Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/CrchEnj7BmTjNPx3RZOMW9XAKDY.roa
File:                     CrchEnj7BmTjNPx3RZOMW9XAKDY.roa (raw, json)
Hash identifier:          1hyDw63cpUaP0KFGCccflLmz4ULl7UW2M79goZsi4/Y=
Subject key identifier:   0A:B7:21:12:78:FB:06:64:E3:34:FC:77:45:93:8C:5B:D5:C0:28:36
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       0509EDAF
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/CrchEnj7BmTjNPx3RZOMW9XAKDY.roa
Signing time:             Mon 25 Apr 2022 13:06:40 +0000
ROA not before:           Mon 25 Apr 2022 13:06:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205630
IP address blocks:        5.183.79.0/24 maxlen: 24
                          2a07:22c0:8004::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84536751 (0x509edaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Apr 25 13:06:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ab7211278fb0664e334fc7745938c5bd5c02836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:78:25:9a:3a:08:b1:e1:53:3b:72:88:57:
                    39:3f:15:ad:39:4a:1a:84:20:fd:7a:f0:a7:75:06:
                    cd:da:cc:11:8d:c7:95:77:65:76:cf:19:91:00:92:
                    ee:bc:48:81:c7:e4:2f:00:48:42:ba:5a:b1:a7:95:
                    5e:bf:63:75:73:f7:6f:7a:70:80:6d:7c:87:50:01:
                    bf:1a:dc:b9:65:e6:27:30:c1:d0:c1:fe:17:8d:54:
                    a5:be:ca:de:a2:97:62:e0:52:77:8f:26:d3:66:7c:
                    f0:ee:a6:f3:73:c4:b4:bc:b4:e0:b1:ca:7b:56:48:
                    c5:c6:5f:47:69:90:a7:ef:35:22:a4:de:dd:97:1b:
                    01:84:fa:60:0e:1a:e2:97:23:d9:f9:58:88:34:80:
                    1d:7d:b6:98:27:e5:d0:47:42:5f:e9:b5:9a:92:47:
                    21:4e:b1:84:cb:eb:4a:b5:28:0a:91:84:bc:cb:f9:
                    9d:ce:b9:a4:0a:d2:5a:7c:e6:bb:d2:c4:0c:62:74:
                    69:b0:43:30:c2:bb:9d:6d:0a:a7:9d:5e:30:28:84:
                    99:05:82:2e:8c:d6:92:56:ea:68:75:e2:32:12:10:
                    f9:b7:a6:8c:09:95:dc:7e:45:5c:b9:44:05:ee:0f:
                    8d:6a:5a:da:2a:e6:21:ef:97:c9:16:e8:52:c9:65:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B7:21:12:78:FB:06:64:E3:34:FC:77:45:93:8C:5B:D5:C0:28:36
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/CrchEnj7BmTjNPx3RZOMW9XAKDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.79.0/24
                IPv6:
                  2a07:22c0:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:7a:fd:5f:5f:f3:08:1f:9e:4f:e5:69:58:3d:ba:b8:cb:5a:
         c3:12:8d:e6:da:66:92:34:3d:3d:9f:ec:d6:89:2e:a0:6a:ff:
         b4:66:4b:52:29:0f:0d:3c:1b:fa:3f:fa:9d:5b:46:4d:ec:74:
         47:9f:6d:f4:48:08:51:74:b1:80:b1:2a:dd:77:a0:76:8c:5d:
         5c:76:a4:64:48:88:cb:d1:f4:83:ac:c9:03:55:40:78:60:27:
         05:b9:96:49:d4:f3:c3:d0:5e:0e:6c:49:f3:d3:2a:87:5f:e2:
         21:c0:a0:aa:4f:44:5b:f5:91:41:d8:61:45:ff:ed:b6:d6:9c:
         f5:9a:c8:22:a0:2f:e0:1c:4d:d9:16:32:28:c1:d1:e6:b9:92:
         54:bf:cb:36:1c:d5:b8:36:22:e3:8e:b5:f3:11:da:e6:5c:06:
         11:96:f1:84:96:d4:c5:1a:58:8c:de:75:a6:38:b1:21:3b:62:
         d5:38:f1:0e:21:18:d1:f2:f2:49:f1:97:11:b5:5b:2e:8a:a9:
         7c:44:69:88:20:4a:6d:c0:2d:70:79:3e:2b:47:a8:f6:f7:2e:
         67:99:d9:6e:7b:6f:a3:86:9e:24:6f:fc:a4:c3:94:b4:91:33:
         5e:b2:0e:2c:b4:1a:6d:88:8f:24:f1:14:cc:58:bc:03:12:2f:
         0e:4a:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----