Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/5jyrJX5HcoV9vGvO_rH7uuWKkac.roa
File:                     5jyrJX5HcoV9vGvO_rH7uuWKkac.roa (raw, json)
Hash identifier:          imoSGyqbO/G5r/QHt48p3liRDi0b+LilMeoAWWscoto=
Subject key identifier:   E6:3C:AB:25:7E:47:72:85:7D:BC:6B:CE:FE:B1:FB:BA:E5:8A:91:A7
Certificate issuer:       /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial:       0A526C6F
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/5jyrJX5HcoV9vGvO_rH7uuWKkac.roa
Signing time:             Sun 13 Feb 2022 13:35:50 +0000
ROA not before:           Sun 13 Feb 2022 13:35:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59741
IP address blocks:        195.190.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173173871 (0xa526c6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
        Validity
            Not Before: Feb 13 13:35:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e63cab257e4772857dbc6bcefeb1fbbae58a91a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:d3:6b:07:ad:ce:98:d6:93:5c:9c:2c:23:
                    48:67:51:a5:14:4a:91:70:8d:13:11:03:7d:25:9f:
                    57:a5:a0:65:23:16:7d:7b:12:70:70:f0:b7:89:ba:
                    4d:5d:58:69:c2:bc:ac:f3:29:da:a1:77:9b:16:ca:
                    87:bf:42:46:6c:1e:62:b5:37:2d:7f:6e:72:f7:57:
                    c3:92:ee:41:d5:da:d2:c2:34:0a:48:53:8c:34:29:
                    f6:44:0b:06:fd:58:76:a7:a2:5d:d4:a8:40:41:a6:
                    e4:2a:37:f9:89:5b:22:8d:94:de:3c:ec:2d:97:a8:
                    5f:be:a9:ff:b1:ca:38:ba:da:dd:66:41:aa:1c:6a:
                    84:62:72:b4:2a:09:ed:c4:62:2d:fb:40:ef:73:53:
                    b3:81:3a:f0:39:5a:3b:e8:4b:eb:93:6b:d0:db:a4:
                    c9:13:63:d4:cc:89:47:31:a4:11:77:29:2f:51:07:
                    00:45:e0:09:97:1a:96:73:4d:9d:a1:ba:f0:d2:39:
                    9e:3d:ca:ce:49:27:b1:91:0a:1c:f7:a2:3d:ec:f3:
                    ba:e9:ee:d8:ea:b2:7f:a7:50:6b:01:61:e5:1d:f3:
                    5b:0c:5e:d2:a4:65:12:9f:af:de:d3:ae:44:8f:96:
                    af:af:e9:04:82:aa:ab:88:fd:06:5b:52:78:08:91:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:AB:25:7E:47:72:85:7D:BC:6B:CE:FE:B1:FB:BA:E5:8A:91:A7
            X509v3 Authority Key Identifier:
                keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/5jyrJX5HcoV9vGvO_rH7uuWKkac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.190.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:86:ac:35:c1:de:57:51:fd:ef:4a:f4:66:bb:5a:03:dc:95:
         b8:e4:4d:3a:31:7c:94:d8:de:f3:f8:40:00:db:88:4b:a2:d9:
         d1:33:e0:e9:3e:cc:7c:e3:68:3f:8c:34:57:ca:d0:44:bb:b7:
         45:11:83:04:cd:e4:e8:d1:dc:94:ba:11:c1:c3:e3:13:4a:b2:
         27:bf:d0:91:83:5d:a9:10:cd:43:71:5b:7a:9e:2c:7c:5b:34:
         09:cb:ff:b0:81:c2:1b:a8:f9:b8:82:34:4d:97:38:bd:64:64:
         fc:f4:60:9e:75:e6:b3:27:18:79:13:dc:dd:b9:93:0b:21:4d:
         0e:5c:26:9d:0d:5e:73:c1:a2:a6:e4:90:b0:b9:e6:74:b3:df:
         c6:2a:35:b3:5d:ba:76:3e:07:64:7b:f8:8c:78:01:c0:d1:63:
         6d:7f:25:47:46:dd:7f:ff:fa:21:ae:82:da:5c:6a:20:48:71:
         0d:33:44:27:27:4f:e7:73:86:5c:62:f1:4a:8f:cd:52:cf:ee:
         c4:62:eb:76:d6:a9:50:9e:bf:f8:64:49:16:c5:b4:57:7b:06:
         f0:70:75:c8:6d:27:ef:2b:16:71:48:50:69:23:fa:c5:20:2e:
         93:54:85:93:0b:fa:d0:b3:ad:d6:b8:74:c0:47:1b:6d:ff:42:
         d7:ce:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----