Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7ej_f5TreE6san8D3NyK38Lt7SA.roa
File:                     7ej_f5TreE6san8D3NyK38Lt7SA.roa (raw, json)
Hash identifier:          kYC3/7I+o6VB1jvnKL7aKEmtxdJxIbFoakTRwy4KT9g=
Subject key identifier:   ED:E8:FF:7F:94:EB:78:4E:AC:6A:7F:03:DC:DC:8A:DF:C2:ED:ED:20
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       13DD36A6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7ej_f5TreE6san8D3NyK38Lt7SA.roa
Signing time:             Mon 21 Feb 2022 07:47:46 +0000
ROA not before:           Mon 21 Feb 2022 07:47:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3257
IP address blocks:        82.115.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333264550 (0x13dd36a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Feb 21 07:47:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ede8ff7f94eb784eac6a7f03dcdc8adfc2eded20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7f:1d:fa:32:6c:62:7e:56:64:85:12:6d:db:
                    48:f5:d6:bc:58:23:42:41:28:7f:62:42:c9:11:fe:
                    db:30:c1:1d:b9:67:1a:05:a4:07:5e:72:4a:cd:a5:
                    7a:62:7c:55:35:11:0b:4a:e1:7c:14:0d:ae:9e:75:
                    22:e5:c5:ed:c1:0b:da:2b:d6:d0:c8:90:79:1c:9f:
                    07:79:8f:19:2f:e9:20:30:89:41:90:32:d1:d4:fa:
                    98:53:01:8c:7c:7e:9a:5a:fe:0f:3d:46:14:80:22:
                    84:39:ff:54:7e:17:d6:57:c7:55:b9:b7:55:58:b9:
                    e9:6f:50:04:6f:98:c4:a2:e1:52:8c:4c:9b:a5:51:
                    10:8a:2a:fe:2c:2f:b0:80:75:36:de:0c:2e:17:ba:
                    fe:3d:2c:6a:a8:33:39:ed:06:0e:a0:35:1b:01:56:
                    8e:8d:e4:56:03:02:9a:68:f9:27:4c:f7:c2:83:94:
                    0e:42:fc:7a:71:2e:26:7f:15:e7:b2:c3:cd:ea:e8:
                    0f:29:21:f4:34:ea:0f:42:20:03:9a:1f:0c:2a:ef:
                    05:da:4f:fd:08:69:5a:c1:26:7e:96:b9:91:29:4a:
                    bd:35:eb:80:21:36:b3:4e:c9:80:dc:f8:71:b1:58:
                    89:29:72:5c:f3:ad:96:0f:e5:dc:74:18:4a:d4:f9:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:FF:7F:94:EB:78:4E:AC:6A:7F:03:DC:DC:8A:DF:C2:ED:ED:20
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7ej_f5TreE6san8D3NyK38Lt7SA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:18:2e:47:23:9c:63:40:0a:3f:76:4d:f5:bd:4d:63:53:
         dc:45:a3:cd:5d:4e:c5:4d:e1:f6:a0:4c:c0:b5:c5:e9:70:28:
         33:90:8c:41:50:da:1d:55:54:92:84:ff:58:d9:90:cf:f6:9b:
         28:0d:8d:45:bb:d7:bc:2e:9f:99:2d:3b:63:c7:21:6d:f6:61:
         1f:18:82:4a:6f:7f:f2:d7:a1:40:6c:45:9c:d2:13:11:16:c3:
         34:4a:16:86:3f:38:37:2a:db:51:ca:fc:be:3a:55:62:60:f3:
         7a:bd:48:34:2e:bc:f1:80:4d:41:85:26:7e:3a:01:49:1e:29:
         45:e4:b4:0a:1e:ac:b1:ce:91:17:9a:84:1d:df:92:47:63:a2:
         02:54:8c:80:0c:c9:ec:14:2b:d8:45:ad:f8:b6:34:b9:f6:1a:
         a5:03:65:8f:b2:1f:53:31:ea:00:27:98:62:e6:36:28:01:60:
         b8:51:6e:1b:b8:06:c0:99:27:12:ab:4c:75:b3:41:e5:17:a5:
         98:d3:85:52:9a:25:d6:6f:2e:04:fe:2c:d9:01:ca:26:2e:84:
         db:d3:63:3c:d0:95:11:a1:32:fe:00:4e:0b:c8:b4:c2:c4:b9:
         c2:85:24:b0:f2:e4:33:b0:bd:45:59:d5:44:1c:32:6a:87:39:
         7f:16:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----