Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9HXd5ef5vqizZ3auQUxKQ8j-zcQ.roa
File:                     9HXd5ef5vqizZ3auQUxKQ8j-zcQ.roa (raw, json)
Hash identifier:          Ym7ErudWWNuXAWmumz2XC/Kwdv3aqZG1RokXISDbPEM=
Subject key identifier:   F4:75:DD:E5:E7:F9:BE:A8:B3:67:76:AE:41:4C:4A:43:C8:FE:CD:C4
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       03BEF6A3
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9HXd5ef5vqizZ3auQUxKQ8j-zcQ.roa
Signing time:             Fri 13 May 2022 12:33:40 +0000
ROA not before:           Fri 13 May 2022 12:33:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     262287
IP address blocks:        94.139.224.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62846627 (0x3bef6a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: May 13 12:33:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f475dde5e7f9bea8b36776ae414c4a43c8fecdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:5c:01:a3:29:29:62:11:dc:23:a0:91:44:
                    1f:3b:14:5e:3a:0b:d7:27:f1:0a:84:ab:21:ed:65:
                    32:1c:39:6e:95:5d:7f:8f:e2:99:c3:74:c3:6d:28:
                    51:92:42:5c:19:b0:5f:84:c9:03:3a:d7:9c:b4:2a:
                    90:cb:03:a3:1d:51:6d:54:72:5a:b6:19:d2:cd:c2:
                    02:5a:e4:ec:d7:9d:af:56:a9:dc:20:2e:dd:3d:7e:
                    fc:6b:ed:bb:a9:76:c9:ca:9c:7e:67:f3:86:32:61:
                    a4:97:78:c3:0d:a6:0a:65:b4:73:42:6d:92:96:8b:
                    22:16:d2:b7:6e:bd:96:24:f7:20:a1:e4:c0:0d:a2:
                    f5:92:d3:da:dc:c5:19:be:39:77:77:29:ec:3a:f4:
                    90:65:81:ef:8f:2b:ed:44:f4:41:b5:89:2e:85:7d:
                    12:5e:bc:cf:cf:86:27:58:8d:50:f7:88:fc:a8:76:
                    b3:66:cb:2d:5c:35:f2:f3:c3:0f:27:29:0d:18:0c:
                    37:83:69:65:30:ac:9a:b8:e2:a7:d6:a9:d0:d4:09:
                    d2:67:af:19:27:6d:7b:68:43:0b:43:35:54:bc:80:
                    a2:29:f3:58:56:fa:93:68:35:60:61:9c:c4:7e:36:
                    56:ad:0b:41:f9:f7:ee:db:56:f7:2f:fc:54:f8:23:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:75:DD:E5:E7:F9:BE:A8:B3:67:76:AE:41:4C:4A:43:C8:FE:CD:C4
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9HXd5ef5vqizZ3auQUxKQ8j-zcQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.139.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:5c:7e:69:6d:6a:b6:1c:8a:2f:e4:0a:2a:4b:63:e7:4c:c1:
         57:d9:9e:0d:eb:d5:fd:fb:d3:a7:7e:54:84:49:41:f3:7d:89:
         06:47:69:5e:0f:6c:d0:67:77:78:0f:d5:72:b4:1d:d9:98:04:
         df:16:3a:28:5c:61:e8:9e:a5:31:93:ef:99:ed:18:ce:91:88:
         58:ae:bc:1d:5f:b9:40:c0:3e:0d:1a:5d:c0:e0:35:6c:c5:03:
         6e:bd:f6:14:05:f6:ba:b4:ae:46:9b:e2:b6:a8:eb:56:ef:62:
         6e:00:14:a7:cc:53:89:8b:48:09:86:94:03:60:33:b2:47:65:
         a6:84:14:a9:72:21:70:d2:39:cf:93:64:d3:c1:44:d4:d5:c0:
         37:ff:1a:fd:d3:3b:5f:17:95:b9:27:e0:df:e0:f2:3a:28:a8:
         db:90:ff:6f:e3:fa:93:a1:e3:14:7f:58:b6:7a:30:d3:69:04:
         cb:0d:dd:72:f7:b8:e9:46:dc:c5:16:d8:3e:d4:27:ea:2c:ea:
         e8:50:a3:4e:79:76:f8:5e:14:f9:46:c6:d8:4d:b3:16:e1:c9:
         3f:61:4f:89:5b:7b:2c:dd:8f:d8:da:fa:93:14:38:8a:18:c4:
         47:f4:a4:93:14:7c:0f:82:c4:28:10:39:5c:89:3f:4b:e3:a1:
         a6:bf:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----