Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eC_4eZogJ7AVli3BuhF7ArNND-0.roa
File:                     eC_4eZogJ7AVli3BuhF7ArNND-0.roa (raw, json)
Hash identifier:          xcUQ3fhYfI4TVD04FU4HFtvZ4Aog4IyRbwErpAkUt1o=
Subject key identifier:   78:2F:F8:79:9A:20:27:B0:15:96:2D:C1:BA:11:7B:02:B3:4D:0F:ED
Certificate issuer:       /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial:       082535A9
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eC_4eZogJ7AVli3BuhF7ArNND-0.roa
Signing time:             Sat 01 Jan 2022 05:54:58 +0000
ROA not before:           Sat 01 Jan 2022 05:54:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47787
IP address blocks:        5.154.174.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136656297 (0x82535a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
        Validity
            Not Before: Jan  1 05:54:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=782ff8799a2027b015962dc1ba117b02b34d0fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:1e:4a:82:6c:fa:0b:ea:f5:dd:4f:f4:ec:
                    1e:62:fc:f0:98:5e:23:ed:b4:65:fb:d2:9f:3e:0d:
                    ce:9d:c4:6a:8b:06:e9:f5:44:85:f1:d4:44:ac:2a:
                    b7:b6:f9:ae:a3:78:6a:8d:23:fd:d3:b3:dd:81:a1:
                    89:da:6b:f8:c6:cd:fe:b6:3a:7d:05:da:3f:d0:56:
                    cf:c5:41:65:b0:32:12:b2:8b:5e:7d:6c:4d:0b:14:
                    d2:c2:82:80:9f:93:0d:b8:bc:78:a5:6c:f9:7e:ab:
                    15:67:3b:aa:5c:b4:6b:5d:62:e3:d1:82:2d:62:52:
                    09:f0:4a:2c:83:38:50:59:b7:04:ad:82:73:27:75:
                    c9:37:89:79:cd:7b:d2:dc:44:a5:17:fe:83:bf:6e:
                    7e:72:e8:bb:b2:84:18:43:18:1b:57:ae:0a:ab:2a:
                    51:65:b2:63:7b:87:68:5b:ea:51:3b:7d:47:a5:2d:
                    c2:65:93:f3:53:90:fc:31:e0:95:30:5e:d8:e8:c9:
                    7a:1b:4d:c8:3e:90:81:ef:21:f4:02:ed:bf:bc:48:
                    09:a9:63:9a:be:d1:0d:9e:1d:98:2e:32:35:c4:20:
                    42:0d:e4:65:1c:b3:85:3a:3f:ad:8a:6e:dd:eb:76:
                    46:a1:ca:fc:90:52:a6:7a:1b:73:48:41:87:09:c3:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2F:F8:79:9A:20:27:B0:15:96:2D:C1:BA:11:7B:02:B3:4D:0F:ED
            X509v3 Authority Key Identifier:
                keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eC_4eZogJ7AVli3BuhF7ArNND-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.154.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:4c:64:b4:c0:39:fc:87:85:41:21:76:30:e5:85:7a:2d:fa:
         d3:5f:53:07:2b:65:be:20:07:12:b8:6d:b4:c2:58:ac:de:26:
         8a:61:8d:98:8d:20:00:f1:a4:27:84:87:be:3e:6b:93:4a:ab:
         b8:74:83:30:70:92:7b:d1:e1:93:45:a0:0d:c7:d4:b8:e5:16:
         5e:3d:69:6f:c4:43:f3:2c:10:d0:77:25:36:cf:47:26:d9:71:
         1e:86:71:a3:1d:d0:c9:aa:5f:f2:70:de:61:3b:d2:0a:d0:b3:
         9c:02:81:3a:cc:7f:ca:b9:5d:1a:02:c6:71:9e:6f:ca:47:d8:
         15:d2:4f:81:6b:21:1c:46:79:f9:c6:1d:5b:c2:c9:4f:63:e1:
         61:88:a2:10:2d:9f:bd:40:a6:be:f5:c5:04:9e:2c:c1:1f:1b:
         41:34:49:b8:30:54:d7:fd:cd:84:4d:a6:35:7d:d7:37:b3:d7:
         3a:6c:36:60:91:29:a7:3e:1c:e2:15:f6:29:fd:9c:89:28:42:
         b7:34:7f:7a:fe:2b:0b:23:ed:eb:71:95:5b:05:0b:11:3d:c9:
         fe:c9:37:0b:7b:52:57:05:ca:69:b8:ad:46:a3:be:62:eb:b8:
         24:05:bb:df:c0:9d:04:dd:5f:8f:33:fe:0f:57:ed:97:a9:85:
         89:da:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----