Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/XRez2N3WYuEOce0ITLf3hH8_5k8.roa
File:                     XRez2N3WYuEOce0ITLf3hH8_5k8.roa (raw, json)
Hash identifier:          oMqnzP+XvR4UXjWgX2BA+YoTqctBMtU10CkUR3fhKiE=
Subject key identifier:   5D:17:B3:D8:DD:D6:62:E1:0E:71:ED:08:4C:B7:F7:84:7F:3F:E6:4F
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       3946DDF2
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/XRez2N3WYuEOce0ITLf3hH8_5k8.roa
Signing time:             Tue 03 May 2022 13:26:11 +0000
ROA not before:           Tue 03 May 2022 13:26:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62337
IP address blocks:        178.175.164.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960945650 (0x3946ddf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: May  3 13:26:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d17b3d8ddd662e10e71ed084cb7f7847f3fe64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:4e:f2:42:ee:35:b6:f8:16:02:d1:54:37:
                    39:ad:05:b3:53:f3:49:9a:4a:37:fc:f2:f4:96:4e:
                    13:c6:9c:be:c7:01:11:17:19:5a:79:d2:aa:c0:66:
                    58:5b:24:c5:ca:8a:ec:d8:c8:dd:17:4f:2f:2f:6b:
                    5f:4a:35:39:47:25:e9:73:9c:41:ab:a8:45:29:11:
                    42:d5:02:bb:c2:81:af:89:04:ad:71:08:b6:7d:ac:
                    60:17:be:a9:46:a2:ed:49:82:6a:b7:1d:88:39:38:
                    a2:e2:f1:f7:1b:31:70:5b:6d:65:a4:9e:b7:1d:76:
                    24:ed:5b:8b:78:58:ac:06:9e:4d:2c:61:d4:43:60:
                    90:70:0f:06:4e:68:e2:40:d2:cc:ba:2e:82:9b:26:
                    88:54:91:08:66:45:82:c3:9f:60:c9:68:6e:5a:e5:
                    cb:22:06:e1:25:bf:9e:4a:26:49:42:41:32:6b:5a:
                    af:04:ce:43:e9:5b:a5:dc:05:d4:8c:d5:a4:7f:1f:
                    3e:9a:10:9d:be:07:5e:0b:2a:2f:91:66:c4:a4:6a:
                    0e:de:c9:42:89:48:5f:68:a4:69:40:2c:fb:bd:9d:
                    65:96:50:f1:ca:17:b8:36:f9:24:6c:b4:bf:de:03:
                    07:f2:97:eb:fc:50:75:3c:4e:7d:da:c3:16:e2:b2:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:17:B3:D8:DD:D6:62:E1:0E:71:ED:08:4C:B7:F7:84:7F:3F:E6:4F
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/XRez2N3WYuEOce0ITLf3hH8_5k8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:4b:ba:60:8f:59:69:4e:22:76:63:56:12:da:b5:9b:e6:
         ac:84:1a:0b:a3:67:78:7c:ec:e3:ab:48:6d:6b:5b:65:88:57:
         8d:7d:fc:bf:c4:6f:0b:bf:48:a4:7f:bd:fe:4f:5b:f4:17:39:
         66:f8:ba:78:23:04:97:6d:d5:9b:b4:af:59:2d:d6:b5:ad:53:
         e1:39:57:f0:33:92:94:cb:9a:10:cc:a7:42:48:3b:29:72:8c:
         e1:c3:a0:d6:07:ad:64:8d:81:2e:26:5f:34:17:19:b7:83:59:
         6f:2e:38:b8:7d:fe:21:69:1c:b2:ef:ad:93:51:79:2c:f7:1b:
         2f:f0:05:23:7f:8a:29:bc:25:90:42:c9:03:a0:48:82:2f:2a:
         73:31:25:10:6c:24:3d:fc:6a:32:97:49:93:29:26:d1:8d:b4:
         cc:8e:9a:76:c5:8c:cc:6d:d0:b7:78:af:db:9e:30:3b:2f:6d:
         20:c4:02:55:a7:8a:d6:42:7e:e2:b1:d0:27:3c:8f:8d:f8:25:
         40:bb:81:a2:e0:7e:fe:69:32:4d:af:35:b9:93:6c:42:e7:40:
         d0:ad:77:09:68:4c:09:bf:5d:12:83:8e:50:d5:60:96:57:cf:
         4f:02:21:05:f5:a6:90:40:71:f8:36:b0:62:09:4a:bd:a9:78:
         d8:ce:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----