Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/hYoNV8SqUPto9900PiEFy952cxI.roa
File:                     hYoNV8SqUPto9900PiEFy952cxI.roa (raw, json)
Hash identifier:          NkAxALY68cNKU+oYcOzIPnmiRy6UfcO5mU1WUjObuDo=
Subject key identifier:   85:8A:0D:57:C4:AA:50:FB:68:F7:DD:34:3E:21:05:CB:DE:76:73:12
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       01F465D4
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/hYoNV8SqUPto9900PiEFy952cxI.roa
Signing time:             Sat 01 Jan 2022 11:59:31 +0000
ROA not before:           Sat 01 Jan 2022 11:59:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     11426
IP address blocks:        5.182.120.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32794068 (0x1f465d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: Jan  1 11:59:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=858a0d57c4aa50fb68f7dd343e2105cbde767312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:f9:06:07:5b:b5:5a:97:e7:69:fa:1d:87:
                    5d:2d:84:4a:5b:50:c4:88:dd:66:39:94:17:fa:e1:
                    b7:4f:e5:bf:00:72:ea:29:3e:e8:96:62:92:b5:8c:
                    cb:3b:0b:d3:40:0a:9e:40:2d:33:fe:24:19:fe:1f:
                    aa:6b:a4:2d:ef:1a:c3:3f:4b:b9:8e:51:22:99:2f:
                    9a:df:a3:15:b3:d2:e9:fe:de:ec:69:0a:0c:08:47:
                    a8:3f:75:7b:b0:1d:16:9b:ed:a3:a5:7a:a3:58:30:
                    ed:f8:07:6d:37:91:6c:be:ed:9a:9e:af:d4:91:df:
                    35:f9:7c:11:81:d9:5a:58:fc:61:1d:c0:4f:84:c5:
                    11:7d:ef:97:7a:32:eb:48:6d:f2:5f:4b:4c:ea:89:
                    9e:67:53:42:df:01:b1:22:15:1b:b6:3b:bc:76:20:
                    37:a9:20:a8:49:f5:51:24:f4:b5:ec:3c:97:c9:18:
                    c5:27:77:2d:9f:9c:60:11:b4:4a:fe:53:55:dc:2e:
                    72:2c:5d:0c:ca:8a:12:bf:1d:96:76:07:6e:60:58:
                    04:18:4e:c7:f9:3d:f3:7c:2c:44:7f:3c:30:65:71:
                    70:77:34:32:05:b6:85:0a:c6:74:fe:0e:f5:77:0c:
                    08:8b:95:e2:f3:40:39:f5:c8:7d:29:eb:48:2b:4f:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8A:0D:57:C4:AA:50:FB:68:F7:DD:34:3E:21:05:CB:DE:76:73:12
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/hYoNV8SqUPto9900PiEFy952cxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:2a:ed:7c:8b:ed:01:c4:93:c2:15:90:bc:f5:96:21:50:8d:
         c4:d1:f3:e0:e7:c1:83:ba:14:b6:06:92:1d:9a:d9:77:b7:a6:
         14:23:ec:e2:16:fd:2e:1f:fc:98:1a:63:ed:3e:05:2c:35:7f:
         3c:6b:96:29:fd:45:2e:6f:eb:4d:05:90:db:46:ce:25:fa:9c:
         d1:d4:a4:03:0e:6b:0e:1a:23:16:f8:c0:41:83:89:d0:cf:3d:
         17:3c:dc:e7:bb:bf:54:2d:17:c8:0a:97:15:90:25:d1:02:16:
         fe:f1:e2:79:8a:68:cf:c1:f0:b1:db:3e:24:e4:a4:ee:97:5a:
         a8:27:c3:89:e7:ed:cc:f9:49:0a:d1:76:2b:64:14:70:ba:6d:
         5e:a9:07:14:07:24:28:97:13:11:89:c9:06:9d:7d:fd:7d:d5:
         36:cc:64:c0:7c:4f:04:48:a2:4c:aa:21:7e:1e:9a:2f:9b:e4:
         c1:94:f9:6d:2e:1f:13:e5:de:1c:34:71:74:15:b1:a0:34:58:
         81:e4:f7:da:e9:9e:65:a2:1c:c0:48:98:22:ff:72:2e:83:1a:
         ca:de:46:cc:9d:0f:e8:9c:3b:bc:c4:f7:78:3b:b6:08:89:f9:
         46:70:6d:cf:15:75:3e:b2:4d:26:c3:a7:06:a2:85:9a:72:bb:
         76:8e:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----