Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Vlcr-vr4tgQA-Ke8pQ5fwd-NIq4.roa
File:                     Vlcr-vr4tgQA-Ke8pQ5fwd-NIq4.roa (raw, json)
Hash identifier:          H4UpdHJnz8wTy7mwxS7bFJ5YHa4UhMuw8wDNWX9Pwd8=
Subject key identifier:   56:57:2B:FA:FA:F8:B6:04:00:F8:A7:BC:A5:0E:5F:C1:DF:8D:22:AE
Certificate issuer:       /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial:       0183D19268684AF89E37C412EB9772745CC1
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Vlcr-vr4tgQA-Ke8pQ5fwd-NIq4.roa
Signing time:             Thu 13 Oct 2022 13:39:36 +0000
ROA not before:           Thu 13 Oct 2022 13:39:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        64.137.80.0/22 maxlen: 22
                          64.137.96.0/22 maxlen: 22
                          64.137.94.0/23 maxlen: 23
                          64.137.92.0/23 maxlen: 23
                          64.137.100.0/23 maxlen: 23
                          64.137.14.0/23 maxlen: 23
                          64.137.18.0/23 maxlen: 23
                          104.143.232.0/21 maxlen: 21
                          64.137.42.0/23 maxlen: 23
                          104.143.240.0/22 maxlen: 22
                          64.137.48.0/23 maxlen: 23
                          64.137.58.0/23 maxlen: 23
                          64.137.60.0/22 maxlen: 22
                          64.137.10.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d1:92:68:68:4a:f8:9e:37:c4:12:eb:97:72:74:5c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
        Validity
            Not Before: Oct 13 13:39:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56572bfafaf8b60400f8a7bca50e5fc1df8d22ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:dc:48:0b:6d:00:ee:c3:b7:7a:58:66:37:
                    56:c4:72:87:87:8f:f9:73:be:48:cc:e0:25:4f:09:
                    27:ab:b8:52:01:11:cf:7d:fe:e7:a6:46:f5:ea:35:
                    26:c5:a7:1d:65:32:b9:b3:91:4b:dc:d0:06:8d:17:
                    e5:31:3e:07:bb:67:f4:18:9b:97:ec:1b:02:9f:92:
                    74:15:4c:dc:83:27:56:b8:76:53:d5:bc:92:be:47:
                    d2:a8:38:0c:d8:2d:e2:86:eb:b5:71:ea:6e:81:f7:
                    0a:d7:c0:11:a1:e0:61:25:ae:04:0e:f9:3e:5d:dc:
                    bf:76:f5:ce:e8:98:03:77:8c:fd:70:39:0a:4e:12:
                    c1:0c:83:9e:12:aa:e6:98:95:18:67:c0:68:6c:c9:
                    16:b3:39:12:96:48:2a:f2:0c:a1:cd:34:a1:7e:e6:
                    e8:0a:d7:62:1e:0f:9e:1f:2e:cb:ec:01:83:a8:5a:
                    3a:db:0e:6d:5a:4c:65:e6:9f:92:79:66:d3:f3:cc:
                    02:85:fe:8a:6e:a9:b5:ea:f3:de:3e:14:39:13:7b:
                    b5:e4:af:69:9a:3b:c0:3b:61:3e:7e:1a:46:9d:46:
                    eb:93:41:c0:dc:43:1a:36:bc:2f:4d:7e:19:5d:14:
                    e8:a9:cb:2b:de:09:fe:ff:87:8d:6e:7f:46:05:8a:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:57:2B:FA:FA:F8:B6:04:00:F8:A7:BC:A5:0E:5F:C1:DF:8D:22:AE
            X509v3 Authority Key Identifier:
                keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Vlcr-vr4tgQA-Ke8pQ5fwd-NIq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.137.10.0/23
                  64.137.14.0/23
                  64.137.18.0/23
                  64.137.42.0/23
                  64.137.48.0/23
                  64.137.58.0-64.137.63.255
                  64.137.80.0/22
                  64.137.92.0-64.137.101.255
                  104.143.232.0-104.143.243.255

    Signature Algorithm: sha256WithRSAEncryption
         40:32:4a:86:b1:42:4b:8c:4b:fc:45:de:14:2b:92:04:ff:ec:
         d6:53:f8:36:c1:0f:f5:29:b6:b4:3a:dd:e9:b3:46:bd:64:b5:
         de:30:70:03:dd:db:82:e1:f8:c6:4b:76:6c:75:9e:65:4d:55:
         61:0c:70:28:a8:a0:cd:47:4f:b6:88:56:c7:ed:11:01:c3:96:
         44:c0:99:1f:43:89:4c:c7:7f:e0:31:5e:49:14:2f:0f:28:19:
         76:ee:99:ed:13:a4:14:3f:3b:a9:e1:fd:ac:d1:bd:f4:4b:5f:
         2f:d7:d8:a4:63:af:38:6a:0e:1b:ac:bd:49:1c:a3:d4:9d:97:
         44:8b:f7:99:25:bb:4a:ad:65:bc:2a:ed:fe:fe:74:f7:85:09:
         6b:2d:f3:20:5f:54:5c:ff:c6:3d:86:36:87:30:ce:e9:3d:7d:
         c5:98:89:b4:fe:8b:10:f1:61:68:e2:bb:98:4e:7f:69:9e:dd:
         01:ce:f1:3e:90:94:18:80:8f:cc:a6:f7:34:50:7d:9f:f2:06:
         c1:7c:00:68:82:aa:c1:53:58:6c:a7:b0:58:f7:77:76:f8:60:
         78:8c:46:4b:b0:a3:35:e3:01:b4:41:3d:42:37:f7:98:2b:b1:
         a2:2e:3f:a7:11:ed:19:03:28:f6:58:8e:50:d3:45:cf:e4:bc:
         0c:a7:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----