Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa
File:                     EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa (raw, json)
Hash identifier:          lf4w/l+e79XjeuANrh9Yqec37tVgQKctfBI2PU6YO2o=
Subject key identifier:   12:E5:2B:20:F8:83:71:6F:32:2A:10:31:45:6F:5D:52:C6:0F:07:9A
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A8EC562
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa
Signing time:             Sat 01 Jan 2022 04:52:12 +0000
ROA not before:           Sat 01 Jan 2022 04:52:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204953
IP address blocks:        195.136.154.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982435170 (0x3a8ec562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:52:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12e52b20f883716f322a1031456f5d52c60f079a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:e4:b4:d7:6d:b8:f9:cf:83:b0:16:86:c2:
                    1f:09:f3:7c:9b:2b:5e:12:63:e5:93:d6:f8:1a:a4:
                    d7:2e:1e:a0:b9:b6:69:99:78:cc:e2:25:fc:d3:47:
                    34:f3:63:67:e9:33:1c:60:3a:ee:1b:8c:03:6c:b2:
                    a4:db:03:4c:34:69:ba:1e:f1:98:c1:cf:7a:50:5e:
                    a4:6d:41:90:e4:84:68:89:b4:f0:d2:ac:ac:fa:d8:
                    f1:f1:05:f1:bf:8d:b0:4f:0d:6a:e4:61:9d:d7:19:
                    dd:2b:1b:ef:57:87:e0:7b:d8:0f:d1:a8:bd:77:1d:
                    1f:34:e3:e7:ed:56:d9:f6:9f:68:ae:a2:99:b3:07:
                    f2:05:20:cd:81:42:6d:9c:ea:09:38:80:a8:9d:a8:
                    e6:19:88:7a:90:88:30:88:4d:46:ec:5d:8a:11:57:
                    c4:aa:5c:36:8f:4d:31:bd:e8:bb:b0:06:6a:5d:7b:
                    e3:20:47:fe:8f:52:a3:95:d4:62:06:3f:47:4f:93:
                    05:d9:27:2a:bf:86:90:8f:08:79:29:f1:b1:a4:30:
                    98:79:b2:ea:21:bb:fa:dd:15:73:6f:a7:3c:eb:86:
                    b6:d2:7f:bf:bc:74:ba:f5:3b:32:df:3c:df:76:d8:
                    2a:c5:22:ad:33:50:b5:21:c5:3d:0f:5e:b4:70:48:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:2B:20:F8:83:71:6F:32:2A:10:31:45:6F:5D:52:C6:0F:07:9A
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.136.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:a6:24:3e:95:01:61:e4:9d:c0:1a:71:02:86:b8:e7:3e:
         2f:0b:cc:cb:86:2d:b8:90:aa:8a:2c:0e:e9:b6:83:e5:c7:ea:
         99:d7:41:8c:73:15:47:c5:99:c6:be:ca:53:1a:9e:c3:6c:14:
         5f:20:ce:f7:3d:9a:46:20:76:6e:64:6f:0c:e1:62:0c:b6:6c:
         d2:60:56:c0:0b:33:d0:05:fd:5b:d5:c9:2a:0c:05:b6:f9:01:
         c3:6c:37:2d:25:16:29:f7:89:4e:f0:38:c3:44:23:28:1c:23:
         64:86:15:50:54:b2:ff:58:63:03:dc:ae:12:65:c1:52:a5:35:
         61:41:eb:0d:2b:f4:6f:0b:6d:6b:d6:77:f8:da:c8:b5:be:48:
         31:df:72:d4:f8:b9:c6:40:0e:24:62:5c:2d:5b:39:5c:dd:6e:
         ce:49:c3:57:ea:3b:72:d3:56:c3:18:9b:24:20:7e:b9:83:22:
         02:ee:9e:cc:9c:56:c8:36:ad:d7:3c:6a:ec:b2:73:9b:2c:dd:
         b6:79:92:89:50:48:d2:1f:09:d5:38:ce:94:f4:27:c4:7f:c9:
         18:40:0d:f5:86:34:bc:15:5b:5f:54:38:2f:ce:c5:cb:d7:8e:
         bf:02:71:54:b6:d9:71:ed:e1:04:cd:06:ae:c6:49:ae:a7:ab:
         e1:1d:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----