Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xbS-MAAqMVLsXF4GUI6kGcGf4G4.roa
File:                     xbS-MAAqMVLsXF4GUI6kGcGf4G4.roa (raw, json)
Hash identifier:          VWKTkpaHfMGQ12cyYnxOIyLwfhRVoall+hsm1nbDplw=
Subject key identifier:   C5:B4:BE:30:00:2A:31:52:EC:5C:5E:06:50:8E:A4:19:C1:9F:E0:6E
Certificate issuer:       /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial:       0183F16D3EBB75ADC1C723106CBCC9FF16F5
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xbS-MAAqMVLsXF4GUI6kGcGf4G4.roa
Signing time:             Wed 19 Oct 2022 18:06:51 +0000
ROA not before:           Wed 19 Oct 2022 18:06:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203355
IP address blocks:        2.58.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f1:6d:3e:bb:75:ad:c1:c7:23:10:6c:bc:c9:ff:16:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
        Validity
            Not Before: Oct 19 18:06:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c5b4be30002a3152ec5c5e06508ea419c19fe06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:5d:18:06:38:65:c0:24:ea:01:51:58:7e:
                    04:98:b3:9b:d6:34:47:db:26:9e:26:7c:1b:7c:ec:
                    8e:0b:79:6d:25:6f:cf:19:47:08:45:f3:85:5a:0a:
                    9b:89:b1:19:ab:85:a6:67:5c:36:90:27:e5:99:13:
                    bf:7d:68:f9:f8:56:cc:56:c9:a1:40:ee:62:bd:e7:
                    2d:79:ff:4c:e5:5e:af:07:7b:13:a3:de:c2:15:09:
                    c4:99:d5:41:b8:10:b2:66:97:d9:89:55:c4:08:f2:
                    f0:f9:85:88:66:45:9a:43:8b:76:85:ad:f9:e3:cb:
                    80:0b:f3:1c:a9:b7:3f:96:d8:1b:5c:eb:4b:2b:45:
                    27:20:c8:bf:66:77:69:5f:27:6e:a6:a9:3b:2e:2b:
                    f7:4e:31:22:fd:0f:75:d8:6f:d0:20:c3:6f:11:31:
                    d4:b0:60:18:8a:d3:5c:4b:33:07:64:80:0b:04:2e:
                    75:b0:57:46:8d:d2:bb:7d:69:46:fd:60:76:4c:0a:
                    c4:7c:58:f8:84:7b:17:73:b6:5b:97:5e:29:bb:81:
                    cd:ed:70:fc:ec:b9:ac:03:fc:7e:cf:d6:2b:6f:f6:
                    2e:e4:46:ae:fd:4b:b4:31:95:6d:ba:e3:90:c8:8f:
                    39:7d:19:2a:12:d1:b1:9a:18:3c:cb:17:b4:fa:f1:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B4:BE:30:00:2A:31:52:EC:5C:5E:06:50:8E:A4:19:C1:9F:E0:6E
            X509v3 Authority Key Identifier:
                keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xbS-MAAqMVLsXF4GUI6kGcGf4G4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:cc:7b:19:bf:0a:fa:7a:b2:c7:c4:62:58:ec:65:87:95:
         0d:c8:8b:48:e9:7d:d8:83:8d:53:98:6f:37:d4:e2:de:0e:4f:
         ff:1d:5d:0b:fc:3c:fc:a3:46:7b:06:2c:7c:75:c0:2b:48:fd:
         3b:ac:8b:1f:f7:a9:3e:29:c7:49:e4:4e:77:aa:25:1d:1a:fe:
         a1:da:01:83:b4:d3:24:e7:0e:69:f3:04:ce:24:19:24:69:94:
         7c:7c:dd:db:6f:ae:82:51:01:05:05:30:90:8c:34:c5:f6:33:
         de:a3:22:b9:c6:9d:67:13:3e:4f:17:e4:bf:2b:87:f8:87:8e:
         a7:2c:0d:42:f5:96:b7:23:11:2e:ab:e5:b4:98:2f:bb:42:2b:
         f2:19:ad:06:cb:69:55:db:04:6f:e9:98:47:0b:8a:01:79:f0:
         73:ad:d5:82:3b:90:45:be:02:e3:56:0c:0a:44:06:24:08:aa:
         eb:63:4c:17:34:ed:5b:9e:51:2c:3b:b2:b7:ca:56:82:a9:66:
         44:dd:55:ec:7c:f2:c4:5e:24:d4:fd:c9:d6:aa:1d:67:15:2e:
         36:c2:97:db:46:aa:b3:a1:71:f5:d7:f4:80:87:41:78:2c:86:
         75:ea:fe:04:df:10:58:26:8f:e3:d8:78:f3:55:76:2b:65:be:
         93:32:0d:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPxbT67da3BxyMQbLzJ/xb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzRjZjNlMmZhODkyYjVmZGQzZjMwZGM4Mjc1ZWUxMDYy
ZTFkMDYwHhcNMjIxMDE5MTgwNjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWI0YmUzMDAwMmEzMTUyZWM1YzVlMDY1MDhlYTQxOWMxOWZlMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLldGAY4ZcAk6gFRWH4EmLOb1jRH
2yaeJnwbfOyOC3ltJW/PGUcIRfOFWgqbibEZq4WmZ1w2kCflmRO/fWj5+FbMVsmh
QO5ivectef9M5V6vB3sTo97CFQnEmdVBuBCyZpfZiVXECPLw+YWIZkWaQ4t2ha35
48uAC/Mcqbc/ltgbXOtLK0UnIMi/ZndpXydupqk7Liv3TjEi/Q912G/QIMNvETHU
sGAYitNcSzMHZIALBC51sFdGjdK7fWlG/WB2TArEfFj4hHsXc7Zbl14pu4HN7XD8
7LmsA/x+z9Yrb/Yu5Eau/Uu0MZVtuuOQyI85fRkqEtGxmhg8yxe0+vFoTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMW0vjAAKjFS7FxeBlCOpBnBn+BuMB8GA1UdIwQY
MBaAFER0zz4vqJK1/dPzDcgnXuEGLh0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhUUFBpLW9rclg5MF9NTnlDZGU0UVl1SFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjBiYTEtNmFlOC00YjQzLWE3MDkt
NzU0NWMwNGUxNTc4LzEveGJTLU1BQXFNVkxzWEY0R1VJNmtHY0dmNEc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMjBiYTEtNmFlOC00YjQzLWE3MDktNzU0NWMwNGUxNTc4
LzEvUkhUUFBpLW9rclg5MF9NTnlDZGU0UVl1SFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAjpCMA0G
CSqGSIb3DQEBCwUAA4IBAQChNcx7Gb8K+nqyx8RiWOxlh5UNyItI6X3Yg41TmG83
1OLeDk//HV0L/Dz8o0Z7Bix8dcArSP07rIsf96k+KcdJ5E53qiUdGv6h2gGDtNMk
5w5p8wTOJBkkaZR8fN3bb66CUQEFBTCQjDTF9jPeoyK5xp1nEz5PF+S/K4f4h46n
LA1C9Za3IxEuq+W0mC+7QivyGa0Gy2lV2wRv6ZhHC4oBefBzrdWCO5BFvgLjVgwK
RAYkCKrrY0wXNO1bnlEsO7K3ylaCqWZE3VXsfPLEXiTU/cnWqh1nFS42wpfbRqqz
oXH11/SAh0F4LIZ16v4E3xBYJo/j2HjzVXYrZb6TMg16
-----END CERTIFICATE-----