Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/W5PYr_k4x1I_CkfMvZQpwTQ9QCU.roa
File:                     W5PYr_k4x1I_CkfMvZQpwTQ9QCU.roa (raw, json)
Hash identifier:          psgjqUKrU+4btHKf5uALy7YV657vVYx+CgW1R4mworA=
Subject key identifier:   5B:93:D8:AF:F9:38:C7:52:3F:0A:47:CC:BD:94:29:C1:34:3D:40:25
Certificate issuer:       /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial:       01843387D2784CCF52081FF083EA3E267ADF
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/W5PYr_k4x1I_CkfMvZQpwTQ9QCU.roa
Signing time:             Tue 01 Nov 2022 14:10:49 +0000
ROA not before:           Tue 01 Nov 2022 14:10:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202611
IP address blocks:        185.32.184.0/23 maxlen: 24
                          2a0b:1440::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:33:87:d2:78:4c:cf:52:08:1f:f0:83:ea:3e:26:7a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
        Validity
            Not Before: Nov  1 14:10:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b93d8aff938c7523f0a47ccbd9429c1343d4025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:22:55:71:9f:76:68:5f:a1:d6:13:ee:9f:
                    ec:a2:fa:ab:f5:8c:3b:9f:07:38:3b:46:6d:23:9f:
                    4b:bf:c8:6a:fa:db:e7:77:36:73:71:b1:57:ab:2d:
                    1e:a6:90:fe:eb:3b:ec:64:ce:b2:cd:a9:a3:43:36:
                    cf:a4:f6:d6:b7:c2:f6:1e:0f:54:3b:2d:ab:49:2a:
                    35:34:dc:f5:6d:1e:4f:d8:da:39:86:ad:f5:2f:34:
                    73:09:c6:56:f9:27:6b:74:85:af:59:86:ea:74:10:
                    a0:77:6e:00:32:0c:7a:36:a0:82:ef:c3:c8:ea:d0:
                    6f:1c:fd:23:ba:4b:c8:f0:db:c9:6c:6e:fb:86:cf:
                    51:dd:a1:07:a1:b8:d6:b3:1d:0f:12:df:95:d4:2a:
                    df:bd:6b:47:bb:ea:c3:ff:01:16:03:e5:bf:2f:c1:
                    4c:52:4d:c1:49:50:cb:56:49:ce:a3:bf:fc:35:d3:
                    14:c1:c0:b4:2f:05:ec:18:76:26:99:b6:b3:b1:f2:
                    e1:6f:6c:1a:b2:1c:ba:5b:ea:a0:24:35:a2:e7:7b:
                    8a:74:e1:b4:73:4d:89:c5:7a:2f:f5:82:4b:b7:a5:
                    4c:f5:e7:18:b6:af:52:1c:45:c6:00:14:20:df:b7:
                    48:70:86:5b:e6:b7:e0:de:83:cc:a1:5a:d1:e0:d2:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:93:D8:AF:F9:38:C7:52:3F:0A:47:CC:BD:94:29:C1:34:3D:40:25
            X509v3 Authority Key Identifier:
                keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/W5PYr_k4x1I_CkfMvZQpwTQ9QCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.184.0/23
                IPv6:
                  2a0b:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:85:6d:d8:c9:6a:7a:c6:e8:89:65:a7:0d:5b:99:1c:4a:fe:
         63:fe:b6:e0:43:03:7b:d1:5a:ee:0d:b0:14:e6:18:f6:59:1d:
         c2:1a:ff:df:18:63:ea:44:2c:7b:59:2c:6b:d9:78:f1:21:e1:
         91:cf:69:6b:7d:70:37:7c:69:ae:bc:fb:b5:2d:4e:76:9f:94:
         c7:f9:ea:55:7a:51:e5:a7:95:15:1c:07:9b:1c:9a:5d:4f:72:
         56:38:a9:08:c2:6c:9a:9e:6e:77:be:98:65:bd:b5:7d:51:d0:
         93:cd:c6:7c:c7:37:9c:b8:82:11:34:b7:ad:f7:27:1a:14:da:
         f8:7f:5b:6f:0c:12:81:f8:51:6a:2a:d0:e4:9a:62:46:17:c6:
         5b:2b:b3:ea:cf:e9:4f:d6:e4:7b:bb:11:29:68:17:1c:cd:cd:
         4e:32:3e:b8:f2:4a:6b:25:58:b7:e8:d6:0a:03:a5:b8:d7:ab:
         84:bb:3e:60:02:c5:91:e3:46:29:da:24:b7:d7:69:5c:73:be:
         03:f4:36:2b:a0:22:cc:ec:29:c8:18:08:76:c0:51:ab:2c:d8:
         43:e2:7b:eb:96:d2:22:62:2b:9e:41:5b:38:bb:16:f9:c9:19:
         39:68:75:68:92:fa:d9:08:da:04:33:d9:fd:81:d8:e7:db:9f:
         a0:c2:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----