Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/1-PoBaU1uZ1uQHvgY36bRu7xyQQo.roa
File:                     1-PoBaU1uZ1uQHvgY36bRu7xyQQo.roa (raw, json)
Hash identifier:          NQHvTcRQtHJn+DJ00uZu3tBqap6tB6Epvg/YLfPP3Gw=
Subject key identifier:   F8:FA:01:69:4D:6E:67:5B:90:1E:F8:18:DF:A6:D1:BB:BC:72:41:0A
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       04F86810
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/1-PoBaU1uZ1uQHvgY36bRu7xyQQo.roa
Signing time:             Sat 01 Jan 2022 12:06:25 +0000
ROA not before:           Sat 01 Jan 2022 12:06:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15576
IP address blocks:        193.8.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83388432 (0x4f86810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Jan  1 12:06:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8fa01694d6e675b901ef818dfa6d1bbbc72410a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:b0:1a:dc:3a:b3:27:f7:c5:8c:7c:83:42:
                    2b:23:77:fe:66:00:ea:ee:91:2a:a2:f7:fa:ec:d9:
                    0a:0f:7c:e8:0a:a0:5a:6b:8b:21:1a:2c:95:90:1c:
                    fc:1d:dd:da:81:ac:3d:9b:21:21:62:3a:f7:6e:d0:
                    22:61:35:70:cb:e9:44:2a:01:1b:17:b2:23:8d:99:
                    a7:65:3a:ea:bc:25:68:87:b7:25:0c:e9:3d:d9:99:
                    c0:44:6e:03:0a:73:83:1d:94:0b:86:ab:f5:8c:83:
                    ab:be:50:88:0c:5d:c6:e4:c9:83:6b:c8:f7:7e:c2:
                    b9:24:30:c8:07:30:7e:ff:49:bb:95:73:f5:63:b2:
                    d6:c6:50:af:67:15:3a:b5:7d:d3:d1:66:fe:84:52:
                    bb:6a:66:10:49:75:48:0e:7b:84:2c:d2:a7:92:d0:
                    31:b3:a3:77:68:3c:85:34:e1:7e:eb:55:65:46:b2:
                    3c:e1:1d:c3:25:0d:99:8f:d7:12:12:3f:fe:3a:05:
                    0f:2a:24:2a:13:e5:b0:ad:c7:01:37:a0:35:ef:4c:
                    ab:40:ed:87:7f:38:d2:a6:58:40:bc:c6:6e:ac:c9:
                    a1:a4:95:77:db:e3:9f:d0:bb:2a:ea:63:f8:de:e7:
                    c7:cb:0e:db:22:b9:61:40:45:5d:ce:1d:af:fb:96:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FA:01:69:4D:6E:67:5B:90:1E:F8:18:DF:A6:D1:BB:BC:72:41:0A
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/1-PoBaU1uZ1uQHvgY36bRu7xyQQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:6c:1d:50:78:aa:4e:08:96:b4:0c:ea:d4:e0:63:ff:40:77:
         05:2c:fb:a8:4a:2f:06:6b:0b:1f:b2:ac:26:93:76:e2:b0:82:
         cc:12:8a:0b:40:67:5e:e7:cb:0a:d4:a7:72:3b:44:af:68:28:
         a4:e9:28:ea:68:ec:c6:e6:9b:09:47:9a:59:6c:f0:56:8d:52:
         16:d5:88:cf:6b:86:1d:cd:0c:19:57:83:64:37:48:7c:ff:15:
         f9:94:4d:67:50:d4:42:93:f9:61:9d:f4:72:23:cf:95:20:ca:
         14:86:90:4a:1f:4e:e2:53:e3:46:b5:29:b3:0f:40:81:94:e2:
         d9:1b:d0:73:02:54:a8:1c:3f:55:d6:ef:20:d6:b9:e2:52:ac:
         f6:64:a8:2d:56:d2:7e:ae:5e:d9:de:fc:1a:3f:82:24:24:8b:
         25:8b:d5:bb:43:e2:24:0f:31:fd:eb:b9:54:b3:e4:af:49:83:
         df:a9:0d:f8:d1:ce:0e:f7:38:5f:04:c8:3b:82:55:ed:49:6c:
         ce:dc:be:f8:35:fb:3e:98:9a:7a:31:c1:ff:92:83:4a:c5:ea:
         41:fa:c1:d3:c7:35:09:ab:f6:1f:6c:09:ea:9a:4c:33:ac:12:
         97:bc:30:f8:48:f2:95:61:a2:20:b7:6d:0c:73:44:49:17:29:
         f8:49:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----