Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/y0SeAyuCk6edB2ujj3aCNSuse-E.roa
File:                     y0SeAyuCk6edB2ujj3aCNSuse-E.roa (raw, json)
Hash identifier:          H6gV5SIq06pOATOtIdsiVeFlORD5aGdu0xONddCFKJE=
Subject key identifier:   CB:44:9E:03:2B:82:93:A7:9D:07:6B:A3:8F:76:82:35:2B:AC:7B:E1
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       B8E7BF
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/y0SeAyuCk6edB2ujj3aCNSuse-E.roa
Signing time:             Tue 10 May 2022 06:48:28 +0000
ROA not before:           Tue 10 May 2022 06:48:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59432
IP address blocks:        160.19.94.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12117951 (0xb8e7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: May 10 06:48:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb449e032b8293a79d076ba38f7682352bac7be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:7e:b3:09:3f:a2:db:ab:11:ae:52:0e:d0:
                    fc:8c:f6:18:05:6a:9e:36:ed:31:48:e4:dc:fc:1c:
                    12:59:d6:3e:ca:c1:9c:88:0a:7f:58:ee:11:1f:e8:
                    c9:f3:94:f8:65:ca:56:53:e4:4e:70:a8:5f:ea:30:
                    ef:85:4c:a7:6c:b9:4d:0a:3e:7a:6c:35:52:3d:db:
                    36:5c:a8:d8:0d:50:33:2e:24:8c:a0:26:c8:8f:a8:
                    fa:88:0b:5e:0c:ed:37:ac:b7:4b:9b:32:7f:3c:e7:
                    c8:f1:8d:aa:06:29:96:2f:64:c8:a9:b4:fe:15:13:
                    5d:87:b3:ab:6d:98:b5:4a:39:98:62:e6:0f:12:3a:
                    12:e6:e1:fc:8d:e5:12:84:8b:63:71:36:a8:96:73:
                    41:7c:0e:c7:88:ea:40:7d:50:d1:61:bc:44:b0:79:
                    72:58:54:92:85:53:be:1d:46:1d:9a:da:5b:5b:0e:
                    45:65:7f:f1:20:1c:d4:e4:93:fb:b5:7e:c3:af:d0:
                    7a:5f:3f:56:1d:10:b6:66:c5:9c:e1:5f:5f:12:e1:
                    1e:8a:a9:72:b5:60:dc:1f:29:b7:51:a5:0e:69:97:
                    bb:0d:c8:3f:1d:06:3b:34:89:6d:e6:32:84:5f:de:
                    10:9e:30:5b:43:bc:d5:ef:0b:12:c5:77:6d:63:51:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:9E:03:2B:82:93:A7:9D:07:6B:A3:8F:76:82:35:2B:AC:7B:E1
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/y0SeAyuCk6edB2ujj3aCNSuse-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:c0:d0:a4:7c:fe:e9:b6:d8:e5:06:f6:53:11:05:83:03:
         9d:b0:a5:7f:66:eb:d2:11:0e:ac:5e:8c:a7:74:6b:84:d0:b8:
         45:50:73:94:dc:2c:57:fd:88:85:2f:21:55:8a:9a:e1:61:89:
         84:8e:15:ff:8e:ef:26:bf:63:d4:72:5d:31:78:d3:1c:c2:01:
         c3:e1:58:9e:23:70:cf:22:a7:4d:99:ee:56:e8:70:2c:34:d0:
         06:0a:4f:82:b7:2d:8b:2c:8f:cb:db:47:b0:0b:2f:ef:e4:b0:
         22:65:57:38:e6:7d:0f:b8:74:83:a1:74:7b:fd:c7:a9:e3:0f:
         f6:a6:e3:4f:5e:07:63:5e:01:43:e9:dc:c3:58:05:e7:7b:c1:
         04:f2:37:ff:b5:3d:1c:ed:e4:9a:36:f0:77:29:88:28:09:4c:
         1e:14:28:70:c5:78:a3:0e:80:59:8b:35:48:2b:d5:88:3e:c1:
         d0:93:09:3c:76:5e:e1:a6:ea:96:19:36:2e:e7:0b:76:ee:3e:
         b4:0f:ca:b1:f5:0b:1a:14:95:36:00:3a:60:b2:29:dc:c7:45:
         68:0b:d0:ca:3c:95:87:d5:62:ae:2b:f1:ea:d4:fd:f4:f1:22:
         60:3a:3a:43:6b:fa:b0:e8:1e:d1:38:19:a0:54:61:c9:06:f1:
         7d:5d:6f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----