Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/JJUe2SbeIYMgtJrgSC6QQeO0VRQ.roa
File:                     JJUe2SbeIYMgtJrgSC6QQeO0VRQ.roa (raw, json)
Hash identifier:          VvUcPcwpsTrRZjyTrbimjUSC7tRZ+UuL5uLtfOgiYaY=
Subject key identifier:   24:95:1E:D9:26:DE:21:83:20:B4:9A:E0:48:2E:90:41:E3:B4:55:14
Certificate issuer:       /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial:       09AB583B
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/JJUe2SbeIYMgtJrgSC6QQeO0VRQ.roa
Signing time:             Sat 01 Jan 2022 11:00:43 +0000
ROA not before:           Sat 01 Jan 2022 11:00:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49505
IP address blocks:        5.62.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162224187 (0x9ab583b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
        Validity
            Not Before: Jan  1 11:00:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24951ed926de218320b49ae0482e9041e3b45514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:ad:9e:4f:b4:dc:06:cb:7f:2b:90:cd:c6:
                    f5:c9:6f:e9:0f:6b:06:9e:23:31:ac:a3:68:15:ac:
                    e0:4a:5e:55:3a:99:79:db:99:fc:40:8f:83:7e:25:
                    78:4b:9f:90:7f:0b:f2:f4:5d:f7:86:ae:13:e5:c7:
                    0d:55:41:d4:99:c8:88:e9:11:a3:2f:96:54:54:0e:
                    21:ce:55:e9:60:8b:c4:f8:99:a2:14:f3:33:0c:7b:
                    d9:58:d2:4f:3c:ab:18:a5:4d:c5:c6:e9:51:e9:64:
                    2e:fd:3b:7a:d1:53:54:b7:d4:80:ef:cf:8d:d9:a3:
                    5e:0d:bf:a9:d1:05:f1:a8:d8:e1:e8:7e:11:d0:de:
                    40:c9:ba:7b:d8:ac:a9:20:c3:ca:c4:ae:95:b8:30:
                    ff:a4:a8:a3:2a:3a:76:e7:2a:75:16:81:9c:c4:9c:
                    93:70:47:50:12:40:6a:32:5a:b8:48:3d:a9:f1:35:
                    82:07:5d:c5:6d:4a:d2:19:64:16:90:e9:91:0b:8f:
                    df:b6:53:d7:ae:4f:13:b0:4a:49:83:5d:2b:8e:60:
                    fa:64:52:dd:75:ce:8b:51:00:b1:fa:6c:8a:fe:fe:
                    75:24:19:72:00:4d:b1:af:0c:b4:8f:4a:96:f7:74:
                    e6:f6:36:b3:d6:46:a8:1b:24:84:ea:61:63:5a:e3:
                    3c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:95:1E:D9:26:DE:21:83:20:B4:9A:E0:48:2E:90:41:E3:B4:55:14
            X509v3 Authority Key Identifier:
                keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/JJUe2SbeIYMgtJrgSC6QQeO0VRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.62.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4e:a1:eb:5f:7f:35:e4:15:08:98:43:b1:d9:ab:8e:67:85:
         fe:8c:0b:d8:d1:64:d7:a2:43:90:42:1f:71:c4:c9:8c:df:d8:
         b0:50:f8:57:ec:b5:b0:e9:3d:7f:e2:16:80:18:5c:a7:ab:38:
         83:1d:08:29:9b:14:43:3c:cb:ed:e4:fe:e2:15:ee:c6:05:3c:
         6d:66:ef:77:84:cf:b6:51:b2:ec:bd:e2:4f:a4:2e:bb:7f:37:
         98:7d:e3:61:08:00:ad:a9:aa:aa:dc:06:cb:67:28:25:ea:6b:
         ca:b5:7d:49:98:43:79:18:13:a8:12:86:0b:63:a1:56:4b:55:
         e2:9f:1d:1c:41:1b:71:53:71:76:29:88:10:1f:e1:fd:e7:22:
         95:01:7f:84:09:f9:e9:f2:3c:8b:1c:a7:3a:f8:66:8b:13:62:
         5f:92:27:ef:36:c5:24:7b:49:ba:38:60:1e:45:b7:b3:68:bc:
         52:1c:c8:7c:e0:5b:b4:56:9b:98:34:05:07:52:88:15:10:13:
         0c:89:04:6f:8b:31:56:e6:3c:bd:ac:96:1d:67:56:03:df:28:
         0f:12:58:63:ec:1c:a7:1d:c4:6d:24:88:a2:66:87:07:81:a0:
         34:87:1f:07:12:80:4f:1a:20:4b:9d:32:ec:2b:70:b7:98:cc:
         b5:78:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----