Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/VawiR_46rNp6uuOALk11vBr5sWs.roa
File:                     VawiR_46rNp6uuOALk11vBr5sWs.roa (raw, json)
Hash identifier:          JqxGG6ugJXj24WfEab6xq6DIcJc6jXLz5KrKzwIcf3M=
Subject key identifier:   55:AC:22:47:FE:3A:AC:DA:7A:BA:E3:80:2E:4D:75:BC:1A:F9:B1:6B
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       18421EBF
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/VawiR_46rNp6uuOALk11vBr5sWs.roa
Signing time:             Mon 07 Mar 2022 23:00:08 +0000
ROA not before:           Mon 07 Mar 2022 23:00:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62387
IP address blocks:        5.1.79.0/24 maxlen: 24
                          2a00:f826:11::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406986431 (0x18421ebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Mar  7 23:00:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55ac2247fe3aacda7abae3802e4d75bc1af9b16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:03:f5:87:04:75:10:5b:2b:e6:46:d8:3f:
                    1c:0e:3f:76:eb:78:15:1f:d3:52:d1:d8:11:94:d4:
                    3f:a1:80:0f:1f:b7:ed:a4:5a:03:45:b6:1c:29:09:
                    d2:89:06:e6:c3:2e:75:5b:40:e2:ac:9b:74:68:0a:
                    b2:7c:4f:15:52:c8:f8:1f:93:8e:47:6b:03:68:af:
                    c9:f6:bf:f9:c5:ef:63:6a:d9:3e:c6:c4:29:c5:e5:
                    ab:bd:69:57:31:93:69:b0:51:3c:7b:1f:cd:82:a9:
                    38:7c:52:48:58:18:89:c3:40:01:98:e8:02:11:8a:
                    f9:9f:ca:2b:aa:a3:6b:1b:b2:7e:0d:31:df:a9:a6:
                    d5:e9:5a:7e:93:5b:ac:93:51:fe:ae:5b:d2:18:51:
                    27:b8:e4:b8:f0:64:b7:67:e1:6a:13:7f:72:74:29:
                    22:02:ff:8e:0a:5b:7a:9a:12:1d:8c:dd:22:52:de:
                    7b:48:c2:a6:e9:3e:45:ec:84:0b:bd:ba:52:bf:c4:
                    b1:81:d2:0b:a0:e8:2f:77:dd:e7:f5:f9:fd:7c:d6:
                    00:a4:13:4f:d3:6f:25:9b:19:e0:0b:51:f2:c0:53:
                    a9:5f:96:c1:48:95:42:eb:47:7b:30:34:5f:4c:51:
                    87:d9:ba:a9:a9:9d:88:bc:4d:de:54:5c:a3:b4:88:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AC:22:47:FE:3A:AC:DA:7A:BA:E3:80:2E:4D:75:BC:1A:F9:B1:6B
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/VawiR_46rNp6uuOALk11vBr5sWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.79.0/24
                IPv6:
                  2a00:f826:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:54:1b:23:d7:06:03:52:e8:00:d1:99:8c:32:8f:01:b8:
         05:55:c2:fd:41:6b:1b:73:52:71:dd:87:1f:73:12:fc:51:cb:
         fe:c5:47:0d:f6:be:52:99:d4:ea:61:a1:1b:c1:9c:51:cf:46:
         04:93:85:30:34:c0:67:45:4a:6c:ff:da:74:aa:dd:65:5d:94:
         bd:aa:60:68:84:7c:2b:4d:62:d2:85:bb:4c:34:26:5a:79:69:
         1d:94:2f:d4:16:61:79:ba:a5:da:76:9a:09:8c:2c:1c:47:3d:
         d1:d0:d5:a2:56:b2:0d:36:12:da:fa:8d:ab:7a:45:d1:0e:cc:
         c1:57:a3:a9:39:9b:b6:a1:08:72:8b:0b:ca:ee:f4:9f:a2:9d:
         b0:be:11:0d:28:0d:3f:ce:71:56:ac:55:f3:a1:89:77:a6:96:
         0b:cd:bd:36:ed:13:a1:e1:9e:11:73:9c:47:83:c7:c3:b0:4d:
         56:b0:91:96:48:dc:da:50:d9:c1:57:b4:dd:ce:57:65:db:85:
         dd:3c:82:e1:90:6b:89:93:e5:fa:7b:3c:5b:b8:7e:d9:f6:11:
         96:b5:fe:7b:58:f3:95:24:22:e0:f3:d7:3b:c1:a7:92:0e:4e:
         fa:43:89:39:64:a4:11:2e:7f:d6:24:a4:89:ac:c6:2f:af:88:
         7e:bf:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----