Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4Agr_-_5hOLqppBVyQYkDM0lAf8.roa
File:                     4Agr_-_5hOLqppBVyQYkDM0lAf8.roa (raw, json)
Hash identifier:          COCxWCmKKhpbKYXYGznDmioz5s0/VaaMYSSDVX9xQKc=
Subject key identifier:   E0:08:2B:FF:EF:F9:84:E2:EA:A6:90:55:C9:06:24:0C:CD:25:01:FF
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       03D8EC9C
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4Agr_-_5hOLqppBVyQYkDM0lAf8.roa
Signing time:             Sat 01 Jan 2022 06:02:05 +0000
ROA not before:           Sat 01 Jan 2022 06:02:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15606
IP address blocks:        192.195.72.0/24 maxlen: 24
                          2001:7f9:c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64547996 (0x3d8ec9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 06:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0082bffeff984e2eaa69055c906240ccd2501ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:90:e1:7a:f1:1d:cd:d4:3e:12:40:3b:17:
                    c1:cd:18:18:48:b3:64:88:db:8b:92:43:57:e6:f8:
                    15:74:58:80:9c:8d:bd:09:27:88:a0:9e:a7:a7:ee:
                    f8:54:8a:de:f7:8b:3e:5a:20:62:51:c6:86:ef:6b:
                    c5:93:54:47:ef:3c:55:ef:0d:02:ed:ea:a9:cf:86:
                    53:f4:2f:63:58:d1:ce:41:00:a8:d3:38:65:1d:d2:
                    6b:3b:99:de:11:fc:7f:9d:a4:bf:b3:63:6d:c0:d6:
                    ca:5b:5b:05:cb:10:c6:83:75:21:6b:56:de:24:7c:
                    a3:7c:b5:0f:8a:56:46:d7:a9:4d:28:cf:3c:34:42:
                    24:ff:b6:f8:9e:16:11:06:34:fb:b3:8d:d5:75:32:
                    8c:e8:16:11:ec:f7:5e:6c:1a:a7:6a:33:77:51:45:
                    50:c9:5c:86:89:52:37:94:bd:8d:59:65:6f:06:41:
                    ef:5d:ce:48:f8:43:1f:b0:e5:d4:6b:83:5a:70:4b:
                    2f:37:ff:e9:7c:19:0b:68:cb:4f:59:b1:bc:10:92:
                    75:11:81:97:6e:f7:a1:87:45:5a:77:ef:56:a2:90:
                    62:4c:51:7c:cb:5e:09:22:55:ef:0f:d6:b7:a5:e0:
                    22:bf:e8:a4:cd:42:eb:37:a1:27:45:a0:3d:6b:b0:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:08:2B:FF:EF:F9:84:E2:EA:A6:90:55:C9:06:24:0C:CD:25:01:FF
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4Agr_-_5hOLqppBVyQYkDM0lAf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.72.0/24
                IPv6:
                  2001:7f9:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:b0:fe:27:b1:7a:bb:0b:57:51:15:57:4e:29:1e:7f:5d:
         8e:e7:c3:a8:c0:d9:72:7e:57:5d:ff:82:3e:7e:f4:e3:4b:2c:
         6f:6b:ac:ac:74:8e:8d:7e:5e:0d:b8:96:c0:32:bd:44:2d:04:
         37:b9:7a:a0:0d:1e:7b:3e:33:9c:14:e9:92:67:a7:f8:48:bd:
         9b:ad:51:4d:a9:ec:34:ff:c8:58:e8:f7:d7:dc:b3:8a:69:04:
         09:78:06:05:f7:37:26:15:d3:b5:f9:1b:89:b7:67:14:4c:6b:
         34:7e:12:f4:b5:d8:51:60:79:eb:53:2c:1c:94:c7:b5:a3:1a:
         52:16:b8:be:dd:67:8c:d8:02:42:a0:e9:60:80:47:4e:0a:4b:
         80:4d:b5:5d:ba:bb:e6:49:cc:62:b8:34:3b:ce:b9:b0:14:82:
         4c:f6:0d:85:4f:f6:93:90:97:bb:81:2b:cd:af:ca:fb:7d:8f:
         29:58:59:0a:90:e0:55:1e:dc:f3:6a:fa:a2:f0:40:a5:40:ac:
         49:e8:46:5d:9f:c0:bc:d8:77:e1:58:cb:28:f1:71:7f:f1:3c:
         7e:6b:5c:ed:47:a8:0c:a3:73:19:f3:58:1f:50:ad:96:06:3c:
         01:6d:31:ed:27:81:01:18:7d:54:d9:a5:63:46:59:c1:22:a1:
         90:c4:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----