Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/VzioJmxF-NF91DCR7Vf_xQY35uI.roa
File:                     VzioJmxF-NF91DCR7Vf_xQY35uI.roa (raw, json)
Hash identifier:          XAOD08Ecgvra8KVZxm0hVDgllZdtNvNPzzcJGLpYDsI=
Subject key identifier:   57:38:A8:26:6C:45:F8:D1:7D:D4:30:91:ED:57:FF:C5:06:37:E6:E2
Certificate issuer:       /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial:       0184BF5F8B6E3EA91C8C7A03878D6DA8AF7C
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/VzioJmxF-NF91DCR7Vf_xQY35uI.roa
Signing time:             Mon 28 Nov 2022 17:53:40 +0000
ROA not before:           Mon 28 Nov 2022 17:53:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398704
IP address blocks:        188.130.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bf:5f:8b:6e:3e:a9:1c:8c:7a:03:87:8d:6d:a8:af:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
        Validity
            Not Before: Nov 28 17:53:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5738a8266c45f8d17dd43091ed57ffc50637e6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:34:8c:0a:ec:12:dd:2f:6f:fd:0d:cb:06:
                    8a:70:48:cd:90:a7:8d:ea:89:6b:cc:70:c6:72:f6:
                    29:3f:ab:39:01:3c:1c:3e:08:de:c2:40:5b:bb:bf:
                    3b:b7:fb:17:a8:74:2b:7d:57:92:6b:4d:bf:5f:29:
                    a8:6e:6f:34:0f:27:ca:dc:bf:1f:04:91:b3:4a:29:
                    93:e5:82:91:2b:86:11:99:81:ee:3a:de:37:d3:3a:
                    f9:db:62:77:5a:be:19:e5:63:26:25:5a:99:6c:17:
                    08:1f:01:01:4e:ec:75:e6:f4:c4:69:ee:3e:d9:35:
                    d5:eb:1c:1e:e1:41:ba:19:50:8a:0a:8e:8e:70:00:
                    cf:67:c9:ae:ea:f7:99:21:74:ae:5a:9a:19:1c:2d:
                    33:b3:7d:9a:2a:da:d7:d2:7a:8f:33:a7:08:23:9d:
                    ef:a4:83:df:4e:d5:32:2e:85:62:75:7e:d5:4c:e7:
                    31:7d:18:32:77:a9:91:98:aa:7a:79:a7:0a:a8:72:
                    3c:0e:4e:d9:ed:0e:03:77:62:95:6a:eb:eb:4c:aa:
                    ea:a6:fa:93:81:e0:81:2c:3c:46:2d:fc:1d:e1:10:
                    9a:81:02:e9:97:c1:1c:41:3b:23:3e:01:dd:fb:35:
                    b0:3a:b9:da:35:8c:bf:c7:5f:0f:08:c5:80:3e:31:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:38:A8:26:6C:45:F8:D1:7D:D4:30:91:ED:57:FF:C5:06:37:E6:E2
            X509v3 Authority Key Identifier:
                keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/VzioJmxF-NF91DCR7Vf_xQY35uI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.130.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:32:d1:84:17:c7:d8:23:5a:71:09:e0:3d:23:c2:bb:17:e9:
         bb:b7:f3:ed:b6:76:bc:a1:00:65:34:77:a9:82:95:27:32:e9:
         39:5b:64:14:1a:62:f5:6f:f7:ed:a6:86:52:33:db:7a:0d:a6:
         c3:93:f4:8e:27:57:72:69:43:36:d8:5d:9e:0a:30:93:c4:7d:
         70:fd:16:b8:12:c5:08:41:0d:d4:2c:cb:c8:53:cf:2c:3e:ba:
         57:93:e4:cf:0f:b0:6c:34:91:5e:89:1b:a2:71:69:6a:bc:23:
         cb:36:c1:88:00:50:90:68:0e:e7:1b:ad:7f:50:ee:58:d9:78:
         8b:67:ec:17:42:c2:6a:e5:36:96:ba:64:66:ab:24:7e:3a:15:
         79:ab:c3:00:ed:45:21:88:5e:08:fd:1f:f5:34:ac:d8:06:2e:
         5b:6c:3c:5d:6a:3a:b5:d9:b2:27:f3:8a:dd:f0:62:e4:eb:7c:
         cd:6c:d6:32:f7:8b:ba:67:c8:8e:16:f6:d7:a5:30:05:76:5f:
         75:07:c5:1a:fd:32:e1:29:74:50:a8:e1:9b:23:9b:8c:f3:9f:
         e8:bc:7e:55:15:f5:e3:cd:f0:e9:59:60:a1:fe:fa:02:c4:ca:
         3a:fc:4a:af:c8:b4:5f:58:67:93:bb:73:45:2a:c1:91:cf:73:
         78:c9:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----