Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/bV76x1kajAVqKP3TdfSAq3Un44U.roa
File:                     bV76x1kajAVqKP3TdfSAq3Un44U.roa (raw, json)
Hash identifier:          mDBzsM9F1AoLqbCkZdQ4I/VmFqObNO7NgrttduiYtTc=
Subject key identifier:   6D:5E:FA:C7:59:1A:8C:05:6A:28:FD:D3:75:F4:80:AB:75:27:E3:85
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       0181D1B10F8359D1B5DA26D1183ED7C53626
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/bV76x1kajAVqKP3TdfSAq3Un44U.roa
Signing time:             Wed 06 Jul 2022 04:07:30 +0000
ROA not before:           Wed 06 Jul 2022 04:07:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59432
IP address blocks:        193.108.58.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d1:b1:0f:83:59:d1:b5:da:26:d1:18:3e:d7:c5:36:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Jul  6 04:07:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d5efac7591a8c056a28fdd375f480ab7527e385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:63:41:15:45:0f:84:76:2b:34:b1:a7:da:
                    ea:aa:41:a5:c8:3e:f6:96:b0:4e:c3:2e:52:cc:47:
                    c7:93:37:93:88:d6:1f:38:50:5e:8e:0f:0c:74:3f:
                    14:c5:f8:1d:d3:78:6c:72:14:e4:8f:e1:ac:16:e6:
                    ae:9b:82:d6:7d:95:8e:50:1f:d9:28:0f:2c:1d:6b:
                    02:b5:56:85:4c:41:4a:92:0e:55:fb:ef:3c:3b:24:
                    4d:56:11:8f:89:5b:16:ea:10:c4:02:cb:98:1b:6b:
                    a5:df:e4:37:22:ad:60:de:c7:63:ab:99:6c:0f:05:
                    b9:8c:68:e4:f9:ba:a0:bb:b9:a6:4f:2c:27:d8:8e:
                    ff:72:8e:3d:60:e7:f4:e2:2d:ac:3c:46:5d:b0:bb:
                    d7:ae:8b:70:5e:9e:3e:15:e5:69:03:7f:11:c5:34:
                    02:0a:ea:93:39:af:8f:04:e4:75:9c:e7:f7:42:33:
                    58:7c:fd:9d:63:43:0b:20:c6:32:60:21:83:dd:3f:
                    00:52:38:7b:ef:b4:a5:f6:21:ad:a9:0a:59:7a:c6:
                    f8:e9:89:83:84:46:1c:41:69:82:5e:7b:be:00:e0:
                    a5:d7:32:5f:8e:fe:27:51:2a:b6:0a:4c:24:2d:e2:
                    bf:60:f7:df:d3:4e:7b:e0:c5:ec:89:5c:0e:71:fe:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5E:FA:C7:59:1A:8C:05:6A:28:FD:D3:75:F4:80:AB:75:27:E3:85
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/bV76x1kajAVqKP3TdfSAq3Un44U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:fd:c9:cb:14:a9:65:cd:70:d5:ec:d8:33:c6:96:25:89:92:
         8e:1a:89:61:2a:ec:b4:fc:6c:39:df:cc:8d:59:a8:19:37:06:
         20:27:02:73:90:67:76:44:d6:78:65:87:c5:2d:23:36:22:b6:
         6b:d8:6c:dc:7a:83:01:7c:46:ed:0b:5b:53:a0:2f:18:e3:b6:
         45:fe:52:11:a2:26:d2:16:cc:d7:1a:7c:bc:08:22:5c:a7:3c:
         ac:ba:24:54:ea:e7:e3:87:07:7c:12:64:21:d4:71:d6:58:38:
         b6:d0:e6:ee:8e:98:8c:e2:5c:26:a8:9f:ad:38:65:ce:3c:14:
         b2:ac:b6:9c:d3:8d:73:ff:75:e6:7a:13:9d:40:b6:d6:ce:78:
         18:cf:25:db:cb:46:6d:bd:27:00:91:dd:51:70:ba:8f:a4:7d:
         1c:1e:e8:dc:86:0f:32:f2:e1:85:0e:11:05:0f:5d:9d:73:d4:
         0d:ad:b8:f8:c4:1d:e0:53:7f:01:3d:e1:1e:b0:3b:d9:c9:71:
         bd:cf:f9:4c:d0:ce:b3:85:68:9e:34:84:de:99:1f:b4:a3:2c:
         b3:60:d3:f6:fb:86:e8:ba:44:28:c9:b4:b1:bf:e6:04:79:b1:
         7f:ac:79:0e:c4:34:66:f4:98:d6:a2:bf:f4:0f:23:ad:e1:a4:
         66:eb:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----