Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/EcXf-gGNqkTtmteBXPPbGIFHTlU.roa
File:                     EcXf-gGNqkTtmteBXPPbGIFHTlU.roa (raw, json)
Hash identifier:          VD4Ys6ddoJnJRp61MCYoKaC00sl342cQYDTrgACIv0U=
Subject key identifier:   11:C5:DF:FA:01:8D:AA:44:ED:9A:D7:81:5C:F3:DB:18:81:47:4E:55
Certificate issuer:       /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial:       01846C0032DCC267196AF57EB78B94DFB559
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/EcXf-gGNqkTtmteBXPPbGIFHTlU.roa
Signing time:             Sat 12 Nov 2022 13:21:03 +0000
ROA not before:           Sat 12 Nov 2022 13:21:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207744
IP address blocks:        188.190.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:6c:00:32:dc:c2:67:19:6a:f5:7e:b7:8b:94:df:b5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
        Validity
            Not Before: Nov 12 13:21:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11c5dffa018daa44ed9ad7815cf3db1881474e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:b1:41:c9:ac:30:08:65:be:5c:0e:8d:74:
                    3f:30:3e:ed:57:6e:8b:9a:f5:1e:ae:da:1e:67:6e:
                    31:31:5a:66:64:1b:b5:68:b1:eb:22:d6:b1:a7:9f:
                    84:37:f5:47:9c:71:7b:4a:2d:4b:06:fd:ec:90:1f:
                    80:66:a2:c4:1b:64:51:ef:db:c2:98:ca:7e:1d:09:
                    fd:4b:40:fc:50:73:91:38:90:55:ed:73:a4:e5:8b:
                    27:f0:5d:d1:89:2e:bd:26:8b:8d:a0:2e:2f:7b:c8:
                    22:f6:d2:47:19:5b:83:8b:ca:3f:03:5a:0e:f6:cf:
                    f5:46:44:33:29:86:0f:c3:1c:61:0c:c8:e3:48:d5:
                    24:47:9f:6b:97:d9:dd:4f:be:32:d7:5c:59:be:91:
                    53:7c:0c:c8:8f:8a:a0:bc:7a:aa:6b:3d:30:ee:5c:
                    1b:fc:6c:c6:57:bf:b5:03:94:01:cb:58:9d:55:52:
                    ea:b8:06:48:dd:dd:0c:f1:20:52:fc:12:8a:fb:fa:
                    4d:4d:9b:09:c9:e8:7f:d6:27:99:30:f8:f0:2f:92:
                    ab:4b:93:bb:04:df:13:dc:13:0c:d6:32:58:8c:d4:
                    3d:7c:04:14:b5:ee:71:14:df:e7:e2:97:02:40:37:
                    bc:bf:77:10:1d:8e:3c:a7:a1:bc:88:6e:fb:5c:56:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C5:DF:FA:01:8D:AA:44:ED:9A:D7:81:5C:F3:DB:18:81:47:4E:55
            X509v3 Authority Key Identifier:
                keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/EcXf-gGNqkTtmteBXPPbGIFHTlU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.190.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:a6:e3:13:60:e7:b6:08:99:05:8c:7c:63:26:ca:a2:ab:4f:
         9a:27:66:4f:34:1b:b7:f4:74:38:b1:9b:a2:91:ec:ba:e6:60:
         6d:ad:31:fd:f7:93:82:f5:03:9e:12:82:0d:dd:2f:b8:7a:5d:
         c8:12:83:9c:fc:23:da:71:c1:65:fe:39:a4:3f:46:fa:37:d7:
         0c:6b:24:bc:e9:c8:95:55:c2:75:c7:0e:3e:54:67:97:e6:e4:
         15:89:d8:03:1c:d0:5b:0f:d0:af:d4:a8:7f:56:f5:9b:cc:1c:
         6d:32:d2:30:62:c4:cd:4b:f5:95:59:66:5f:10:39:30:0d:d1:
         f0:8d:42:ee:c4:dc:74:52:70:e5:cc:d9:da:80:52:4b:dc:73:
         b5:20:69:01:b6:ff:f9:a1:34:8b:8e:89:6d:9c:3a:46:9d:68:
         3b:7d:3a:30:ba:7c:34:b0:e2:71:74:bf:a8:1e:79:04:e7:92:
         0e:d1:d1:b4:6a:f5:0b:79:93:78:89:d9:78:18:38:e8:49:94:
         86:dc:97:da:fd:ac:f1:75:f3:d6:01:8d:18:08:99:4d:34:18:
         d9:81:47:02:28:11:6c:9f:82:d1:42:e1:5f:80:3d:67:fc:77:
         4f:bd:18:b7:c6:c6:83:10:cb:28:dd:0a:fc:6e:85:2b:5d:79:
         3a:65:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----