Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa
File:                     ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa (raw, json)
Hash identifier:          BEBc24bD3cGf9tpg2lzPrTUb9LjxKGOGHAKRsHx4IIc=
Subject key identifier:   13:14:30:B6:BE:11:6F:75:3F:9B:B8:7D:65:E6:3F:96:56:31:67:86
Certificate issuer:       /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial:       194AC6F7
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa
Signing time:             Mon 14 Mar 2022 09:14:09 +0000
ROA not before:           Mon 14 Mar 2022 09:14:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12975
IP address blocks:        195.114.28.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424330999 (0x194ac6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
        Validity
            Not Before: Mar 14 09:14:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=131430b6be116f753f9bb87d65e63f9656316786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:bb:dd:cd:70:77:8a:90:e3:f2:33:32:24:
                    4b:9e:77:d3:53:85:a9:94:bc:37:1a:5a:91:fb:b0:
                    83:ff:09:76:b8:51:b5:c6:cf:eb:19:b5:55:6a:9e:
                    fd:00:82:61:2a:ba:46:12:27:aa:0b:1e:3e:87:7d:
                    bc:ec:4c:cd:3a:d9:b9:e1:a9:60:53:78:4c:a9:fd:
                    40:dc:f7:b8:19:2c:fb:da:2c:ce:b7:50:44:f7:89:
                    d3:cd:4a:ac:f8:83:9e:15:be:3a:2c:cb:09:9a:f7:
                    a5:82:4c:42:bc:b6:73:f1:ea:6e:1d:b7:bd:08:83:
                    a0:7c:16:5d:b1:65:0f:25:cc:76:be:a1:57:6b:69:
                    78:03:49:1f:dd:d3:99:ec:de:b4:fa:ce:55:de:64:
                    5d:07:e9:4c:cd:40:b2:79:18:d6:66:77:fa:09:87:
                    c4:e4:7f:48:0f:8c:ec:17:1a:6a:78:91:0a:8d:b1:
                    a1:14:c8:99:1e:4e:31:9f:ed:69:dc:9b:10:b1:fa:
                    76:23:dc:8d:eb:5b:f8:4f:db:ab:f9:8b:6d:64:d9:
                    58:89:a7:b2:35:8d:95:5e:b9:e1:0a:96:bb:2f:a1:
                    4f:70:38:9b:29:9f:27:2d:68:a3:37:a2:13:d3:c9:
                    52:8b:db:cf:85:2d:67:8a:6c:bd:e9:d5:17:2f:49:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:30:B6:BE:11:6F:75:3F:9B:B8:7D:65:E6:3F:96:56:31:67:86
            X509v3 Authority Key Identifier:
                keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ExQwtr4Rb3U_m7h9ZeY_llYxZ4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:d6:95:ec:d8:18:e6:4d:40:1c:61:df:99:a1:53:7e:1a:72:
         45:db:8c:26:75:50:bb:49:80:32:3e:80:28:14:09:9c:4d:f1:
         be:b3:1e:77:1d:f8:bf:39:f6:d8:b4:09:f8:c6:e8:39:2b:0b:
         6f:74:36:7e:1a:10:ef:26:21:f7:13:64:f7:ed:64:4a:7b:b0:
         77:4a:7c:fb:46:c2:f5:ec:90:da:56:4b:ae:1f:fd:35:1e:b7:
         3f:3f:af:02:d7:3b:d7:04:a3:da:12:6a:9f:25:d2:8c:7a:1e:
         6e:68:42:82:21:5c:ea:38:f1:01:e0:38:d5:80:8a:53:e8:8c:
         cb:9f:7f:46:2a:f2:9c:83:e1:d6:5b:5b:07:a4:83:1a:dc:80:
         02:24:e2:3e:7f:5a:c8:f3:d4:11:d8:cc:6a:aa:9e:1c:0f:fb:
         af:eb:40:2e:f0:d7:85:d5:e5:48:da:8b:f4:ea:85:99:88:74:
         e7:e5:e2:5d:e5:43:95:f5:39:ef:03:00:cc:ab:59:8f:4e:d9:
         73:9b:f3:2e:8e:4f:7b:b2:80:c6:49:44:6e:a2:86:35:73:50:
         94:25:98:b7:7d:22:d5:b9:85:ad:e6:4d:ad:05:c2:9a:43:10:
         df:f5:14:7c:a2:14:5c:e9:1e:22:9e:e1:54:aa:a8:94:39:dd:
         18:8f:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----