Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/aexbGhGhmrCJbnheXkcamCw1ArU.roa
File:                     aexbGhGhmrCJbnheXkcamCw1ArU.roa (raw, json)
Hash identifier:          OShgCsxDhamIb+nrPOeq7JcbsM4t7ZV3aLQqE/8CO2w=
Subject key identifier:   69:EC:5B:1A:11:A1:9A:B0:89:6E:78:5E:5E:47:1A:98:2C:35:02:B5
Certificate issuer:       /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial:       0FC28FD3
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/aexbGhGhmrCJbnheXkcamCw1ArU.roa
Signing time:             Sat 01 Jan 2022 04:57:19 +0000
ROA not before:           Sat 01 Jan 2022 04:57:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41026
IP address blocks:        195.140.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264409043 (0xfc28fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
        Validity
            Not Before: Jan  1 04:57:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69ec5b1a11a19ab0896e785e5e471a982c3502b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:c7:4b:99:fb:5c:37:f2:55:ff:22:3a:b2:
                    f5:fc:e0:9d:1f:55:07:f1:2d:6b:42:5b:23:99:d3:
                    7d:1e:15:02:5f:c4:89:e4:0a:fd:fd:f9:d6:a4:bb:
                    2a:7c:a8:23:5d:18:89:1d:6c:21:81:d8:8e:6b:76:
                    2c:af:eb:68:c4:2b:7f:4a:b5:2a:e7:03:fc:1f:35:
                    54:d9:98:1f:86:f3:b4:f9:8e:86:cb:04:c7:04:76:
                    d0:d4:ff:ae:ac:24:6e:52:82:d4:02:d7:3b:0c:09:
                    e8:5c:ca:65:e6:23:89:92:40:9c:4d:7c:3c:47:0e:
                    45:ee:e2:d7:b4:39:a9:a7:f0:40:9f:d0:cd:0b:02:
                    5d:ef:17:a6:0e:82:f6:71:fc:87:20:70:a1:8a:77:
                    b2:ee:30:29:6c:53:9b:ec:01:78:77:b1:e0:ef:19:
                    d5:c2:12:19:dd:26:32:07:f5:81:20:17:c1:18:a6:
                    78:47:b3:aa:90:54:68:9f:9c:e1:61:cd:71:5d:7f:
                    1f:0d:e0:6d:5a:ab:60:45:97:96:78:d4:1f:21:59:
                    05:21:60:36:b1:e1:5c:13:ba:e3:09:4f:8b:4d:ac:
                    e0:d9:f6:6d:aa:af:19:aa:c1:c3:a4:4b:5b:3c:10:
                    8d:64:e0:ad:09:d0:71:0e:17:40:45:fc:04:0d:cc:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EC:5B:1A:11:A1:9A:B0:89:6E:78:5E:5E:47:1A:98:2C:35:02:B5
            X509v3 Authority Key Identifier:
                keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/aexbGhGhmrCJbnheXkcamCw1ArU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.140.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:e4:1c:7c:6e:63:db:45:b7:35:89:ae:3b:a4:d3:ca:c0:8d:
         ac:f0:ae:02:05:3b:62:8e:00:98:64:0b:89:10:a9:09:4d:2d:
         36:20:75:7a:20:03:4d:77:1c:80:bd:da:ab:fd:c3:b2:df:ae:
         af:90:45:4b:2f:61:2b:be:c5:40:6e:e0:e2:82:3e:34:e8:5b:
         5a:77:c0:03:c1:3b:a4:99:20:0e:b0:49:8c:9d:d4:e0:aa:72:
         48:65:9c:a8:db:37:c5:f5:51:b4:a5:3a:fa:a0:47:43:79:12:
         1c:0a:2e:59:f9:08:9b:c8:6d:b3:1a:f7:ca:f4:3f:c3:00:0d:
         ff:72:40:11:7c:ca:3d:82:68:38:d0:4d:cb:56:98:13:5a:3f:
         90:23:05:a4:5c:99:5a:d3:7b:a3:bd:b3:28:18:6f:b4:85:51:
         aa:6d:d7:13:68:ad:d1:ef:0e:d5:5e:75:17:a5:ae:da:76:e1:
         c9:2f:9e:57:d7:7b:43:2d:c6:36:c5:ca:c7:f8:5a:25:ae:cc:
         c4:d4:3f:60:36:01:a6:f8:8c:eb:96:9e:98:f5:4b:41:8c:63:
         ca:8d:a7:c7:13:55:22:ee:57:97:38:c7:4f:46:d6:ec:a2:14:
         f9:57:32:ed:ac:fd:9c:6c:35:1f:1e:c6:9b:c9:78:35:fa:3f:
         fd:1c:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----