Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GcbM_w5VyDlIGAqRelbCnZ0VQG4.roa
File:                     GcbM_w5VyDlIGAqRelbCnZ0VQG4.roa (raw, json)
Hash identifier:          cGrZhCoDf9y7gTsoi6ZbyWDQqj6XNPKLTVlnbpY0S4M=
Subject key identifier:   19:C6:CC:FF:0E:55:C8:39:48:18:0A:91:7A:56:C2:9D:9D:15:40:6E
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       0495CB34
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GcbM_w5VyDlIGAqRelbCnZ0VQG4.roa
Signing time:             Tue 01 Feb 2022 17:24:34 +0000
ROA not before:           Tue 01 Feb 2022 17:24:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        193.233.116.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76925748 (0x495cb34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Feb  1 17:24:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19c6ccff0e55c83948180a917a56c29d9d15406e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:3d:1f:95:50:ec:48:f0:73:bb:78:1b:38:
                    74:a4:e9:11:cd:d1:5f:30:a6:7d:64:fc:dd:8e:d2:
                    a9:20:de:bb:e3:ee:22:f5:79:54:f9:71:21:1f:ec:
                    b2:bb:aa:d1:4c:b9:7a:ca:94:84:b6:49:88:b3:bc:
                    30:a8:37:b1:8c:67:34:a1:b0:55:df:67:84:e6:0b:
                    9c:b3:92:df:29:f5:fd:82:62:00:60:67:f2:79:94:
                    5e:39:bd:c0:e7:2e:a3:0a:8d:d5:69:2a:bf:61:30:
                    e3:53:58:97:19:fa:8d:50:19:2d:67:c3:13:df:9b:
                    a6:0d:c0:5b:63:25:f3:44:33:54:bc:a4:9a:da:bc:
                    aa:75:bb:76:1d:dc:53:3b:ae:fb:bd:22:e6:23:71:
                    05:54:46:3e:bb:b2:1c:60:7a:ed:ab:93:f0:9c:bb:
                    27:34:c2:65:29:18:92:a4:73:b7:84:aa:4a:eb:11:
                    ab:50:39:31:1c:56:cb:e0:c2:27:99:31:e6:67:8e:
                    c6:d9:76:bd:c2:c7:41:cc:ac:d5:56:0e:65:8a:9e:
                    7f:8c:a4:a5:72:5b:6b:ea:47:aa:6f:d0:61:4a:00:
                    67:eb:54:16:01:68:b3:88:2a:f0:9d:78:61:3c:f0:
                    ef:f1:b1:90:09:26:df:24:63:b6:e7:cb:b0:39:76:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:CC:FF:0E:55:C8:39:48:18:0A:91:7A:56:C2:9D:9D:15:40:6E
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GcbM_w5VyDlIGAqRelbCnZ0VQG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:e1:eb:f0:85:5e:a5:ab:42:a4:0b:59:87:de:16:83:23:f2:
         32:31:cb:2b:2c:c6:3f:22:50:4d:2c:84:29:ef:2c:61:73:70:
         08:e0:0a:dd:b0:37:8c:68:b3:be:3e:f6:d5:ae:7b:a7:c8:b8:
         1d:7a:e5:da:e0:45:26:5f:f4:81:f8:df:92:16:35:17:56:59:
         78:b4:d1:33:49:20:f2:ec:95:a0:68:4f:78:8a:02:91:25:a9:
         24:24:bd:a4:4f:34:56:f3:12:82:09:04:da:fa:90:01:c7:b5:
         84:6f:38:58:83:3f:dc:4f:1e:33:25:78:8c:40:7f:4f:f0:95:
         9f:82:a4:af:f3:24:0d:fa:96:b9:c5:ad:0e:8e:89:88:c9:60:
         d4:c3:09:cd:56:45:97:f4:66:c1:2b:45:e5:29:04:27:cc:22:
         79:cb:96:17:eb:12:17:a2:b2:19:10:ef:fc:59:20:af:b7:5c:
         59:96:2f:12:3e:ee:4d:c3:3f:d4:38:e7:c6:77:d1:4f:b3:c0:
         68:dc:22:2e:e4:33:db:27:89:f4:42:cf:05:36:85:d6:e5:44:
         c2:64:a0:f0:4f:20:50:35:1e:a6:5b:19:9c:5f:4e:53:b4:28:
         80:4e:3a:92:c4:09:72:dd:23:26:f0:b8:9c:e3:6d:8b:8f:79:
         bf:0e:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----