Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/F5W6tmvsrsu8HijZIkVSaQrxMxM.roa
File:                     F5W6tmvsrsu8HijZIkVSaQrxMxM.roa (raw, json)
Hash identifier:          9uOG3epp3n4d6OgLZM+GWijotf4vyX/sZbddHUSXKv0=
Subject key identifier:   17:95:BA:B6:6B:EC:AE:CB:BC:1E:28:D9:22:45:52:69:0A:F1:33:13
Certificate issuer:       /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial:       109951A5
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/F5W6tmvsrsu8HijZIkVSaQrxMxM.roa
Signing time:             Sat 01 Jan 2022 11:59:05 +0000
ROA not before:           Sat 01 Jan 2022 11:59:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48506
IP address blocks:        185.163.192.0/22 maxlen: 32
                          2a0a:2c00::/29 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278483365 (0x109951a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
        Validity
            Not Before: Jan  1 11:59:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1795bab66becaecbbc1e28d9224552690af13313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:8f:c1:e7:c8:32:c0:06:f8:b4:2a:a9:7c:
                    da:3b:d0:5e:84:b0:43:84:35:81:7c:97:fc:93:b5:
                    10:6f:b4:6a:05:4d:a7:0f:cd:49:f8:b1:be:f0:d2:
                    3f:c8:bc:e6:d9:10:f8:46:44:9c:fe:60:d7:ef:d3:
                    61:5a:65:79:ed:41:fa:f5:52:87:56:1b:b3:ef:ef:
                    36:50:b7:8d:78:db:55:21:53:bf:4d:65:43:b3:14:
                    99:1e:2a:ed:ea:26:09:31:b0:88:1d:b2:da:cd:09:
                    4e:d6:2b:7f:b0:c0:af:eb:21:e2:c2:10:37:ff:07:
                    dc:ce:b2:29:3c:3b:26:4b:89:c3:3c:7d:a9:e8:46:
                    b3:5b:ee:0c:61:50:9b:94:e4:87:36:b5:e0:05:f2:
                    1b:b3:51:2c:0c:36:21:64:76:47:6a:78:94:c4:b1:
                    d3:15:79:89:a9:23:e4:15:55:02:b1:e4:ae:89:16:
                    90:c6:6b:c6:64:85:e7:6a:10:23:18:04:57:6e:73:
                    af:35:ed:c8:64:75:d7:74:fc:05:3f:c5:80:7b:e8:
                    65:e4:de:32:b4:92:ad:dc:57:26:4d:73:0b:2d:eb:
                    f8:ad:3e:84:3d:d3:c9:00:db:96:36:20:54:56:0c:
                    13:d0:24:67:bc:a7:e0:a0:7b:40:7f:2f:0a:13:22:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:95:BA:B6:6B:EC:AE:CB:BC:1E:28:D9:22:45:52:69:0A:F1:33:13
            X509v3 Authority Key Identifier:
                keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/F5W6tmvsrsu8HijZIkVSaQrxMxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.192.0/22
                IPv6:
                  2a0a:2c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:3e:d9:1b:d9:86:f2:ec:78:46:b4:48:81:a9:a0:fc:d2:
         7a:b9:d2:bc:9d:18:94:b9:c7:20:9e:3d:d0:81:61:bd:5d:ec:
         d1:bb:bb:be:0e:1b:5d:89:1a:83:8c:bf:a6:81:56:45:8c:c2:
         de:24:7f:16:d3:69:ac:52:29:56:bc:85:95:28:ab:38:90:73:
         31:07:68:42:07:10:3f:bb:d2:fe:46:93:3b:62:25:fa:1f:8a:
         60:92:f4:fb:c7:b3:8e:29:8f:c0:98:07:ec:37:ee:d2:21:4b:
         bf:09:49:2a:45:97:45:a6:9b:4a:bb:e2:c8:11:7e:71:ca:fa:
         b8:20:98:74:6a:4f:13:65:33:ca:f4:61:59:41:d8:60:f2:1c:
         b4:ad:01:ad:98:e5:1f:b5:87:4e:b1:ef:83:fc:a3:c7:ab:67:
         73:24:d3:84:e9:31:50:12:42:62:31:0f:5d:9e:fc:5e:4c:58:
         94:b7:20:85:a2:04:83:a0:cb:7b:0d:42:e8:57:17:02:a9:0d:
         fe:e1:9b:d8:88:c2:f9:18:b0:e4:f0:35:67:b0:ba:c0:de:df:
         a4:85:a0:79:ad:04:3d:6d:17:9c:46:33:4b:f0:22:74:d1:7e:
         d9:36:13:f0:6f:6e:67:e6:83:ae:c4:8e:d6:ba:c3:49:24:8c:
         e8:2f:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----