Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/VGLKN06ny0if93woLdDjoGi7GFk.roa
File:                     VGLKN06ny0if93woLdDjoGi7GFk.roa (raw, json)
Hash identifier:          6MY0tEDLWvds7IZtNpKu97R4Pz8F/0VbeMFYywFpKiU=
Subject key identifier:   54:62:CA:37:4E:A7:CB:48:9F:F7:7C:28:2D:D0:E3:A0:68:BB:18:59
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       058E7828
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/VGLKN06ny0if93woLdDjoGi7GFk.roa
Signing time:             Sat 01 Jan 2022 04:53:05 +0000
ROA not before:           Sat 01 Jan 2022 04:53:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        194.50.176.0/24 maxlen: 24
                          2a0a:4540:10::/48 maxlen: 48
                          2a0a:4540:1000::/48 maxlen: 48
                          2a0a:4540:220::/48 maxlen: 48
                          2a0a:4540:11::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93222952 (0x58e7828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Jan  1 04:53:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5462ca374ea7cb489ff77c282dd0e3a068bb1859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:4c:f8:63:9b:b2:46:de:6f:e1:2d:bf:9a:
                    f0:99:24:7a:4d:53:52:26:84:8e:85:65:1d:ab:81:
                    b1:46:bf:a9:13:4c:e0:8f:48:79:b5:7b:63:10:72:
                    57:7d:a7:e5:d6:46:94:39:1c:12:6c:76:16:fe:dd:
                    82:35:d5:b4:b1:d5:34:2e:f1:1e:8d:f8:64:40:50:
                    b8:94:f6:a4:a9:18:1c:1d:35:29:9b:99:6a:65:f5:
                    3a:ff:47:88:32:7d:26:15:2d:23:d5:2a:08:ce:d9:
                    47:a1:6f:39:c3:93:f7:e2:af:3c:46:4c:84:d4:d6:
                    1a:3a:77:8a:1c:4c:d5:67:2a:63:49:ce:d6:f4:5b:
                    e0:e8:a4:f8:fb:14:48:4e:86:d7:8d:fb:a2:8a:97:
                    75:f4:66:24:87:75:a2:de:9d:f7:af:d3:65:47:bb:
                    fc:2b:09:e6:35:95:34:4f:ad:76:b0:80:c7:38:99:
                    80:24:04:16:4e:4c:5a:9c:ed:85:cc:aa:bb:eb:0a:
                    36:22:6d:22:4a:62:5d:a1:d3:64:8f:9f:28:e8:b5:
                    63:4d:85:ca:0e:97:6b:63:e7:36:d2:12:97:50:38:
                    f7:59:6a:99:48:46:fb:09:28:60:a9:20:86:d9:69:
                    89:40:3b:6f:73:cd:f0:8b:6a:30:dd:59:6e:7f:44:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:62:CA:37:4E:A7:CB:48:9F:F7:7C:28:2D:D0:E3:A0:68:BB:18:59
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/VGLKN06ny0if93woLdDjoGi7GFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.176.0/24
                IPv6:
                  2a0a:4540:10::/47
                  2a0a:4540:220::/48
                  2a0a:4540:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:bc:3a:af:c7:12:1d:53:ff:0a:6a:16:b0:b6:a0:44:b3:d1:
         0f:0b:fb:cb:9b:fa:9a:66:f5:ef:f7:c5:ff:1c:39:cf:7a:ca:
         81:c4:67:88:bc:b4:62:b5:5e:f3:a6:21:97:cf:71:7e:51:f5:
         1d:21:68:2b:a3:5a:11:f8:6c:2d:a1:6e:0e:5f:71:74:42:ad:
         bd:ff:3d:5a:47:88:5b:2b:f8:62:89:ff:c0:49:30:8e:2f:51:
         74:f4:d2:00:99:3f:33:03:c0:84:14:44:b6:54:59:a6:b7:6c:
         ee:22:f6:cb:15:9b:ce:64:07:fe:63:49:81:03:43:94:86:ae:
         74:59:a2:02:ee:e5:69:7d:2f:c9:bb:5b:b1:f0:e5:5a:04:9f:
         88:fa:2d:4b:92:89:df:3d:cd:1f:0d:79:56:f2:88:10:52:17:
         6a:eb:03:a4:3b:d8:1b:22:88:ae:e0:9f:74:ac:19:5c:a8:68:
         55:a2:bd:17:3d:8c:2a:e1:74:ec:5f:84:2a:bf:91:e6:56:82:
         68:2f:2a:e6:b2:8b:76:a3:de:d2:58:cd:cd:46:29:8f:7d:83:
         6f:3f:cd:6d:39:5a:a7:c4:e9:21:ec:25:89:da:07:ed:36:24:
         c0:c8:f2:3d:2f:b9:56:6b:63:cd:89:54:7a:ec:50:04:ef:72:
         88:19:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----