Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/r82sTFYGguMLAnxYSpQXUD_v5kE.roa
File:                     r82sTFYGguMLAnxYSpQXUD_v5kE.roa (raw, json)
Hash identifier:          jLyhecySxp+WPQ3cUhZhXZ7S/Jw0d431145pUjLJi10=
Subject key identifier:   AF:CD:AC:4C:56:06:82:E3:0B:02:7C:58:4A:94:17:50:3F:EF:E6:41
Certificate issuer:       /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial:       036FF131
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/r82sTFYGguMLAnxYSpQXUD_v5kE.roa
Signing time:             Sat 01 Jan 2022 14:54:36 +0000
ROA not before:           Sat 01 Jan 2022 14:54:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212636
IP address blocks:        193.23.52.0/24 maxlen: 24
                          2a10:5ac0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57667889 (0x36ff131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
        Validity
            Not Before: Jan  1 14:54:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=afcdac4c560682e30b027c584a9417503fefe641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:11:76:5a:84:44:90:03:fd:e2:e0:88:23:
                    27:37:8e:87:9d:96:2e:27:94:ee:77:50:93:86:d3:
                    11:df:18:69:fb:fe:18:4b:e4:09:7b:e1:6e:12:a9:
                    1d:66:0c:c5:fb:ec:58:86:f1:1c:f5:ea:3c:3d:4e:
                    df:6d:85:94:43:7d:12:bb:ad:34:f9:ab:8f:95:80:
                    38:7f:49:f3:53:35:e9:20:1b:ea:f4:99:0f:1f:55:
                    15:b9:d9:7e:65:e0:c8:5a:8f:7a:3b:00:da:f1:0e:
                    ae:8c:b0:df:16:f3:ca:b3:4e:a8:96:0e:40:21:fd:
                    38:bf:1b:6a:16:9d:2b:27:1e:ab:36:42:ca:c7:cf:
                    98:9c:0e:dc:a4:1a:92:5c:89:59:99:8d:02:b2:e6:
                    8d:4c:06:49:96:21:8d:f4:57:e7:e1:52:da:9a:cf:
                    d3:01:fd:15:6a:b5:1d:02:69:b7:1d:48:0c:1f:21:
                    6b:59:15:05:7b:dc:f7:47:8c:29:8c:9f:72:66:16:
                    9a:25:3a:98:2e:47:15:7f:eb:60:98:4a:40:63:fd:
                    fc:38:16:5d:3d:b4:ce:31:fb:dd:00:49:a6:1d:31:
                    ef:59:84:93:3b:2e:89:8f:cf:ef:0b:45:5f:0e:ea:
                    7b:2a:35:d3:06:50:b0:73:e0:10:92:bd:c1:09:65:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:AC:4C:56:06:82:E3:0B:02:7C:58:4A:94:17:50:3F:EF:E6:41
            X509v3 Authority Key Identifier:
                keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/r82sTFYGguMLAnxYSpQXUD_v5kE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.52.0/24
                IPv6:
                  2a10:5ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:9f:43:3b:15:7e:b8:4a:d2:4f:27:9b:d5:93:1f:a1:92:
         e4:94:53:ad:20:ae:27:9f:4a:7e:d2:3c:b7:44:cb:ee:73:9f:
         d6:c7:d9:2b:82:85:af:6c:ac:f4:55:35:43:3d:f9:73:b9:35:
         88:f7:a7:ff:e8:eb:f6:7a:55:04:53:29:71:e7:3c:f8:9b:f4:
         40:8b:77:07:a6:44:4b:21:97:ee:73:18:1e:86:88:fa:40:8a:
         d3:e3:10:7e:6c:2b:b2:be:88:87:eb:4c:15:ed:fb:32:06:67:
         e1:c8:9a:57:84:76:98:86:e9:4f:52:00:c9:1e:95:21:b7:cc:
         3b:19:73:3c:75:fb:44:82:4e:9d:e6:bc:47:92:5a:c5:bf:34:
         89:55:aa:07:a7:6b:ff:dd:50:5b:f6:85:2d:d8:82:34:ff:dc:
         0a:32:b2:3f:5d:14:b5:c4:d6:dc:7e:b6:1c:ea:83:21:8f:2e:
         82:90:d2:ee:cf:2a:1c:30:2f:34:0e:1c:41:ec:88:dd:d7:19:
         5d:d1:84:50:e1:df:e8:e1:1f:65:a5:f1:b7:78:62:20:62:ef:
         2d:59:48:99:56:5f:7b:b6:f9:7b:c1:d3:8f:34:ec:0b:a2:cf:
         5f:b2:95:e2:10:d3:f3:fb:9f:4a:bd:21:b7:5f:89:49:52:03:
         93:fc:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----