Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/UU5pDJ63td1hizfMjv_QEWc8sC8.roa
File:                     UU5pDJ63td1hizfMjv_QEWc8sC8.roa (raw, json)
Hash identifier:          921Ng5FlHjvRPkgKcf2ZWt7b9OVhdGvaYtfgCB6/vUc=
Subject key identifier:   51:4E:69:0C:9E:B7:B5:DD:61:8B:37:CC:8E:FF:D0:11:67:3C:B0:2F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       06ED7432
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/UU5pDJ63td1hizfMjv_QEWc8sC8.roa
Signing time:             Fri 27 May 2022 11:42:14 +0000
ROA not before:           Fri 27 May 2022 11:42:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213396
IP address blocks:        194.50.176.0/24 maxlen: 24
                          2a0a:4540:3000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116225074 (0x6ed7432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: May 27 11:42:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=514e690c9eb7b5dd618b37cc8effd011673cb02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:2f:08:b9:2e:56:e7:47:93:12:07:74:1d:
                    db:a7:dd:e3:b0:e5:29:17:5c:db:ec:9e:8d:62:02:
                    f4:f6:bd:2b:38:44:04:66:c2:5f:ff:29:ac:04:79:
                    59:8a:5b:66:9a:62:79:d6:7a:df:97:98:a4:56:a9:
                    a8:9a:e3:ef:07:ea:78:be:0a:de:56:4d:74:bd:0b:
                    2c:87:43:9b:73:e1:d7:5f:6b:8e:32:48:bb:ae:ed:
                    7a:3b:85:c0:e6:89:c3:23:85:0b:a7:34:7b:98:bd:
                    89:58:df:0f:56:a6:d0:69:3e:f7:ac:58:bc:93:9e:
                    2b:dd:73:e3:8c:e2:77:16:c4:ec:bf:95:7d:d0:5b:
                    db:72:06:63:d6:0c:6a:33:11:3d:26:a9:e4:98:11:
                    ac:ac:38:9e:b3:b7:37:fa:52:16:9f:3b:46:86:3c:
                    c8:3a:be:30:6b:cf:a1:a5:d9:6d:d5:fb:23:15:7f:
                    63:79:f7:08:e7:29:03:d7:c2:08:4a:22:d6:b0:2d:
                    f9:1b:3e:24:4d:3a:b0:c1:eb:8d:c1:e8:85:21:bf:
                    62:54:96:82:48:90:bb:10:3d:8f:10:7e:6e:b9:00:
                    ca:c3:2f:d8:bc:3d:4a:61:38:0c:08:53:b1:fa:80:
                    a5:98:0d:79:8f:c0:3a:cc:be:8f:6f:81:30:c6:44:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:69:0C:9E:B7:B5:DD:61:8B:37:CC:8E:FF:D0:11:67:3C:B0:2F
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/UU5pDJ63td1hizfMjv_QEWc8sC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.176.0/24
                IPv6:
                  2a0a:4540:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:eb:d7:25:dd:bd:6f:d5:d9:e0:9d:7c:3d:f0:34:05:52:
         75:68:99:17:b0:0d:dd:15:19:fb:13:99:7c:b0:c7:a1:1e:e9:
         85:96:a2:c9:d4:e2:42:41:df:f9:28:4f:b4:84:4c:73:7e:8c:
         b5:9b:14:94:cf:e9:d4:9b:bb:dd:e3:a5:8f:dd:34:c4:3c:a5:
         85:19:e8:9b:d8:1e:30:bc:ab:95:a2:54:44:d4:83:87:38:82:
         24:aa:7f:ae:75:7a:94:78:16:09:a5:68:04:20:e7:50:c6:3d:
         3f:e4:53:5e:9b:c3:b2:42:a1:4f:fa:97:44:26:d6:21:09:ad:
         02:7a:92:ee:a6:52:e3:79:fb:6b:ac:8f:cb:2b:ef:e0:a4:ae:
         68:43:a2:1b:96:39:8f:aa:e4:24:40:53:7c:08:33:78:fa:3a:
         3d:dc:95:b3:53:44:3b:4a:13:72:41:d4:69:da:df:56:c0:05:
         2a:e1:38:2f:68:96:a8:4d:50:79:a8:d6:4d:05:5c:89:a3:4e:
         2a:70:1b:ec:ca:92:c9:29:50:9d:75:4d:8e:94:29:0e:dc:e6:
         b7:e0:8a:44:71:26:e4:cb:42:ae:de:4d:ec:67:01:70:14:4e:
         b6:dd:43:54:7a:59:5b:be:a1:87:50:74:12:71:11:7d:dc:7c:
         a4:a7:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----