Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/2h1fW_FuVbg4yT4qcUJL-N1rimI.roa
File:                     2h1fW_FuVbg4yT4qcUJL-N1rimI.roa (raw, json)
Hash identifier:          M9Nt+Oq7VX/vsD58ycyD5nt9N/5XL1/wyK93dm2upLs=
Subject key identifier:   DA:1D:5F:5B:F1:6E:55:B8:38:C9:3E:2A:71:42:4B:F8:DD:6B:8A:62
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       054FCBE3
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/2h1fW_FuVbg4yT4qcUJL-N1rimI.roa
Signing time:             Sat 28 May 2022 16:27:52 +0000
ROA not before:           Sat 28 May 2022 16:27:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200639
IP address blocks:        5.183.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89115619 (0x54fcbe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: May 28 16:27:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da1d5f5bf16e55b838c93e2a71424bf8dd6b8a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:25:26:6d:1e:37:91:8d:18:26:3d:61:8e:
                    c3:c3:54:e0:a2:66:64:d5:6d:c0:fe:f1:e6:13:4b:
                    eb:0d:26:17:f5:6a:94:a6:59:04:12:83:b1:4c:f7:
                    1f:1a:ca:cb:e9:96:92:35:d7:d6:3c:11:5a:c2:f0:
                    5a:08:5d:60:91:31:fb:c3:b4:a9:02:bc:99:5d:8a:
                    76:84:a6:25:ce:4b:c2:0f:10:e7:a6:4f:2a:a3:e4:
                    2b:c8:4b:09:55:5d:80:39:89:74:89:fc:33:fe:14:
                    d4:25:6f:44:1e:af:01:cd:a8:96:52:b9:0e:41:48:
                    0b:41:2f:d1:31:77:82:da:07:3d:83:03:0b:0c:8f:
                    4c:23:16:fb:a7:77:87:02:be:84:42:35:6e:96:60:
                    74:91:47:fc:5a:e1:6a:7c:4a:53:fa:17:22:97:5f:
                    61:fe:70:1d:53:a4:2e:70:00:d2:3d:42:74:b1:f6:
                    59:a7:44:4b:05:ca:6e:1a:c9:69:11:b0:04:f6:59:
                    3f:ca:fe:fa:55:9a:62:84:ec:dc:20:2a:94:ed:2b:
                    75:d5:55:3e:13:65:da:bf:8f:6c:87:2b:f6:bc:26:
                    96:cc:2c:d7:3b:73:3f:7e:cf:aa:7b:11:2a:0e:a3:
                    f4:02:1a:4c:17:13:ad:b8:54:ef:94:8b:6e:12:8e:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1D:5F:5B:F1:6E:55:B8:38:C9:3E:2A:71:42:4B:F8:DD:6B:8A:62
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/2h1fW_FuVbg4yT4qcUJL-N1rimI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:4d:c7:e3:b3:5f:3a:7a:75:1f:9b:aa:36:44:78:36:02:
         23:34:7e:f2:7d:3d:e4:f9:c4:d1:a4:2b:bb:33:3c:39:22:0e:
         2f:80:3b:7c:e0:93:1b:38:79:e5:78:1c:5f:c1:f9:41:f4:79:
         3e:ee:2c:b0:a8:00:d9:2a:23:a0:eb:b1:50:f4:a1:9b:2a:d4:
         fb:1a:d3:6b:75:65:54:de:45:f1:68:d0:69:b3:95:d0:55:20:
         36:b9:5c:e3:ae:44:32:64:8b:9f:e5:61:ad:f4:61:67:48:6d:
         b8:a3:c2:4a:82:f1:bb:ea:67:7f:e9:db:56:fa:8c:75:3a:5e:
         da:56:95:41:f9:f8:64:cc:b8:4c:aa:51:cd:b0:a6:ac:c2:49:
         e9:be:3c:2d:d1:7e:ce:45:57:e4:14:5a:73:0f:77:3b:28:6f:
         07:6f:8c:67:67:64:a3:93:f0:79:9b:9c:24:21:27:4e:b3:b7:
         ab:68:33:e2:f2:a5:4a:a5:5d:30:8f:bf:29:7c:de:db:df:01:
         39:23:12:fa:2c:f6:c2:db:b2:10:2b:b8:19:d5:9f:c9:6f:f8:
         c3:09:4f:9f:3f:9b:ae:9f:0a:ea:ba:71:56:b0:7a:d3:7f:1a:
         99:42:ff:be:4a:90:19:d3:96:a2:1c:86:bc:60:ac:41:bd:86:
         b2:a0:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----