Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/E5K4wTKRaBy4dmP4lxESy_aACv4.roa
File:                     E5K4wTKRaBy4dmP4lxESy_aACv4.roa (raw, json)
Hash identifier:          voDxwtzc9fq11uzfK88sEGr0CbHKbOHMPa6GhQNbO5w=
Subject key identifier:   13:92:B8:C1:32:91:68:1C:B8:76:63:F8:97:11:12:CB:F6:80:0A:FE
Certificate issuer:       /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial:       02FA5208
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/E5K4wTKRaBy4dmP4lxESy_aACv4.roa
Signing time:             Sat 01 Jan 2022 03:54:26 +0000
ROA not before:           Sat 01 Jan 2022 03:54:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3303
IP address blocks:        91.212.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49959432 (0x2fa5208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
        Validity
            Not Before: Jan  1 03:54:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1392b8c13291681cb87663f8971112cbf6800afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:65:24:98:75:99:b1:26:b1:1e:94:45:79:
                    7c:d5:8b:5f:4b:8b:28:bd:44:6e:c1:db:87:c9:94:
                    16:e1:84:0b:e7:46:fa:30:8d:43:40:a3:4b:b3:06:
                    29:64:37:a1:10:55:67:14:74:0c:10:8f:15:b3:ee:
                    a0:2f:a7:05:08:07:3f:50:2d:bd:72:c0:86:83:2b:
                    76:ac:59:c3:af:68:8b:54:24:3b:1a:b4:ba:ba:47:
                    06:93:f5:fe:00:b4:41:dc:ef:cf:fc:95:bc:3d:ad:
                    80:d4:7f:83:6d:b8:93:33:75:3c:51:89:5c:60:bf:
                    0a:fc:bd:aa:2e:d1:5c:9b:d9:01:70:27:c5:f6:75:
                    84:0a:5b:43:6d:82:58:7a:3e:54:01:7a:c9:b4:12:
                    69:5e:db:a0:3e:6b:ce:49:79:cd:ab:e0:7f:a8:50:
                    03:c6:43:16:93:32:c4:25:75:05:77:fb:d6:5d:80:
                    67:24:aa:a9:bf:dc:57:32:ea:ca:01:50:c7:b0:2b:
                    e3:c2:2a:77:6a:4e:88:38:95:79:e4:d4:d2:9f:de:
                    28:a7:79:84:e6:8f:6a:29:5c:e6:96:dc:62:95:65:
                    ab:39:fb:28:71:a6:ec:4e:f2:b1:c9:18:a3:a3:bb:
                    ae:67:67:7f:0b:93:49:c2:ff:4d:eb:f4:44:d3:49:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:B8:C1:32:91:68:1C:B8:76:63:F8:97:11:12:CB:F6:80:0A:FE
            X509v3 Authority Key Identifier:
                keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/E5K4wTKRaBy4dmP4lxESy_aACv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:74:f6:d2:a1:37:f9:9c:c5:da:55:bb:56:fc:69:ad:52:8b:
         5c:82:37:e1:fa:86:f6:72:0b:0a:d7:c8:45:f6:f3:43:58:a7:
         76:6a:b8:9c:fb:3b:7a:bc:96:59:c7:6a:f7:90:4a:aa:5a:d0:
         b3:c7:fe:e1:9c:67:18:18:da:27:27:c6:24:c0:aa:8c:31:43:
         ca:88:b9:46:bb:65:e5:06:c2:42:d8:b0:6d:94:2e:7e:ae:e7:
         31:22:0d:c3:67:2b:64:66:79:c6:0a:5a:91:6b:0a:98:b4:9d:
         fd:c1:5b:cb:42:72:62:2d:fd:b2:3b:44:59:fc:8e:7a:a0:a4:
         f7:be:82:44:c3:d5:95:2e:98:18:4e:00:d4:72:40:eb:82:18:
         bf:e4:95:7c:09:92:16:a0:17:d3:a0:fd:b4:0e:d1:7d:4c:b2:
         cb:47:a1:16:08:5b:f2:83:96:d4:48:bb:ab:84:71:63:ed:36:
         d3:3e:3f:98:ad:3b:e9:56:a3:b4:89:34:2a:bf:38:5b:b1:5a:
         33:e6:32:fd:c5:5e:68:4a:17:a5:47:72:e3:8f:6b:7b:0b:f1:
         dc:66:9f:dc:5c:71:62:5f:8f:04:c5:11:7e:12:cd:f4:bc:b5:
         3d:a7:4b:53:79:61:7d:c6:37:52:02:c8:35:54:65:3b:04:70:
         1b:5c:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----