                    6c:7b:7d:3c:fa:7e:75:e4:bf:8f:56:4c:68:26:80:
                    2c:24:23:32:8d:a1:0f:25:17:32:13:24:16:86:91:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5E:73:90:69:6A:F5:96:1A:C4:4C:3D:31:47:FB:70:D3:06:06:51
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/il5zkGlq9ZYaxEw9MUf7cNMGBlE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.147.0/24
                IPv6:
                  2a07:8143::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:a9:a8:c5:72:60:72:4f:dc:36:20:2c:90:91:71:a8:87:
         c2:5a:f9:ff:22:e7:04:98:2b:80:bd:50:a9:a2:83:42:13:bc:
         d8:14:61:0a:97:de:d5:e3:a0:50:58:46:e5:d4:ce:4b:f5:a2:
         59:56:d3:ea:51:78:fe:7d:6e:eb:f8:27:47:d1:af:a4:0f:57:
         cb:87:2c:78:77:b3:cd:72:f0:77:96:20:12:80:a8:d7:77:7e:
         66:84:67:dc:ff:fa:97:d7:2f:73:c8:63:89:34:ce:34:90:75:
         d2:64:e2:c9:9c:ea:1b:88:66:c6:c2:f2:bb:a0:3f:5a:60:35:
         29:ed:aa:80:05:a8:03:93:9f:c0:4e:66:3b:f0:da:3f:02:8f:
         01:0f:a1:fb:4e:c5:df:d4:75:d6:38:e3:fc:07:8a:45:3b:a1:
         eb:bf:23:5b:ab:ad:fc:73:73:f4:09:54:4c:43:fc:93:ab:4d:
         c1:bf:2a:92:02:52:70:e7:05:84:d3:e9:0c:8a:f2:52:86:e7:
         b8:aa:d5:7f:46:17:62:33:5b:cc:e3:50:30:b8:4c:a5:6c:a6:
         81:bc:49:6f:db:07:80:64:5e:08:19:cb:52:9b:c8:b0:7e:0c:
         d1:56:f2:df:ec:0e:f2:7c:ac:19:3b:9f:b3:3d:19:9b:cf:46:
         90:3b:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----