Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/FWVYQxMMSzgpp2_ACjhcmevL61Q.roa
File:                     FWVYQxMMSzgpp2_ACjhcmevL61Q.roa (raw, json)
Hash identifier:          TzWDOhA18KkEndyNd5z1wtHRfHLbVmW6T94Stp1wa5I=
Subject key identifier:   15:65:58:43:13:0C:4B:38:29:A7:6F:C0:0A:38:5C:99:EB:CB:EB:54
Certificate issuer:       /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial:       0182B690C8CE5034CD55220577240A942E88
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/FWVYQxMMSzgpp2_ACjhcmevL61Q.roa
Signing time:             Fri 19 Aug 2022 14:45:17 +0000
ROA not before:           Fri 19 Aug 2022 14:45:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51790
IP address blocks:        185.92.228.0/24 maxlen: 24
                          185.57.145.0/24 maxlen: 24
                          185.57.144.0/23 maxlen: 23
                          185.57.146.0/24 maxlen: 24
                          185.97.52.0/22 maxlen: 24
                          217.61.252.0/24 maxlen: 24
                          46.19.10.0/23 maxlen: 24
                          46.19.8.0/23 maxlen: 24
                          46.19.14.0/23 maxlen: 24
                          46.19.12.0/23 maxlen: 24
                          209.16.152.0/22 maxlen: 23
                          2a02:28b0::/32 maxlen: 32
                          2a02:28b2::/32 maxlen: 32
                          2a02:28b1::/32 maxlen: 32
                          2a02:28b7::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b6:90:c8:ce:50:34:cd:55:22:05:77:24:0a:94:2e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
        Validity
            Not Before: Aug 19 14:45:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15655843130c4b3829a76fc00a385c99ebcbeb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:45:da:c8:18:4a:81:99:06:f9:3b:0b:b0:4d:
                    db:bb:60:a8:e3:f8:44:82:27:99:13:08:8e:8e:f2:
                    d7:64:46:8e:a8:59:af:8b:27:fa:63:ff:67:e3:a9:
                    28:0e:71:91:7b:c0:56:24:24:15:37:1d:21:f5:e6:
                    e8:8b:61:95:ef:d3:f2:cb:ed:d9:62:62:5f:9f:2f:
                    f0:17:a8:1d:53:da:f8:d5:d1:8d:9d:fc:d5:c3:c6:
                    60:05:47:d4:21:21:6f:a5:b3:0f:74:f8:8d:e0:f2:
                    4e:89:97:df:0b:66:a7:1d:9c:97:a3:97:d9:da:58:
                    3c:f6:dd:68:c0:bf:e1:f5:95:af:a4:2d:78:07:59:
                    f5:3b:26:7a:27:63:9f:42:37:2f:fa:48:4a:37:2f:
                    62:e4:49:7d:76:31:14:8c:68:51:1b:64:3a:b3:c1:
                    98:82:64:5e:4c:0c:36:1f:95:98:28:66:0b:7b:d5:
                    d9:ca:2b:26:14:6d:35:48:06:bf:15:30:2b:1c:ee:
                    3f:e0:9b:88:3f:3d:95:c6:bb:9e:09:4e:57:1b:da:
                    e6:5f:24:2d:ea:ea:fb:0c:1b:8e:5a:71:06:ef:01:
                    f0:94:a1:65:dc:69:89:bd:02:4e:1e:41:7a:b3:45:
                    ca:d6:9a:84:b6:14:5d:69:29:4e:d4:cc:ff:73:80:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:65:58:43:13:0C:4B:38:29:A7:6F:C0:0A:38:5C:99:EB:CB:EB:54
            X509v3 Authority Key Identifier:
                keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/FWVYQxMMSzgpp2_ACjhcmevL61Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.19.8.0/21
                  185.57.144.0-185.57.146.255
                  185.92.228.0/24
                  185.97.52.0/22
                  209.16.152.0/22
                  217.61.252.0/24
                IPv6:
                  2a02:28b0::-2a02:28b2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a02:28b7::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:65:ba:db:25:93:62:15:6e:cc:31:b3:6e:c6:bc:22:76:54:
         4b:21:5c:0d:1f:5b:87:2e:71:ce:e2:2c:45:ea:09:54:9d:51:
         83:6f:2f:04:9a:67:8b:fe:a7:1c:fe:9d:4e:ec:73:33:79:bd:
         5b:21:ff:b1:6a:c5:5f:4f:2e:d9:ca:28:e0:21:33:3a:f9:c2:
         41:b7:21:28:e4:0a:66:6e:71:21:a5:34:a9:39:59:34:30:0c:
         b3:dc:c2:44:51:90:39:2c:57:c2:ba:13:c3:2b:4e:7b:40:aa:
         44:df:28:e5:b8:8f:19:eb:21:8a:95:51:68:d2:c9:bb:5f:53:
         cb:f8:c0:ac:ea:0d:6a:5e:4f:62:db:9d:14:1a:9e:b7:95:22:
         e5:5d:2e:96:4c:70:89:fb:57:f8:1c:7d:61:8a:5d:6c:70:3b:
         63:d3:5e:51:70:af:7d:42:c3:0d:24:c9:31:ce:96:d2:16:02:
         05:c6:1c:b1:c6:41:66:2e:84:97:0f:55:9b:22:c5:b6:0d:cf:
         25:23:9e:9f:f0:5d:7c:d2:72:76:4d:05:2a:6c:54:13:11:72:
         b8:1a:1c:cb:86:56:e5:6c:45:65:ff:d4:50:f6:46:ae:e6:cf:
         01:fe:82:e8:95:d9:f9:32:86:4f:19:32:43:6b:26:fa:7b:4e:
         e9:2f:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----