Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/JM3GF1Y0SaPrmfbzdwXlKEIi3B8.roa
File:                     JM3GF1Y0SaPrmfbzdwXlKEIi3B8.roa (raw, json)
Hash identifier:          M+BtGuVrNPCBYE91tNFep4TqP2gdukbeuoo+6EZempQ=
Subject key identifier:   24:CD:C6:17:56:34:49:A3:EB:99:F6:F3:77:05:E5:28:42:22:DC:1F
Certificate issuer:       /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial:       1AB01D17
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/JM3GF1Y0SaPrmfbzdwXlKEIi3B8.roa
Signing time:             Sat 01 Jan 2022 06:57:54 +0000
ROA not before:           Sat 01 Jan 2022 06:57:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197876
IP address blocks:        77.73.80.0/21 maxlen: 24
                          2a03:ab80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447749399 (0x1ab01d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
        Validity
            Not Before: Jan  1 06:57:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24cdc617563449a3eb99f6f37705e5284222dc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:64:3f:b0:2a:d5:d5:5c:61:47:52:0e:bd:
                    41:b0:8e:76:7b:db:46:38:83:60:2c:bc:fc:16:2e:
                    fe:f7:a7:4b:6f:9c:07:aa:7b:3a:18:c2:c5:a3:b1:
                    3a:5c:9c:75:4f:8a:5d:70:a2:92:7f:5e:e1:a7:7c:
                    bb:bb:02:92:46:1e:58:8c:4e:05:d0:d2:36:93:af:
                    b8:a3:61:b3:f3:8f:e5:d3:b1:26:cf:47:ea:29:c9:
                    22:0d:de:ec:ef:09:be:61:b0:d1:29:fc:6c:6f:1b:
                    7a:ee:fa:28:17:6b:75:39:cf:7a:a9:bb:8b:61:c2:
                    0a:bf:10:ff:a7:42:13:09:2c:02:d5:19:7d:7a:94:
                    73:c8:1a:07:a1:d7:94:83:8a:74:82:fa:91:92:d9:
                    5b:ef:47:38:d2:3a:7f:42:44:5d:41:99:3b:f6:e2:
                    5b:78:29:e4:98:75:16:e8:7b:b1:8f:33:2f:5b:72:
                    62:65:61:f7:56:fa:4d:07:9c:0b:e9:50:cd:a3:1e:
                    3c:07:95:85:da:ba:1e:99:67:74:9c:d1:4d:ca:80:
                    f6:8a:13:94:40:6b:00:7d:59:c6:b5:c1:ee:b3:b4:
                    07:ff:08:ae:6b:4f:89:88:c4:73:dc:76:53:58:5d:
                    79:d9:ce:29:6b:da:d8:73:eb:6e:b6:bc:89:77:d3:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CD:C6:17:56:34:49:A3:EB:99:F6:F3:77:05:E5:28:42:22:DC:1F
            X509v3 Authority Key Identifier:
                keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/JM3GF1Y0SaPrmfbzdwXlKEIi3B8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.73.80.0/21
                IPv6:
                  2a03:ab80::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:15:40:0a:ee:c4:68:fa:93:43:af:79:86:18:60:4e:7b:28:
         90:bb:c4:f7:7e:ae:75:93:a5:9c:9f:07:26:56:6e:bb:63:a1:
         3a:4a:cd:82:55:5d:2d:84:c9:e7:fd:5b:7e:a0:04:b4:09:29:
         45:e3:68:1d:02:8c:f3:78:81:86:10:ef:a3:e4:c4:3e:83:7f:
         ba:27:42:7f:94:ba:89:fb:62:49:01:89:11:3c:9e:61:50:a8:
         5e:71:8f:c1:ab:34:47:7d:71:4e:46:70:28:2f:95:95:cb:77:
         65:9d:c0:d1:3b:55:43:ca:4c:ce:86:09:e1:97:32:dc:6a:7f:
         04:05:de:b1:7f:7a:39:1e:22:49:1c:c7:c5:58:9a:d4:2a:da:
         8e:75:48:7e:3c:87:7e:f5:45:d2:da:22:aa:02:8a:21:11:e7:
         65:17:ff:54:dc:35:09:bc:c5:25:db:0d:5a:54:6a:dc:3e:7a:
         47:ef:8d:d9:00:a1:9f:94:14:6f:89:47:b3:92:da:cf:6c:c5:
         b4:ef:b4:6f:69:fc:00:21:3b:dd:fc:d8:a2:89:8d:94:b8:2a:
         78:2f:d7:55:14:d3:7a:73:56:64:4a:2d:95:e1:14:5c:7e:53:
         10:9c:7e:c6:5b:33:ff:01:46:18:53:83:48:94:df:04:9a:52:
         d5:76:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----