Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/wlXe3bTYU7gevvOG2WaBjwr6sEY.roa
File:                     wlXe3bTYU7gevvOG2WaBjwr6sEY.roa (raw, json)
Hash identifier:          dPrXT/2RNN1EFBlEQFLupvfTjXkCTvac0+YPp2nK0Xg=
Subject key identifier:   C2:55:DE:DD:B4:D8:53:B8:1E:BE:F3:86:D9:66:81:8F:0A:FA:B0:46
Certificate issuer:       /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial:       0D50A3CA
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/wlXe3bTYU7gevvOG2WaBjwr6sEY.roa
Signing time:             Sat 01 Jan 2022 10:55:41 +0000
ROA not before:           Sat 01 Jan 2022 10:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49820
IP address blocks:        5.35.176.0/21 maxlen: 21
                          2a10:87c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223388618 (0xd50a3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
        Validity
            Not Before: Jan  1 10:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c255deddb4d853b81ebef386d966818f0afab046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4d:3b:b6:ca:76:59:69:5f:be:01:c5:0a:07:
                    98:04:84:0c:27:2f:c6:66:e0:9d:51:70:6e:ee:73:
                    0c:43:57:04:ce:8b:27:c1:dc:c2:e5:7c:ff:8b:ba:
                    10:42:fa:8f:a7:7f:2f:d0:90:35:05:f9:7b:19:94:
                    65:8d:53:3f:90:4c:54:c9:b9:95:aa:d5:ad:0f:1d:
                    a1:ee:be:a7:d1:cf:3d:37:a4:13:cf:fa:b9:29:3f:
                    19:5b:89:82:ea:b6:40:a2:44:ce:ad:8d:e4:b1:08:
                    b3:af:67:a7:9d:35:86:c9:e6:81:20:dc:14:93:45:
                    c1:a9:1e:9c:a8:38:ff:79:1d:7f:6a:be:83:af:9b:
                    f8:4f:94:3f:32:2b:aa:cd:9a:ef:7a:c6:91:4d:94:
                    d5:d3:e2:d4:ed:a6:9e:11:7a:50:5a:8f:3d:5d:ce:
                    0c:06:e8:b4:55:86:f0:ee:6c:19:c6:83:ea:81:4c:
                    4e:9e:9e:30:22:0b:2b:08:f2:c4:8e:6f:ac:8a:ab:
                    38:83:18:7b:76:01:0c:21:36:33:27:bd:ed:a3:73:
                    a7:2d:07:c6:47:43:8f:af:21:44:5e:71:6f:36:5b:
                    55:a8:86:1a:06:fe:f5:77:72:79:3f:a8:1d:72:f9:
                    00:4d:1c:83:12:71:c8:e2:05:5c:81:b1:9a:1f:c5:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:55:DE:DD:B4:D8:53:B8:1E:BE:F3:86:D9:66:81:8F:0A:FA:B0:46
            X509v3 Authority Key Identifier:
                keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/wlXe3bTYU7gevvOG2WaBjwr6sEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.35.176.0/21
                IPv6:
                  2a10:87c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:da:53:b3:5c:a6:dc:8e:0d:d0:dc:7a:88:7b:48:19:2d:37:
         2b:16:65:de:e4:48:c0:16:fa:b3:48:d7:e6:d3:18:dd:00:4f:
         0e:2a:8b:99:5c:40:3c:a8:f8:27:b6:00:a9:1d:86:b9:73:41:
         59:0c:ec:17:21:b8:5c:2f:0a:0e:93:5d:5f:9f:a5:b8:a7:60:
         3e:b3:1d:78:7c:7b:9e:01:47:c3:6a:82:2c:78:71:ff:20:16:
         88:ce:77:2b:3d:6e:a4:bc:6e:ae:23:66:0a:83:fa:be:af:1f:
         a1:19:25:3a:18:f6:85:cf:51:35:e9:37:aa:90:9e:3b:6a:f4:
         da:ff:55:81:0a:14:ed:10:da:74:92:0f:b4:13:8c:ff:8b:1e:
         a0:bb:81:21:d0:ff:62:4d:97:36:ac:96:b6:4d:4e:56:76:9b:
         73:fe:34:83:19:00:86:50:62:29:44:84:bb:bf:cd:74:ae:4c:
         6f:8a:d0:5c:d1:90:42:10:e2:d4:aa:24:2a:bd:07:4c:64:90:
         e2:bb:7d:6b:e0:ce:0f:88:02:83:77:2c:90:95:d0:1e:b0:5e:
         70:54:07:e8:eb:8f:2a:15:db:aa:e1:6f:77:5d:e4:06:f3:1b:
         3d:e7:e9:81:9f:7a:7d:5f:d3:ce:a2:c4:c8:0d:9d:07:c6:42:
         03:2b:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----