Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/EElEjp8GXE0LGlowcDQb52sIPbQ.roa
File:                     EElEjp8GXE0LGlowcDQb52sIPbQ.roa (raw, json)
Hash identifier:          S7zTjzjJ1ysWPKIagkUmGg7o+mC4sD2qGs/rlzLTEMc=
Subject key identifier:   10:49:44:8E:9F:06:5C:4D:0B:1A:5A:30:70:34:1B:E7:6B:08:3D:B4
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       126F9673
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/EElEjp8GXE0LGlowcDQb52sIPbQ.roa
Signing time:             Mon 27 Jun 2022 11:35:40 +0000
ROA not before:           Mon 27 Jun 2022 11:35:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47347
IP address blocks:        79.142.32.0/22 maxlen: 22
                          2a01:7b40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309302899 (0x126f9673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: Jun 27 11:35:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1049448e9f065c4d0b1a5a3070341be76b083db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:f8:3b:9c:5f:c0:76:98:7d:6f:46:cc:7e:
                    bb:e8:3f:5c:65:57:ba:31:2a:3f:42:49:71:09:4a:
                    0f:cb:59:92:56:2c:87:8c:0f:ad:30:61:7f:b5:5f:
                    63:5e:50:a8:c6:45:5a:6d:96:21:be:6d:d9:f3:4c:
                    ea:06:7f:19:be:a4:a1:5c:f3:08:6a:bb:8d:20:79:
                    c6:32:fd:2f:57:3a:07:d7:5b:87:fc:fb:5c:5a:9f:
                    83:57:d6:fa:1d:39:b5:4a:42:f8:47:fe:f2:ed:7f:
                    35:91:6c:15:34:3a:5d:f9:4a:6d:40:64:d8:ef:05:
                    be:31:68:d4:b9:83:88:67:46:f9:7a:35:61:c9:6b:
                    af:4c:97:fd:d9:3b:ec:01:34:75:9b:63:cb:00:8a:
                    4a:d1:42:35:be:93:fe:1a:dd:33:08:66:ef:38:1a:
                    d7:70:e8:7f:a6:f4:06:70:b6:58:d2:10:f0:03:5d:
                    d8:f9:d8:78:60:88:7a:41:d6:00:33:75:e4:27:9b:
                    fc:9b:fc:ea:f2:dc:06:b2:54:11:82:31:b5:c4:e1:
                    3c:89:91:4e:ba:b6:12:9b:6d:27:d7:a7:72:87:a3:
                    4e:d1:68:a9:0b:bd:e0:b7:7d:54:9d:4f:f2:7c:f4:
                    08:10:c6:8b:79:1b:77:87:eb:2a:bf:23:02:b7:db:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:44:8E:9F:06:5C:4D:0B:1A:5A:30:70:34:1B:E7:6B:08:3D:B4
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/EElEjp8GXE0LGlowcDQb52sIPbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.142.32.0/22
                IPv6:
                  2a01:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:59:fd:b4:6e:cf:01:66:30:dc:80:40:f9:8a:1b:ec:62:14:
         1d:03:b6:22:52:e6:86:4a:fc:b6:7b:8b:cc:7c:ab:80:ef:4e:
         f0:bc:eb:33:22:62:84:1b:19:64:9f:8f:23:f1:77:18:11:c4:
         4f:d5:d3:f1:fd:61:79:1a:ee:76:16:7b:20:08:d4:28:c5:10:
         c3:67:22:ef:95:3e:76:1d:a5:78:a8:9d:68:76:68:cb:ba:c5:
         35:5f:4b:37:72:df:14:b9:5e:41:b1:c8:9a:10:ed:42:3f:de:
         9f:37:a3:eb:0c:49:0f:42:c1:62:03:c2:42:2c:e8:0e:bd:d2:
         41:f6:18:20:e4:35:8a:55:4d:94:fc:63:50:75:ab:81:9a:1e:
         51:d9:dc:2f:b6:af:3f:07:f2:d1:dd:71:fa:93:84:93:af:96:
         67:e6:6e:0f:8c:6f:65:9d:cf:38:88:d3:18:60:84:37:a0:26:
         23:21:47:36:9f:50:b6:db:2e:b5:c8:03:dd:66:c6:9d:c4:c8:
         77:7b:97:79:fc:48:be:e4:68:9f:68:c5:58:7a:bd:55:1d:dc:
         63:5f:7c:4e:75:5e:45:78:b4:b3:1f:48:a9:0c:c1:87:50:34:
         38:ca:1d:35:d8:aa:49:fe:2f:49:bf:2b:1a:7d:d1:d4:25:6b:
         de:9e:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----