Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/wKYTPL8HhvCG5wbST9_RuvP1tB0.roa
File:                     wKYTPL8HhvCG5wbST9_RuvP1tB0.roa (raw, json)
Hash identifier:          nWQ2gIuAvTrsIdcJe++MYaGc6MEdLYza/C8w6sfx9SY=
Subject key identifier:   C0:A6:13:3C:BF:07:86:F0:86:E7:06:D2:4F:DF:D1:BA:F3:F5:B4:1D
Certificate issuer:       /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial:       1039
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/wKYTPL8HhvCG5wbST9_RuvP1tB0.roa
Signing time:             Tue 17 May 2022 15:48:13 +0000
ROA not before:           Tue 17 May 2022 15:48:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50939
IP address blocks:        45.134.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4153 (0x1039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
        Validity
            Not Before: May 17 15:48:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0a6133cbf0786f086e706d24fdfd1baf3f5b41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:f3:7a:50:3d:54:a1:b6:9d:62:ce:25:81:
                    a8:6b:61:03:e8:89:6e:f5:c7:e4:b6:37:6c:e5:6f:
                    88:a8:ba:43:d3:1d:60:57:75:4d:c0:89:0d:c3:8c:
                    51:39:e8:ab:e2:13:4a:90:8f:c4:ee:36:3b:2a:a5:
                    59:48:cc:ba:45:50:05:d5:06:a8:69:82:0b:b0:96:
                    d0:ce:47:bf:74:f7:57:5a:df:3d:ac:c5:8f:c4:a5:
                    8c:06:1b:29:33:dd:7e:f6:2e:e8:83:18:e8:7e:d4:
                    f7:f1:de:ae:c5:8e:80:b9:b5:75:41:9e:3c:3c:88:
                    1d:38:a6:a6:22:4a:d5:f3:b7:3c:73:f6:c2:0b:f6:
                    ff:61:c4:b7:8a:fd:c8:50:39:f9:9a:78:bd:1a:fa:
                    be:63:ed:c0:a6:9c:55:94:5a:fd:d8:7c:e7:b9:e9:
                    0b:0a:33:e0:1a:b7:d9:ca:43:ae:17:b1:5e:04:b9:
                    5f:7e:11:f3:1a:31:d4:e9:d6:eb:50:fd:e5:c7:45:
                    d8:42:e0:88:6c:28:c3:37:e6:de:eb:d9:2d:1d:da:
                    3a:f6:aa:74:13:c0:8c:e0:01:2b:7f:57:50:09:64:
                    f3:c6:94:39:8c:22:ec:f7:49:5e:00:87:8f:65:8e:
                    56:ff:d7:7b:a2:10:23:4a:87:fb:22:e0:c5:f3:31:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:13:3C:BF:07:86:F0:86:E7:06:D2:4F:DF:D1:BA:F3:F5:B4:1D
            X509v3 Authority Key Identifier:
                keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/wKYTPL8HhvCG5wbST9_RuvP1tB0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:9e:03:55:bb:57:f0:e3:e6:62:07:92:ea:47:f2:9f:ed:
         42:23:9a:05:c9:5a:2f:96:13:60:d6:35:e4:77:e3:48:4d:8e:
         5f:75:9d:76:e2:12:8a:cc:85:6b:e6:e4:fc:9a:fa:b2:bd:33:
         9a:81:5e:d1:23:27:58:6a:dd:d6:a6:0f:ea:20:4b:3c:b6:66:
         10:d3:20:8a:c0:f9:d4:be:12:17:c3:c6:01:9b:4c:81:1b:fe:
         51:8e:06:67:de:30:e5:a7:10:30:1b:39:d7:da:0c:97:2b:31:
         42:e3:a2:49:19:d9:82:4d:38:3a:e8:91:f9:69:68:ef:35:0a:
         61:77:8e:e9:2a:e9:75:ca:e5:8c:f8:7f:83:31:59:35:74:8a:
         e3:69:c0:25:95:3f:f2:d2:e2:54:e8:62:5d:b1:5d:7e:ea:5b:
         c9:67:6e:37:e5:62:7c:f2:ed:e7:99:e9:4a:b4:ee:b0:1a:f1:
         82:36:b8:72:b4:65:c2:4f:04:91:45:b1:52:bc:19:75:c3:65:
         ae:0e:12:d4:91:d9:c3:83:b4:d0:5c:50:46:31:99:66:a6:33:
         e8:9d:9b:9f:aa:1a:f5:de:4b:36:a8:f0:62:dc:61:bf:51:2d:
         ba:b8:8e:45:77:93:fe:b1:2b:7f:3f:ea:63:d9:78:08:b4:6c:
         01:3f:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----