Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/RS2R0hFPPXGghulf2TAav96nQiw.roa
File:                     RS2R0hFPPXGghulf2TAav96nQiw.roa (raw, json)
Hash identifier:          +YEV8Gq2N6ljTb/4p5ir34cBwF+m/MRjZUz2OzJWxvQ=
Subject key identifier:   45:2D:91:D2:11:4F:3D:71:A0:86:E9:5F:D9:30:1A:BF:DE:A7:42:2C
Certificate issuer:       /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial:       164CEAD1
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/RS2R0hFPPXGghulf2TAav96nQiw.roa
Signing time:             Sat 01 Jan 2022 14:56:15 +0000
ROA not before:           Sat 01 Jan 2022 14:56:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59642
IP address blocks:        195.189.96.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374139601 (0x164cead1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
        Validity
            Not Before: Jan  1 14:56:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=452d91d2114f3d71a086e95fd9301abfdea7422c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:7a:03:c0:d7:aa:09:27:a7:2e:73:d8:93:
                    1b:07:6b:e8:3e:0c:48:67:3e:4d:26:f6:3c:c6:8d:
                    d8:af:a1:87:f6:70:b7:b5:7d:96:80:d2:b9:e0:45:
                    29:d9:50:bb:5c:b5:34:4a:e4:a4:e0:ad:dc:ad:9a:
                    be:ef:5e:6a:25:c5:87:16:a0:6c:ad:f3:32:4d:a6:
                    9b:84:79:73:83:20:4d:fd:88:92:f8:f6:57:0b:9f:
                    6d:92:71:4c:d7:e0:d1:59:93:7c:59:c2:79:d5:dd:
                    3d:c2:d2:98:9f:2e:2b:c4:84:fc:a0:3d:8d:96:09:
                    0e:09:9f:dc:38:a9:73:cc:4c:13:e4:20:29:c8:e4:
                    97:de:09:e4:8a:c9:d4:f4:7d:0f:ed:74:86:01:4d:
                    f4:28:d5:44:36:33:ee:92:3e:07:42:d6:b5:f4:bb:
                    ba:25:0b:72:52:cd:27:94:a9:5c:aa:34:c5:90:f8:
                    60:e9:27:71:db:f0:41:48:b0:d5:a7:57:32:18:c7:
                    c0:7f:b9:7c:e4:3f:81:2d:14:4c:1c:10:40:a3:2a:
                    96:62:f8:68:87:d0:7a:49:dc:8a:74:39:ce:65:2a:
                    ad:53:ef:f0:77:c4:3f:d0:39:0a:9c:48:4a:42:ba:
                    a7:5a:bf:78:5d:13:02:81:f1:9e:74:f8:3e:85:15:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2D:91:D2:11:4F:3D:71:A0:86:E9:5F:D9:30:1A:BF:DE:A7:42:2C
            X509v3 Authority Key Identifier:
                keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/RS2R0hFPPXGghulf2TAav96nQiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:60:1f:59:aa:52:a1:74:21:eb:37:62:9f:cf:6e:eb:26:
         3f:3d:50:75:34:f6:ce:81:79:77:a4:03:32:c8:19:d1:46:fb:
         28:93:0d:6a:9c:10:ac:e1:9b:6b:70:c3:66:17:53:25:c3:a9:
         4e:b4:5e:ff:e7:e9:c5:d5:2a:b5:48:3b:8f:e4:4b:27:33:2c:
         af:11:9b:37:e3:40:4d:6b:11:77:ff:29:c9:5a:93:56:40:8c:
         30:82:20:3f:c6:7e:95:ae:0a:7c:41:fc:ff:4b:44:2c:88:be:
         13:72:95:dc:7e:20:76:d0:33:65:93:bc:7e:9c:33:db:5f:f5:
         88:1d:dd:67:97:20:6e:07:b0:30:02:ac:dd:30:36:8a:48:19:
         2b:b5:5a:89:14:09:4a:a5:90:74:51:1b:97:bf:1d:77:07:68:
         13:80:fd:e7:de:ea:b4:7e:de:c8:be:48:49:cb:4b:54:a8:d6:
         c7:9c:a8:21:2b:c4:2d:20:ff:9f:4a:1f:4f:1e:9d:63:af:45:
         b8:c7:25:2c:0f:7d:33:25:39:91:c8:a2:cf:36:44:a4:16:4b:
         ff:5b:e3:ba:6c:8b:4d:0e:3d:89:5a:f6:ce:b8:a5:64:f7:33:
         78:53:5a:0e:c9:db:29:e9:5b:fd:1d:81:b7:f4:28:50:2c:e4:
         7e:2b:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----