Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/UB5saSVLOV7HQTsoqPMZg3OR2Oc.roa
File:                     UB5saSVLOV7HQTsoqPMZg3OR2Oc.roa (raw, json)
Hash identifier:          taevdRfGVuJNcRaMLgAWTRmjSkHaz0lMF6k+rPi89xM=
Subject key identifier:   50:1E:6C:69:25:4B:39:5E:C7:41:3B:28:A8:F3:19:83:73:91:D8:E7
Certificate issuer:       /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial:       1C8C86E0
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/UB5saSVLOV7HQTsoqPMZg3OR2Oc.roa
Signing time:             Mon 11 Apr 2022 23:38:05 +0000
ROA not before:           Mon 11 Apr 2022 23:38:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25509
IP address blocks:        213.190.96.0/19 maxlen: 24
                          2a00:5380::/29 maxlen: 32
                          2a00:5380::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478971616 (0x1c8c86e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
        Validity
            Not Before: Apr 11 23:38:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=501e6c69254b395ec7413b28a8f319837391d8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:53:6a:a5:88:49:16:9f:8c:63:1a:13:09:
                    49:ce:70:3a:a3:b6:58:87:3e:46:64:f7:3a:8a:5b:
                    d9:66:2f:5f:43:05:34:91:c5:d2:04:bb:d7:00:73:
                    2e:d5:0b:8d:b4:db:e6:a7:a4:b1:05:1a:0c:79:95:
                    8b:2b:6a:f8:f3:9b:e2:98:1a:93:ff:da:5b:77:c7:
                    c2:24:a0:23:56:08:4a:3b:6d:dd:e3:36:55:67:4c:
                    08:bd:81:12:1a:76:76:84:de:56:20:a2:ae:93:e3:
                    c2:13:d2:18:74:3c:bd:59:35:be:3d:62:dc:e8:cf:
                    60:68:03:fd:cc:57:e6:51:49:33:3a:b5:ff:74:2b:
                    ce:41:03:be:9b:0d:eb:77:d4:d1:e3:15:d7:f8:fc:
                    72:59:8e:1a:4f:29:d1:97:35:2a:6e:87:80:3f:68:
                    d6:e0:11:df:b3:6a:82:6a:ab:ef:6a:2c:55:39:d4:
                    a8:8d:ec:6c:11:51:2f:16:76:4b:31:10:9b:a5:2c:
                    5a:84:79:c4:dd:bd:12:1b:27:f4:3c:fa:dc:3b:e3:
                    f0:21:f3:83:8e:36:29:ce:4a:9b:8a:cb:fc:f2:28:
                    30:46:c4:40:1e:e1:bf:a1:e3:f0:2e:b2:4c:58:a4:
                    d4:03:4d:15:f3:77:6f:5f:13:92:6f:39:90:c3:4a:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1E:6C:69:25:4B:39:5E:C7:41:3B:28:A8:F3:19:83:73:91:D8:E7
            X509v3 Authority Key Identifier:
                keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/UB5saSVLOV7HQTsoqPMZg3OR2Oc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.190.96.0/19
                IPv6:
                  2a00:5380::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:8b:fb:31:21:59:73:2b:af:51:b5:0f:56:7c:09:d9:f0:76:
         08:97:7f:83:fe:b3:39:ae:45:07:17:1f:b9:bc:c2:c1:83:2a:
         c9:97:5b:16:19:54:5a:18:31:8d:ba:fb:b6:37:77:ed:b4:c3:
         c4:ce:7c:49:30:71:94:9d:e7:f6:4e:73:88:1a:bd:f2:76:78:
         6e:a8:8f:62:60:95:88:c5:4f:a5:3b:df:68:e0:6b:f1:89:a2:
         63:35:b8:14:1b:6e:2d:2c:b1:c1:18:c6:1f:dc:7f:10:45:8f:
         0d:81:82:b3:cc:72:8a:11:9a:5a:0e:d4:7e:5b:6c:ee:bf:c2:
         99:5d:a8:a1:4b:99:32:74:9d:92:76:86:e5:5a:c7:ad:8a:27:
         53:df:cd:65:cc:03:81:17:db:39:82:d8:d2:c5:a8:28:8e:cd:
         50:01:6a:ae:69:34:b0:c6:76:b6:d2:d2:19:69:30:9b:88:83:
         a0:cf:47:3d:a8:35:58:6e:b5:01:57:4c:e7:9f:c3:16:ac:64:
         3c:9d:1c:e0:04:4b:35:c3:c0:00:3e:c1:29:48:ea:a2:da:47:
         11:48:0c:7b:55:d0:a5:a9:69:23:be:ae:15:ee:2f:a9:0e:ff:
         57:c5:dc:ad:6a:cf:37:1d:18:50:30:c7:eb:4c:13:2c:58:23:
         ae:2c:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----