Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/I8O8YWBxVkn_7ug64YdAEICpbjE.roa
File:                     I8O8YWBxVkn_7ug64YdAEICpbjE.roa (raw, json)
Hash identifier:          DNtu/LsMRYRUyF9EEXguhdrH1txAd8oQwYJhKnntCvo=
Subject key identifier:   23:C3:BC:61:60:71:56:49:FF:EE:E8:3A:E1:87:40:10:80:A9:6E:31
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       09325570
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/I8O8YWBxVkn_7ug64YdAEICpbjE.roa
Signing time:             Sat 01 Jan 2022 16:00:57 +0000
ROA not before:           Sat 01 Jan 2022 16:00:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211772
IP address blocks:        5.182.48.0/24 maxlen: 24
                          2a0b:b81::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154293616 (0x9325570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:00:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23c3bc6160715649ffeee83ae187401080a96e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:da:22:a7:11:4c:49:c2:85:14:1d:53:ad:
                    a7:3f:28:37:5d:1b:26:27:29:3d:44:a9:2a:24:da:
                    18:b4:ad:56:80:2d:d9:eb:ea:f6:a3:6c:1c:1e:2a:
                    3f:b1:90:d3:1d:15:ef:90:16:8b:e1:2c:43:ad:55:
                    04:38:5a:4a:57:72:49:4a:d9:32:9d:54:ab:24:fc:
                    96:d2:ce:43:41:24:54:3e:eb:cd:79:8e:d9:0c:ad:
                    4b:32:8f:6d:97:ea:fd:1e:76:2c:dc:d2:ae:f9:68:
                    fe:9a:5d:8a:c4:c8:46:f4:b0:33:09:42:4b:fb:87:
                    2a:68:17:5c:49:96:26:0b:75:a6:f7:b0:cb:f1:0d:
                    d7:e1:7b:b7:4e:56:5c:b9:53:6e:38:a0:4a:e7:8a:
                    46:94:c7:46:61:83:3a:43:80:d5:7b:e3:cc:ef:c8:
                    fe:9b:e6:9f:21:ef:ed:be:1f:36:42:34:f8:87:0d:
                    7d:27:3c:47:9c:a7:40:a9:0e:7a:c5:c1:de:2d:18:
                    28:3d:66:bb:25:1c:e7:00:3f:ac:81:7e:f7:a7:08:
                    59:c8:24:eb:92:3b:51:ba:55:d8:33:28:94:f2:68:
                    a2:80:d6:ef:65:06:d7:e5:b2:f8:9f:bb:40:c2:af:
                    cc:a2:a3:13:89:c8:18:89:4c:42:b8:80:82:91:e9:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C3:BC:61:60:71:56:49:FF:EE:E8:3A:E1:87:40:10:80:A9:6E:31
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/I8O8YWBxVkn_7ug64YdAEICpbjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.48.0/24
                IPv6:
                  2a0b:b81::/46

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:17:25:08:51:f4:f1:ab:af:07:8c:7d:14:42:04:77:40:
         0c:30:fd:3e:31:f7:1e:33:e4:e0:9b:82:50:7c:59:46:6a:8a:
         31:d4:3f:66:9b:a0:07:3b:5f:0b:4b:38:5e:f5:61:55:6f:5e:
         e5:0b:58:fc:7d:24:e3:03:0e:4f:b9:b4:57:e1:3f:8e:d3:50:
         3c:c3:b1:84:69:76:b8:32:75:7b:5a:6f:05:aa:c4:c4:cc:e8:
         ed:dc:14:d7:b5:68:7f:c4:f5:96:7e:43:ca:c6:6f:7c:25:65:
         ed:53:bb:5a:9b:b0:62:52:25:82:4a:e8:2f:91:dd:df:4d:77:
         93:ef:ca:94:b4:63:5b:c3:5f:7d:5e:5f:38:c5:a9:b2:cc:e6:
         46:71:6c:38:d3:7d:d9:e8:ec:af:ba:f1:00:8b:6e:b8:c7:37:
         3c:c4:0d:06:f5:6b:b6:50:a9:20:27:a9:65:ba:57:37:f4:eb:
         f0:72:af:c5:03:e4:6b:e5:2c:bb:3d:5f:a5:93:49:41:77:c9:
         1f:e1:0b:df:ad:dd:8a:c6:b6:f1:c0:28:df:10:d2:63:f4:c8:
         c2:c1:8d:58:32:cc:50:3b:38:13:b0:8e:36:aa:9e:d9:2f:d3:
         b6:6a:3f:46:11:4c:ac:a6:c2:15:5e:48:db:f0:11:ff:b5:e7:
         0a:68:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----