Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/OKlNHvRjzgWkRkqTkpCfRThOsWM.roa
File:                     OKlNHvRjzgWkRkqTkpCfRThOsWM.roa (raw, json)
Hash identifier:          E1Vh2BO4ANwZ+FUGyBaViAoCrZ4X4UAXJDtosMdajpE=
Subject key identifier:   38:A9:4D:1E:F4:63:CE:05:A4:46:4A:93:92:90:9F:45:38:4E:B1:63
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       07ACC198
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/OKlNHvRjzgWkRkqTkpCfRThOsWM.roa
Signing time:             Wed 22 Jun 2022 16:41:32 +0000
ROA not before:           Wed 22 Jun 2022 16:41:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     394548
IP address blocks:        5.183.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128762264 (0x7acc198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Jun 22 16:41:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38a94d1ef463ce05a4464a9392909f45384eb163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:b4:06:5f:de:b5:62:c5:49:74:d7:c5:4c:
                    3d:4b:ff:05:7f:2f:d8:0f:40:8b:e9:34:5e:52:6f:
                    bf:b0:53:7d:2c:79:2a:b7:28:39:9e:b5:7d:28:f3:
                    78:d8:71:50:b8:6e:92:30:45:ae:c8:7b:3a:ad:5e:
                    8d:1c:ff:48:27:12:d1:25:90:ca:89:e9:a2:db:09:
                    65:35:93:10:e1:c3:2d:d7:06:97:ff:e3:6e:c5:d9:
                    e6:2e:5e:fc:6e:b8:d4:dd:11:29:56:25:a0:92:f3:
                    ae:af:8b:f7:a7:62:12:ea:a9:6a:f6:4b:bd:48:32:
                    a5:53:41:da:7d:9f:8a:93:ad:a5:c3:bd:86:d2:92:
                    f7:dd:5c:13:c1:df:8a:a7:d9:79:c2:8a:62:b4:b1:
                    c9:2e:23:3a:91:25:ee:c6:d5:69:39:35:bc:07:27:
                    43:8c:f9:90:37:92:f9:64:7f:8e:94:ff:06:97:cb:
                    a4:d4:af:46:f0:0b:25:68:d3:20:a2:f0:01:bc:b6:
                    2f:67:5b:7e:a3:44:51:9e:4e:fc:38:ee:39:c5:80:
                    df:f8:b4:39:5f:a2:a7:94:04:33:21:d4:64:41:27:
                    73:ec:2a:5e:c4:9d:4e:0d:00:79:8a:bd:93:a6:7f:
                    f2:f1:77:20:1d:a0:54:ab:4b:4b:c0:68:52:5f:83:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A9:4D:1E:F4:63:CE:05:A4:46:4A:93:92:90:9F:45:38:4E:B1:63
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/OKlNHvRjzgWkRkqTkpCfRThOsWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:49:66:e9:7b:ea:72:d5:c1:51:a8:80:c1:a9:dc:e0:36:1c:
         5f:e8:38:b2:be:ba:fc:b0:32:90:18:0e:5a:b4:da:a0:ba:f7:
         7d:27:cd:e5:0c:db:9a:9f:ee:c7:f7:3f:b2:28:02:15:61:bb:
         dd:7a:7d:12:c6:56:3c:89:c2:ed:fb:80:84:74:d8:72:b3:2a:
         4a:ff:9a:8a:62:41:94:1e:6e:aa:dd:1c:d3:fe:d1:32:9f:bc:
         45:e1:19:9a:87:b4:86:30:e9:d5:99:36:54:6d:ba:3c:a0:2a:
         74:ea:f5:4e:0d:d5:54:f4:98:97:67:b6:2c:62:e2:10:5e:2f:
         95:3f:ae:23:49:00:7d:d7:05:f0:c1:ac:b1:9b:4d:50:d2:b5:
         ee:4b:df:7e:8f:8f:f9:d7:2a:83:73:e0:8d:09:20:cf:c7:2e:
         d1:2b:7b:f9:6b:7a:42:1f:6b:fd:e8:53:7b:32:e6:c6:41:a4:
         00:fb:2f:f4:6e:37:bb:52:4e:10:6f:c2:3f:b5:71:ae:f0:cf:
         4f:08:42:71:01:f0:91:cb:b6:73:f4:3a:ca:e1:28:49:5f:ec:
         6c:2f:75:7f:69:74:1f:16:ac:00:13:84:73:12:e5:9a:c2:a5:
         a8:f7:a6:25:ee:e3:4e:2a:a1:1d:76:d5:dd:73:89:e8:57:c9:
         ee:b1:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----