Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qr0rQwuvrha7e31GWYkSuRlHmgA.roa
File:                     qr0rQwuvrha7e31GWYkSuRlHmgA.roa (raw, json)
Hash identifier:          wzdd/SEJOE31a7oGw09BgMMHUPqmR7gbiFZY1+GpqAY=
Subject key identifier:   AA:BD:2B:43:0B:AF:AE:16:BB:7B:7D:46:59:89:12:B9:19:47:9A:00
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0183EABFF2D04FD799FC1C3F6E91969F197E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qr0rQwuvrha7e31GWYkSuRlHmgA.roa
Signing time:             Tue 18 Oct 2022 10:59:51 +0000
ROA not before:           Tue 18 Oct 2022 10:59:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134963
IP address blocks:        62.60.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ea:bf:f2:d0:4f:d7:99:fc:1c:3f:6e:91:96:9f:19:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Oct 18 10:59:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aabd2b430bafae16bb7b7d46598912b919479a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:da:de:65:af:13:20:00:eb:db:5c:2a:5e:
                    a2:c3:59:6c:d1:48:e8:48:97:b1:a1:68:a3:7c:19:
                    0c:c8:2e:84:e0:89:7f:e1:7f:3d:51:03:fe:01:7f:
                    46:0e:ec:a0:6f:fd:ba:c0:81:b0:b3:ba:22:c2:3a:
                    a7:30:24:3a:e2:98:6c:68:8e:17:fe:d5:01:c8:7b:
                    d2:1a:b9:94:58:7c:9b:93:d0:5c:e7:70:03:33:0b:
                    01:d7:4a:30:88:3c:5c:07:77:8a:68:57:cc:b6:3c:
                    28:ce:64:41:36:4c:70:78:79:40:d4:91:13:b3:fe:
                    b9:a9:55:79:ae:36:39:9d:f7:e3:da:c1:1b:5a:7e:
                    54:3a:3d:12:ff:58:ee:d2:3d:42:d4:05:ca:88:29:
                    f6:99:a2:41:a2:39:f4:22:2c:7d:bc:bc:e5:72:67:
                    1c:6a:37:4c:58:1c:e4:07:37:41:70:58:61:68:2a:
                    14:b2:9c:5d:05:10:1e:09:ec:e0:9d:08:04:a5:d7:
                    35:04:8f:47:b3:7c:1f:44:9d:24:17:4c:c0:4f:d7:
                    ee:aa:e8:99:fc:a4:00:d3:9e:77:bf:8f:36:1e:32:
                    7b:ee:78:47:28:4d:42:69:b5:eb:69:1b:fd:6b:09:
                    06:76:e1:d6:ad:39:c5:c4:f2:d8:2a:9f:3f:5c:26:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BD:2B:43:0B:AF:AE:16:BB:7B:7D:46:59:89:12:B9:19:47:9A:00
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qr0rQwuvrha7e31GWYkSuRlHmgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:57:2a:af:1f:7d:f8:f3:62:6a:3e:9d:a0:f2:7c:2b:2b:
         67:10:b6:bf:64:24:ff:97:ee:fc:b2:4b:57:8e:9f:64:ba:6a:
         5c:be:27:39:31:b0:a7:c9:91:56:b6:15:6b:91:42:ed:63:06:
         79:0b:20:e3:82:7d:a0:cc:21:b8:4f:44:ef:6c:7c:7d:be:ba:
         0d:84:dc:43:46:cc:1a:55:0e:5b:17:2f:c7:f6:0c:52:17:4a:
         ee:0a:b6:8b:87:da:bb:6c:be:f2:37:35:cb:42:df:86:eb:9f:
         97:6d:f4:25:f0:62:a6:4e:44:dd:9c:3d:18:27:2e:55:87:a9:
         f7:05:35:5e:ad:e9:ce:08:cb:0c:49:9c:a6:00:c6:9f:f0:2f:
         3f:fe:67:d1:25:6c:92:c6:24:fd:27:3b:59:4a:31:f6:9c:1f:
         e1:21:96:d7:33:53:01:3a:52:c0:cf:df:1a:de:08:27:43:eb:
         bb:80:8d:16:9a:5c:ec:77:07:25:f2:8a:a2:71:64:e6:f2:61:
         51:a4:3f:f6:8f:32:41:8d:9a:20:fc:25:48:18:ba:c8:7f:da:
         a0:ed:a7:57:13:e4:72:4b:b2:00:ae:11:95:3b:49:1e:f1:66:
         dd:92:54:f5:d2:2e:eb:3b:17:c9:bb:dc:d0:87:fe:f3:71:3f:
         7b:78:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----