Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/5fGL6lF4aHa_SNwhULdA8js7ypc.roa
File:                     5fGL6lF4aHa_SNwhULdA8js7ypc.roa (raw, json)
Hash identifier:          +CsPjGYdUQUoFJxTpDn/VIHgQfxuJQbYxYtTGv/VZrQ=
Subject key identifier:   E5:F1:8B:EA:51:78:68:76:BF:48:DC:21:50:B7:40:F2:3B:3B:CA:97
Certificate issuer:       /CN=19aed7327289167009b96c40e3880ade66800a3f
Certificate serial:       02317F
Authority key identifier: 19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/5fGL6lF4aHa_SNwhULdA8js7ypc.roa
Signing time:             Wed 25 May 2022 06:41:13 +0000
ROA not before:           Wed 25 May 2022 06:41:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42404
IP address blocks:        193.33.90.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143743 (0x2317f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19aed7327289167009b96c40e3880ade66800a3f
        Validity
            Not Before: May 25 06:41:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5f18bea51786876bf48dc2150b740f23b3bca97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:7e:20:43:a0:fc:da:fe:32:40:2c:d2:21:
                    a5:ed:07:1d:e7:df:18:99:8c:00:57:c0:96:00:4a:
                    54:f0:a5:88:95:51:df:fb:b4:cc:91:89:ac:9c:9e:
                    36:4b:d1:24:0b:f7:5b:f0:3f:42:ae:8f:a9:9a:9f:
                    7a:56:82:c6:fc:67:7a:33:78:a4:f3:69:5f:00:6c:
                    5e:a0:9f:f6:80:4c:7f:16:4d:90:9a:c0:70:77:34:
                    04:e7:60:c3:d3:92:70:25:fa:60:b7:9c:b1:29:72:
                    52:3b:d0:dd:00:89:99:d6:aa:1e:01:da:b0:2c:34:
                    41:28:b0:0a:f4:63:01:2e:0a:7b:6c:e9:52:98:3b:
                    5f:48:b6:4b:fb:8d:67:1c:b7:e6:9e:d2:22:6a:09:
                    0d:d2:83:83:af:f0:3c:dc:f4:d1:a7:41:bb:d5:76:
                    b0:90:51:f0:62:f7:3d:db:87:8d:cd:d4:f6:66:95:
                    7f:54:5b:32:00:2b:8f:d7:58:a5:0c:b5:52:3b:f7:
                    f8:07:69:59:d7:51:f0:c9:a5:55:3a:e6:dc:01:be:
                    81:64:46:bf:e9:37:36:c0:26:cb:5f:e9:36:78:32:
                    a8:17:46:66:5d:21:bf:f4:a3:64:9c:bd:3e:ca:7f:
                    23:3e:45:d8:75:00:6d:ce:ad:0d:ca:4a:27:04:e4:
                    c8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:8B:EA:51:78:68:76:BF:48:DC:21:50:B7:40:F2:3B:3B:CA:97
            X509v3 Authority Key Identifier:
                keyid:19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/5fGL6lF4aHa_SNwhULdA8js7ypc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:d6:ab:33:f5:6d:08:b3:94:3d:54:9c:c4:2f:81:4e:11:
         02:ed:2a:9d:52:d8:6c:ea:39:02:ec:e9:5b:4b:5b:d0:46:14:
         89:fd:4e:dd:71:2a:8b:74:73:2f:ca:db:76:a7:6a:89:dc:f2:
         8c:c0:da:bd:76:9f:65:5c:9e:c9:5f:2f:a9:cf:a6:52:dd:f1:
         f6:6a:a4:b0:9b:6b:cf:f1:97:af:c2:d6:ff:6e:ce:6e:34:2d:
         fc:bc:91:bd:74:f9:10:b2:08:b8:24:5f:5d:4a:f5:fc:a9:7d:
         5f:f7:ed:b2:31:5d:30:58:df:82:ec:b5:c2:44:90:09:4a:7a:
         b9:35:13:31:dc:a4:b7:7b:26:89:17:e7:a3:c4:4b:a4:d3:5f:
         7c:e5:92:3b:71:3f:9c:f5:48:9e:c1:3c:54:a1:1e:45:b4:f3:
         be:a1:c7:1c:87:a0:80:9c:4b:c4:33:b0:b3:49:4a:d6:e5:18:
         30:45:2e:cf:9b:58:5c:bb:54:23:93:63:b0:dd:f5:6a:d3:ec:
         b4:fd:f0:d1:ae:93:71:fe:0f:5b:ce:30:05:d6:85:b7:1c:15:
         8a:3a:34:f1:0e:8a:68:b5:44:25:a9:53:3d:7c:b1:84:4d:f5:
         28:b8:34:41:60:39:02:dc:71:ef:1e:e7:6e:09:d5:8c:59:b7:
         47:ac:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----