Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa
File:                     LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa (raw, json)
Hash identifier:          9mAx7xSXgCtAQbelO0nO5Rw88MUGa2TnUnr1vI4H5lE=
Subject key identifier:   2C:75:C9:90:4D:D3:94:C6:D6:78:EB:B8:7E:0D:87:27:03:00:BC:A5
Certificate issuer:       /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial:       03D6A019
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa
Signing time:             Sat 01 Jan 2022 11:54:45 +0000
ROA not before:           Sat 01 Jan 2022 11:54:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15377
IP address blocks:        94.240.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64397337 (0x3d6a019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
        Validity
            Not Before: Jan  1 11:54:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c75c9904dd394c6d678ebb87e0d87270300bca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:e6:fd:f7:32:79:8d:dd:b6:6a:5b:04:0d:
                    91:e3:1e:39:9f:7f:89:24:b4:19:ea:91:9b:c7:14:
                    a6:17:21:5e:ba:ba:86:da:93:23:cb:cb:bf:10:32:
                    3e:1e:25:fd:16:44:80:b6:7e:93:61:89:10:a6:01:
                    fc:91:1e:6b:f5:6f:97:ec:99:79:1b:c8:46:f5:6a:
                    4c:53:f2:ed:2e:0e:28:a2:21:e9:c8:28:4a:9a:cb:
                    e6:e0:5e:00:e0:04:97:23:ae:cf:e1:17:08:82:13:
                    f5:fd:8e:39:c7:3a:14:8a:7e:d5:2d:21:f0:78:1a:
                    89:e7:31:b5:62:cb:27:d2:d8:29:05:fa:4b:e4:74:
                    85:50:22:c6:7b:60:ff:1e:53:27:cd:70:53:a8:ee:
                    71:ae:8c:44:e1:5e:6f:ab:56:87:e7:bb:bc:e2:4e:
                    78:97:68:4f:a9:1a:ab:21:80:2b:26:26:be:b0:92:
                    65:93:54:6c:3f:21:aa:64:83:27:20:fb:a9:e7:2a:
                    cb:dc:64:ba:50:cf:65:33:90:f4:43:16:f8:bd:78:
                    ac:64:e1:8b:56:4a:84:8a:f5:b4:dc:d7:07:6d:7b:
                    14:8e:97:e1:27:5d:a0:5a:48:17:c2:b8:bd:0a:70:
                    69:e3:20:56:ff:e1:28:a7:b6:77:c4:44:da:a5:97:
                    52:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:75:C9:90:4D:D3:94:C6:D6:78:EB:B8:7E:0D:87:27:03:00:BC:A5
            X509v3 Authority Key Identifier:
                keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.240.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:02:0a:26:bc:c5:db:51:2a:a4:25:47:5e:b1:28:4e:cc:
         20:77:14:08:4d:25:69:e4:62:03:94:7f:7c:ee:08:d5:16:9d:
         ac:6e:42:19:2d:3a:15:fa:a0:fa:35:d0:b2:12:cd:0c:c2:fb:
         0f:8c:bf:8e:24:8b:1d:2e:46:0d:3f:28:18:94:72:d8:d3:a0:
         6e:52:09:b2:0d:78:21:a2:af:a1:a7:a9:c0:8d:48:07:13:c2:
         db:3f:db:5b:e1:9d:07:78:ff:f2:69:fd:28:7f:9a:22:08:9c:
         4f:66:e4:8a:b7:ff:9c:d5:d0:9d:00:85:48:b7:dd:3e:47:a2:
         97:aa:9c:f9:1b:0e:67:d1:17:86:fa:c6:cc:28:8c:27:ab:f0:
         a9:a0:80:3c:f3:05:5c:bd:0f:79:40:55:9c:17:80:b2:78:0d:
         c2:27:85:47:9a:1e:9f:0d:e4:bf:e9:88:2d:a4:0c:c7:34:c9:
         84:d1:01:00:14:9b:01:15:a7:da:6b:9a:6f:6a:ab:63:e0:9c:
         28:52:e2:44:87:b5:aa:ce:3c:8a:82:40:9b:48:30:7b:52:69:
         54:78:42:e7:c4:ce:a9:4c:e1:08:71:40:b8:fa:66:6e:af:ea:
         ec:c2:3c:0c:bf:ba:ea:aa:23:76:e7:e8:16:c0:0d:03:f7:2f:
         70:6d:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----