Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/uBx-GlOFd7RnHAE2Hzwe-MBB6Zs.roa
File:                     uBx-GlOFd7RnHAE2Hzwe-MBB6Zs.roa (raw, json)
Hash identifier:          huMLWGxgV32UTMczxuYJWqS1jp+azMZQZjAdnGuCPQM=
Subject key identifier:   B8:1C:7E:1A:53:85:77:B4:67:1C:01:36:1F:3C:1E:F8:C0:41:E9:9B
Certificate issuer:       /CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Certificate serial:       02CC6BE4
Authority key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/uBx-GlOFd7RnHAE2Hzwe-MBB6Zs.roa
Signing time:             Sat 01 Jan 2022 10:55:54 +0000
ROA not before:           Sat 01 Jan 2022 10:55:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205718
IP address blocks:        185.231.116.0/22 maxlen: 22
                          2a09:c740::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46951396 (0x2cc6be4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
        Validity
            Not Before: Jan  1 10:55:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b81c7e1a538577b4671c01361f3c1ef8c041e99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:c4:d5:96:32:af:df:07:57:f3:30:6d:6a:
                    40:80:56:85:5a:56:01:09:65:46:27:0a:1b:39:72:
                    28:cb:99:d5:a2:ef:a0:97:f6:a5:e3:3c:59:9f:f4:
                    33:29:90:03:09:cb:43:33:eb:07:a6:ee:28:41:58:
                    ef:d5:9e:7c:54:61:68:86:9f:a3:1b:be:89:c4:ef:
                    26:7a:c1:ff:a1:f5:96:8f:66:46:d5:45:b3:06:44:
                    5d:2b:6c:53:e4:4a:96:50:ba:42:61:64:7d:38:9b:
                    40:25:16:d3:f3:30:3c:a5:a8:43:6a:70:6f:e5:18:
                    ea:5c:4d:ce:bf:66:aa:c7:82:f0:b4:6a:e5:92:13:
                    51:33:bd:04:b1:e5:f7:7f:da:a4:70:d0:38:56:a9:
                    f2:82:fd:1b:48:82:38:63:76:1f:88:d5:ef:ac:03:
                    d6:f9:65:79:5c:69:8f:7f:5b:6e:48:17:ef:c0:40:
                    5e:4e:a3:3a:d1:93:0a:4d:db:e7:9a:fc:9d:34:57:
                    dc:03:d6:36:46:7e:52:02:1d:7e:76:ff:e9:85:11:
                    63:2b:d0:db:2e:34:2f:23:a3:68:8f:0c:cf:15:0a:
                    16:94:83:cc:94:3c:81:29:4c:56:73:01:ae:45:cc:
                    d1:c2:6a:25:3c:b8:a6:ac:1e:57:ab:54:32:0a:4c:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:7E:1A:53:85:77:B4:67:1C:01:36:1F:3C:1E:F8:C0:41:E9:9B
            X509v3 Authority Key Identifier:
                keyid:4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/uBx-GlOFd7RnHAE2Hzwe-MBB6Zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.116.0/22
                IPv6:
                  2a09:c740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:58:d7:a7:ef:1f:52:8c:2a:b4:48:b8:81:99:43:3f:c5:
         aa:c0:5c:84:54:15:55:52:1e:d5:7d:5f:f6:af:35:0c:53:ae:
         83:6a:36:50:78:7d:18:4e:a4:3c:9a:34:f8:d5:bc:9d:78:a6:
         a9:09:63:7f:6e:b9:f8:80:72:23:65:a2:2d:a2:f7:16:ad:df:
         6e:d9:a6:14:1d:23:58:41:4b:f2:b4:99:8e:59:60:4c:b3:17:
         3e:34:42:27:3f:d1:58:98:ae:c5:ba:09:a5:e2:a1:7e:a2:98:
         98:6d:53:2e:a9:d7:69:64:74:7f:3b:c4:cf:f8:27:f5:3b:9f:
         33:08:b5:ab:35:ff:a1:50:8c:39:2c:8f:62:48:92:d4:ee:aa:
         b2:c7:3e:17:3d:a0:0c:53:db:bb:da:4c:b3:c5:f9:9c:50:4c:
         1d:22:14:92:17:09:e3:23:d9:2b:3f:dc:e2:47:8c:f0:a7:f4:
         7f:50:50:65:69:e9:a5:88:1d:c0:4c:92:1e:46:6a:d8:89:70:
         b1:9d:90:82:59:e3:82:24:4c:d9:ef:d9:e2:44:6a:24:6a:fa:
         b9:ca:0d:56:dc:21:de:2b:2a:11:c7:fb:64:74:32:10:4a:74:
         58:7a:be:24:24:99:a2:e2:d7:cc:80:c4:58:b1:1a:3d:35:44:
         51:d3:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----