Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/SdeNc2EYKD5zyq6paLtJ2o7jQqo.roa
File:                     SdeNc2EYKD5zyq6paLtJ2o7jQqo.roa (raw, json)
Hash identifier:          MpUZbQsdMT0LbLhGNrKRiP96XyppyLVAV+nJwO5jmq0=
Subject key identifier:   49:D7:8D:73:61:18:28:3E:73:CA:AE:A9:68:BB:49:DA:8E:E3:42:AA
Certificate issuer:       /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial:       01821597DBD138857236974154A511233963
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/SdeNc2EYKD5zyq6paLtJ2o7jQqo.roa
Signing time:             Tue 19 Jul 2022 08:34:09 +0000
ROA not before:           Tue 19 Jul 2022 08:34:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43462
IP address blocks:        193.46.75.0/24 maxlen: 24
                          2001:67c:1fc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:15:97:db:d1:38:85:72:36:97:41:54:a5:11:23:39:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
        Validity
            Not Before: Jul 19 08:34:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49d78d736118283e73caaea968bb49da8ee342aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:0d:85:8d:aa:a0:6d:3f:fe:e5:cc:10:3c:
                    17:55:93:ee:53:4f:03:25:73:63:67:2e:b0:a9:25:
                    20:27:ee:a9:6d:31:86:f2:c7:a8:95:97:d5:74:c6:
                    5f:1b:c9:7c:0d:b6:f7:53:9a:ee:24:90:08:a5:72:
                    ad:07:99:f0:40:fd:3a:37:68:10:81:3b:b4:52:78:
                    95:46:4e:bd:69:f7:9c:8e:bf:fd:4c:0e:b8:98:ec:
                    87:8b:07:5d:df:89:f3:13:7c:b4:b7:d6:07:3e:b4:
                    91:5f:e3:5c:13:0f:2f:df:fc:04:14:52:9c:8c:30:
                    67:f8:87:ba:01:d2:5a:8b:b3:3c:82:f1:02:d7:c8:
                    1f:e6:4c:32:d8:dc:67:de:e0:b7:b8:8f:ef:8f:ca:
                    c2:d1:ee:c7:35:38:3f:79:03:5c:db:4b:7d:fc:93:
                    2c:05:a8:f1:99:00:d7:06:54:f5:1a:8c:5b:e8:6c:
                    d9:98:98:df:82:dc:20:93:21:e2:57:2a:94:00:8b:
                    ca:65:99:a8:31:60:79:b4:42:b6:7d:40:7a:6c:25:
                    a5:f7:f3:03:12:b7:35:8c:f2:0e:9d:47:f6:fa:ce:
                    5f:a8:77:57:94:cb:45:9b:5a:ae:bc:6f:99:87:8c:
                    b7:f3:57:7b:26:98:1f:79:22:39:7d:c7:bb:3a:d4:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D7:8D:73:61:18:28:3E:73:CA:AE:A9:68:BB:49:DA:8E:E3:42:AA
            X509v3 Authority Key Identifier:
                keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/SdeNc2EYKD5zyq6paLtJ2o7jQqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.75.0/24
                IPv6:
                  2001:67c:1fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:26:5d:d4:22:9f:8a:2e:c3:9e:67:a5:ac:25:7a:63:5c:dd:
         9b:2e:74:2c:f7:07:29:24:ce:59:c8:de:94:47:f9:12:c4:4d:
         ff:08:a9:73:7e:ee:46:84:4b:a6:34:16:cb:90:d8:80:e5:db:
         d3:38:1e:fc:e6:44:ed:b6:65:da:3b:f7:aa:5e:2c:2b:3d:70:
         02:32:7e:a6:db:70:32:a5:ae:92:f5:32:ad:b3:9b:9d:d8:9f:
         a1:fb:30:f4:a5:93:c7:75:44:c0:dd:8a:01:cf:85:e9:7a:d0:
         e0:a6:43:ec:e0:9e:72:8c:f4:90:4a:c9:46:93:4f:a1:54:83:
         78:b6:4d:39:61:f1:6b:39:e5:fd:2f:05:82:ff:99:19:1c:9a:
         67:63:61:34:7f:ba:89:68:13:9e:10:f3:8d:95:b0:ef:96:54:
         78:cb:94:0c:a0:56:f8:63:1f:97:50:26:5b:5a:3d:08:d3:26:
         9d:42:44:f7:20:05:d2:82:f7:40:e1:6a:8b:b1:ee:eb:ed:2a:
         1c:41:1c:e5:c3:7b:50:9a:91:32:bd:16:ed:d2:47:64:f5:d0:
         92:39:e4:ef:fe:0c:26:17:e8:a7:d1:e1:e5:32:8c:84:6c:b3:
         1e:7a:38:2f:4d:69:c5:16:a5:2a:9d:67:12:b9:f3:86:b1:0f:
         9c:d7:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----