Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/WmTPf-63XBXFCHtiJJ013THvig8.roa
File:                     WmTPf-63XBXFCHtiJJ013THvig8.roa (raw, json)
Hash identifier:          WLiOF3DO5/seKwMjdH9UDp3M3c+7whiUFd9SEEYvnpk=
Subject key identifier:   5A:64:CF:7F:EE:B7:5C:15:C5:08:7B:62:24:9D:35:DD:31:EF:8A:0F
Certificate issuer:       /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial:       0956C15D
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/WmTPf-63XBXFCHtiJJ013THvig8.roa
Signing time:             Sat 01 Jan 2022 08:03:03 +0000
ROA not before:           Sat 01 Jan 2022 08:03:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39587
IP address blocks:        147.78.236.0/23 maxlen: 23
                          2a0f:2980::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156680541 (0x956c15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
        Validity
            Not Before: Jan  1 08:03:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a64cf7feeb75c15c5087b62249d35dd31ef8a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:10:ff:ea:2d:0a:ff:71:97:f8:6c:4f:47:
                    ab:35:9f:cb:c8:e0:e3:1f:06:87:5e:41:ec:83:e0:
                    b5:60:27:99:16:fd:d5:84:3b:b1:79:8a:5c:7f:35:
                    2e:47:89:38:66:9a:70:16:56:b8:e0:a4:84:03:df:
                    a8:c9:93:75:d2:30:44:73:2d:37:13:6f:2c:e4:ff:
                    24:a5:ae:40:a8:66:87:19:b8:63:b6:f5:9f:19:4f:
                    c7:ac:5a:7c:fa:81:79:6a:a2:23:38:55:7c:d7:2d:
                    04:82:89:00:5b:68:35:d2:08:e6:13:d5:e0:fb:48:
                    13:e8:66:cb:d8:ad:c7:10:4a:e0:d1:6e:f1:fd:80:
                    54:a1:32:b0:f9:86:4b:5d:c1:f5:27:44:30:14:11:
                    71:fa:4f:9f:54:b4:44:d3:00:a8:c6:81:1c:f3:9f:
                    35:6d:79:0d:e3:43:1f:fa:5e:74:0c:7a:33:64:3d:
                    5e:18:fc:b6:a0:0e:14:2d:45:0f:b0:24:bc:fd:02:
                    63:65:ec:b6:7a:bc:00:eb:6b:ae:4e:f2:e9:de:9a:
                    b2:d4:9c:15:59:1a:09:c6:dc:ed:e8:7f:65:9c:49:
                    e0:5b:63:fb:d0:45:2b:db:d1:55:7e:3b:18:6a:fe:
                    55:05:16:f2:ae:c9:a3:b7:f4:20:91:ae:04:74:a0:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:64:CF:7F:EE:B7:5C:15:C5:08:7B:62:24:9D:35:DD:31:EF:8A:0F
            X509v3 Authority Key Identifier:
                keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/WmTPf-63XBXFCHtiJJ013THvig8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.236.0/23
                IPv6:
                  2a0f:2980::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:02:3e:e8:ab:86:bc:8a:70:75:69:a1:32:5b:93:a5:c4:37:
         9f:74:76:01:b2:4e:2a:ab:27:4b:dd:10:16:fc:01:04:a6:5a:
         41:60:c3:bb:e4:dd:96:a7:84:e1:d9:96:7e:d0:af:22:0c:97:
         a9:c7:d7:1e:18:5d:9c:a8:b8:86:13:22:2e:5a:7e:52:19:6c:
         96:e9:6c:67:fa:57:d8:d8:12:54:c2:5f:ef:6d:2f:9e:66:74:
         b1:38:0e:d7:37:ca:bc:54:26:ad:e2:e0:18:c1:6d:a9:44:32:
         46:c9:e7:85:21:d3:74:eb:4e:28:b6:c2:90:28:5c:75:fe:3d:
         1b:73:96:8a:ee:65:d6:c8:a4:ca:73:64:71:4a:4b:38:ab:ac:
         61:61:19:5e:b8:3e:46:39:12:2c:5c:12:06:9d:89:62:0c:2d:
         a1:51:13:06:02:6c:06:dd:0d:63:02:f1:07:af:23:ff:e9:b2:
         53:2d:b7:fb:c2:2f:d1:59:62:3e:12:34:bb:c7:14:f0:8b:db:
         aa:48:6e:2f:3f:0a:cf:09:7c:e5:7e:e8:bb:99:68:0c:a5:98:
         9c:a1:4b:83:3b:ed:4e:b8:cd:35:aa:f8:80:88:bc:c3:3c:e3:
         a5:8b:45:9e:b8:92:3f:43:e5:6e:3a:04:52:9b:b0:b0:7d:6e:
         a5:44:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----