Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/XQA85u6rQmgI_G3rSwWLvS60piU.roa
File:                     XQA85u6rQmgI_G3rSwWLvS60piU.roa (raw, json)
Hash identifier:          Z0Y9aBRlwxJ0ZUa4WF+LHubpmVtBId4DPMvjelYo81c=
Subject key identifier:   5D:00:3C:E6:EE:AB:42:68:08:FC:6D:EB:4B:05:8B:BD:2E:B4:A6:25
Certificate issuer:       /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial:       0AC53B82
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/XQA85u6rQmgI_G3rSwWLvS60piU.roa
Signing time:             Sat 01 Jan 2022 05:55:16 +0000
ROA not before:           Sat 01 Jan 2022 05:55:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50068
IP address blocks:        193.160.16.0/22 maxlen: 24
                          2a0c:9cc0::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180697986 (0xac53b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
        Validity
            Not Before: Jan  1 05:55:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d003ce6eeab426808fc6deb4b058bbd2eb4a625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:e6:10:3a:7a:ae:1b:c4:65:1f:16:3c:55:
                    ec:5d:54:9c:6c:8c:b6:e6:ee:88:b6:cc:9d:57:7d:
                    38:96:29:cf:eb:d8:5d:a9:1e:55:02:8b:72:7d:9f:
                    f3:4b:ee:06:65:bc:86:97:72:05:6b:8a:19:19:b5:
                    67:21:92:b0:f8:bf:25:bd:78:3a:26:bd:a8:dd:39:
                    12:3a:bf:68:20:5e:b7:2d:d5:01:7a:40:7e:8f:3b:
                    e7:48:8a:a1:ee:fe:57:e9:71:f4:36:f7:2b:94:c8:
                    74:71:fa:02:29:51:90:99:26:c5:22:c8:12:24:d0:
                    19:9c:26:35:5d:dd:ac:72:de:88:2b:da:c3:f1:03:
                    24:46:b8:6e:6b:5c:07:0c:d8:1e:89:5c:67:29:39:
                    39:b4:45:13:76:14:08:3e:c8:9c:b6:1a:9d:53:6b:
                    7f:46:50:f0:39:a4:6f:6d:29:8f:e1:13:af:fe:f0:
                    69:80:64:68:31:f2:fc:e1:28:35:f1:1f:83:05:c8:
                    75:ee:f3:db:03:73:9b:c0:6d:05:17:fd:29:3e:14:
                    ee:75:84:ce:d9:4d:d8:d6:0e:b1:eb:ef:4b:d5:47:
                    b1:6c:8a:2b:e0:d4:3c:db:1c:d1:e8:b8:3f:c4:13:
                    fa:c5:1a:62:54:6b:87:5f:32:e6:c6:25:80:f0:2f:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:00:3C:E6:EE:AB:42:68:08:FC:6D:EB:4B:05:8B:BD:2E:B4:A6:25
            X509v3 Authority Key Identifier:
                keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/XQA85u6rQmgI_G3rSwWLvS60piU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.16.0/22
                IPv6:
                  2a0c:9cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:f6:8d:d6:1a:bd:d1:69:e9:8b:bd:e0:89:fd:ba:6f:d9:
         f0:2b:83:0b:9c:27:71:89:a0:54:0b:af:49:a5:46:3e:e2:8e:
         d3:89:d1:51:09:aa:02:08:9b:33:31:d4:b0:ee:20:20:bb:4b:
         b4:67:94:5f:ba:29:09:f4:86:93:d6:75:02:21:2a:39:26:95:
         11:9a:a8:36:06:f5:5d:61:5b:3c:39:8e:02:3a:2f:5a:a0:da:
         7e:97:39:d6:cd:11:76:bc:38:e4:c2:38:15:2d:b4:ff:84:fa:
         d4:b9:5d:c8:80:1d:6e:8d:47:61:72:41:f7:cd:30:1d:c3:96:
         59:fd:8e:3d:d5:74:91:57:17:3b:ce:58:09:db:45:08:19:f0:
         e8:15:03:2b:e7:56:09:27:6d:a9:85:3a:77:ae:5e:ec:c9:05:
         b8:90:7f:53:43:59:8e:2e:77:8e:a7:cd:20:c5:1c:ae:0f:55:
         92:01:f3:59:02:80:40:96:cc:0f:2d:cd:ad:63:48:ec:3e:84:
         53:8f:66:c5:da:a5:cc:dd:7f:0e:8e:63:a4:d7:40:54:ed:87:
         f1:35:0c:b4:e7:f7:2d:3c:5f:e2:a4:bb:5f:13:31:dd:cb:89:
         b4:a4:c5:c4:d7:a5:54:4b:0f:98:20:3b:39:ac:16:20:c0:26:
         2c:e1:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----