Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxmVqdIPKaD3m9mrXUtcztwOfg4.roa
File:                     wxmVqdIPKaD3m9mrXUtcztwOfg4.roa (raw, json)
Hash identifier:          uDmSdK+zkY9XIaIhDOEzCVG2KmyGo/J8MTCT4dc+eB0=
Subject key identifier:   C3:19:95:A9:D2:0F:29:A0:F7:9B:D9:AB:5D:4B:5C:CE:DC:0E:7E:0E
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27BB6BBC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxmVqdIPKaD3m9mrXUtcztwOfg4.roa
Signing time:             Sat 01 Jan 2022 16:08:43 +0000
ROA not before:           Sat 01 Jan 2022 16:08:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50765
IP address blocks:        95.47.62.0/24 maxlen: 24
                          2a02:128:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666594236 (0x27bb6bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c31995a9d20f29a0f79bd9ab5d4b5ccedc0e7e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:e4:66:62:90:6f:fe:40:1d:30:92:b0:43:
                    a7:36:8e:37:be:eb:6f:4e:62:ed:db:1b:79:82:7d:
                    de:2e:41:d1:0a:7e:aa:ae:44:65:18:a3:bb:54:54:
                    79:24:b0:8f:3b:9c:62:94:4f:4b:5e:fb:bf:95:69:
                    fa:a2:24:e4:2d:96:03:10:65:d4:87:62:12:89:4e:
                    13:1a:37:2e:2d:ae:29:f0:b3:97:69:f5:b5:ff:22:
                    0f:39:e0:a4:54:02:51:e5:6e:56:2a:88:ea:53:d5:
                    ea:8a:50:dd:fa:ac:34:68:4e:d7:c1:43:20:e0:2c:
                    55:32:b3:f5:4f:8d:2f:58:0a:b4:c9:1b:e6:cd:e7:
                    81:1a:ca:59:43:92:c4:6c:d7:b5:56:af:ae:12:28:
                    1b:6a:29:2e:fe:a0:1e:b4:39:ec:d0:77:17:97:e3:
                    49:7c:89:6b:08:82:b0:4f:fc:f2:89:4b:4b:d3:87:
                    9d:01:ed:f2:77:2b:e7:40:1f:cc:e7:92:3e:63:98:
                    cb:66:62:57:94:5f:04:0e:db:79:27:41:08:ea:97:
                    39:03:31:33:51:b6:10:9c:df:d9:eb:d7:ac:aa:90:
                    ea:e9:dc:89:93:46:f1:4d:d3:33:e5:1b:d3:00:73:
                    a1:ae:a9:11:a4:1f:96:45:ea:2d:19:7c:f8:a9:e4:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:19:95:A9:D2:0F:29:A0:F7:9B:D9:AB:5D:4B:5C:CE:DC:0E:7E:0E
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxmVqdIPKaD3m9mrXUtcztwOfg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.47.62.0/24
                IPv6:
                  2a02:128:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:51:bf:dd:42:fb:49:de:02:25:ec:5d:b0:d9:d1:4f:27:34:
         4f:01:72:36:7c:da:e1:08:af:2d:53:70:f8:6e:38:aa:a8:ec:
         71:4d:fb:4b:c2:d9:59:79:36:7d:b7:bc:f3:b7:3b:7d:8e:fe:
         ae:2c:d0:3a:25:b9:b7:c8:30:7e:69:e5:e2:dd:c2:eb:b6:56:
         bc:76:4f:ee:da:eb:e7:bf:85:3c:8a:67:88:b2:7d:97:f1:e6:
         f2:09:b8:63:0b:23:46:2f:90:5b:79:cd:a1:44:c0:c4:8c:56:
         94:3f:62:79:06:ce:34:2f:d1:67:37:c6:a2:db:21:26:01:f1:
         a8:1a:c1:79:0c:26:60:32:eb:30:9d:60:9a:f1:51:95:8c:06:
         72:d8:8c:bd:35:49:ff:92:d9:1b:63:f0:51:3a:cf:4c:e3:af:
         31:97:7d:a2:cd:1f:09:64:64:a3:54:3a:a9:cf:61:23:74:e2:
         19:7f:20:ee:7b:af:73:d5:e7:9d:3b:42:92:19:fb:de:5d:ff:
         57:db:0e:9d:e6:f0:88:60:e0:0c:90:1c:b5:6f:54:38:46:d6:
         f9:7f:f9:ba:26:31:9d:59:53:f0:d9:19:4b:75:90:ac:c2:55:
         66:79:cd:a0:ef:b6:2f:ec:d5:d0:0e:89:81:8b:87:38:57:eb:
         f3:d7:42:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----