Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/O6BRW46X1iXdNPj7c4_YtcZiScc.roa
File:                     O6BRW46X1iXdNPj7c4_YtcZiScc.roa (raw, json)
Hash identifier:          xE690bd4cYJbOYxTfGhgdFax6iiRZOz7gipfCHJFcaE=
Subject key identifier:   3B:A0:51:5B:8E:97:D6:25:DD:34:F8:FB:73:8F:D8:B5:C6:62:49:C7
Certificate issuer:       /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial:       03C73AB2
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/O6BRW46X1iXdNPj7c4_YtcZiScc.roa
Signing time:             Sat 01 Jan 2022 06:01:06 +0000
ROA not before:           Sat 01 Jan 2022 06:01:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        5.182.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63388338 (0x3c73ab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
        Validity
            Not Before: Jan  1 06:01:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3ba0515b8e97d625dd34f8fb738fd8b5c66249c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:ac:8f:3b:a0:e5:d8:69:9f:f9:81:8c:9d:
                    89:77:2c:19:9b:b4:c5:54:56:52:b0:4c:38:a0:f5:
                    1e:ed:8b:a4:3b:c4:da:02:bc:4c:3b:23:e5:81:7b:
                    62:5a:bb:d0:93:9e:85:fb:28:36:ab:0c:7f:6b:60:
                    72:cb:6e:b1:32:a5:2b:e7:aa:72:22:ee:89:09:75:
                    ec:9c:49:4c:61:94:cd:77:48:d7:6f:92:0c:c7:31:
                    29:c0:29:8c:b6:f3:02:32:6b:6a:f4:59:e1:0c:f7:
                    18:d5:5d:65:9f:15:0d:27:8d:88:74:e0:61:e8:f8:
                    2b:60:04:4f:17:ba:0d:40:cf:15:fc:87:4d:a1:32:
                    ed:4e:ed:ff:6c:c2:d7:3a:46:ef:d4:be:53:aa:0b:
                    f4:86:d8:8e:81:05:5f:a7:40:c7:22:45:24:54:c6:
                    45:4e:f3:86:bc:43:db:fa:2e:20:f4:c5:cd:f4:a8:
                    72:02:0f:98:93:d1:a6:25:bc:b4:27:85:84:ac:91:
                    1d:c0:9e:a6:d1:49:78:8c:9d:81:ae:d0:eb:f3:d8:
                    57:fc:7d:38:12:eb:a2:75:1f:09:58:9f:97:78:17:
                    96:5a:79:ec:f4:a5:c4:52:19:1a:3e:3b:0d:57:28:
                    6d:82:40:48:c1:f2:99:3a:cf:59:a3:11:32:38:df:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A0:51:5B:8E:97:D6:25:DD:34:F8:FB:73:8F:D8:B5:C6:62:49:C7
            X509v3 Authority Key Identifier:
                keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/O6BRW46X1iXdNPj7c4_YtcZiScc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:bf:13:59:6d:ee:91:d8:d4:02:90:c9:bb:c0:e0:61:e8:32:
         20:8c:00:8e:a5:df:0d:25:62:e0:a0:a4:c6:ff:bb:f0:7b:71:
         b6:47:a2:da:ff:15:73:ee:59:ce:b8:a4:85:ab:31:13:66:c6:
         80:18:a1:b3:fd:2d:02:0f:d1:c7:90:0d:4f:94:a0:ad:3e:c2:
         c8:48:4c:04:7c:40:74:18:d4:2f:6f:4e:16:25:35:7a:b4:79:
         2c:4c:27:8b:7d:15:67:0e:f5:1b:e3:eb:de:a0:82:e6:2e:ef:
         3e:81:c3:16:31:e4:2c:b5:0a:e5:40:0e:5b:b7:0d:08:24:07:
         01:0d:33:f5:7a:c9:96:eb:40:6c:6f:0b:53:d0:ce:b1:98:d3:
         62:48:e1:a5:e3:2a:ce:09:07:cf:94:04:e7:39:85:b9:e7:f0:
         a2:84:7a:ac:2c:3c:78:6e:88:ea:c2:53:95:c3:7d:8f:16:17:
         67:84:79:ba:20:f3:88:2f:c1:fb:14:08:c6:b8:d7:fe:61:c6:
         f8:62:fc:9e:dc:ac:5d:b7:81:ac:d6:57:73:8a:7e:c8:0b:7d:
         52:f5:b1:11:67:6c:ff:01:16:86:28:c1:4c:b3:62:25:0a:8c:
         c4:f2:57:2b:03:45:ab:ae:26:ea:53:78:3f:82:89:5d:e1:73:
         72:ab:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----