Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/MugWfSQQBXPrlOYyS9nQjyUrNhs.roa
File:                     MugWfSQQBXPrlOYyS9nQjyUrNhs.roa (raw, json)
Hash identifier:          seyg0cwBcnPUZJUNtLH3n70KGALLVUilzXiSTIeoVKU=
Subject key identifier:   32:E8:16:7D:24:10:05:73:EB:94:E6:32:4B:D9:D0:8F:25:2B:36:1B
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       13114ED5
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/MugWfSQQBXPrlOYyS9nQjyUrNhs.roa
Signing time:             Fri 28 Jan 2022 20:53:26 +0000
ROA not before:           Fri 28 Jan 2022 20:53:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44574
IP address blocks:        193.150.34.0/24 maxlen: 24
                          91.230.181.0/24 maxlen: 24
                          193.104.113.0/24 maxlen: 24
                          95.215.174.0/24 maxlen: 24
                          95.215.175.0/24 maxlen: 24
                          2001:678:498::/48 maxlen: 48
                          2001:678:4a0::/48 maxlen: 48
                          2001:67c:16d1::/48 maxlen: 48
                          2001:67c:1954::/48 maxlen: 48
                          2001:678:4a4::/48 maxlen: 48
                          2001:678:49c::/48 maxlen: 48
                          2001:67c:16d0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319901397 (0x13114ed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Jan 28 20:53:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32e8167d24100573eb94e6324bd9d08f252b361b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:28:9d:d2:07:17:f6:88:a1:30:b7:e3:bf:
                    c0:c8:94:34:6e:26:11:83:11:64:e1:bd:20:0d:41:
                    50:2e:74:e5:22:a4:28:a0:ca:c9:91:04:82:9e:b4:
                    7d:15:cd:89:e3:9c:72:ff:dd:e9:06:82:92:50:64:
                    0c:55:6b:b4:26:a5:01:2d:49:d6:ec:6e:b8:49:a2:
                    9a:89:e0:4e:72:a7:52:0a:76:40:ff:8c:95:4d:af:
                    77:5a:e8:12:b5:3a:99:f3:fb:48:27:1d:9a:b1:bf:
                    f3:cf:bc:7e:10:1d:a4:46:84:06:7b:eb:01:ee:1d:
                    c5:3a:c1:de:96:8d:79:28:5a:a5:93:71:d2:56:56:
                    97:a6:ac:43:83:c9:ce:0b:cc:bd:39:17:1c:a0:eb:
                    d5:e0:b8:b1:59:5d:f7:99:e9:0e:16:23:75:f7:d6:
                    bc:08:27:55:c1:69:2c:f1:15:74:35:6e:e6:54:9a:
                    be:02:de:97:9d:66:da:d1:a0:ac:e5:cc:e3:d1:51:
                    7c:2a:29:9b:cc:f5:3f:1c:a6:0c:53:aa:a0:e0:36:
                    51:17:2b:67:c2:ef:a4:f2:84:11:2d:0a:59:37:47:
                    b3:54:9a:5a:7a:13:aa:96:52:39:9f:8f:c3:02:d1:
                    70:c2:8f:e4:14:9b:3b:d7:4c:30:05:0a:8a:03:13:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E8:16:7D:24:10:05:73:EB:94:E6:32:4B:D9:D0:8F:25:2B:36:1B
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/MugWfSQQBXPrlOYyS9nQjyUrNhs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.181.0/24
                  95.215.174.0/23
                  193.104.113.0/24
                  193.150.34.0/24
                IPv6:
                  2001:678:498::/48
                  2001:678:49c::/48
                  2001:678:4a0::/48
                  2001:678:4a4::/48
                  2001:67c:16d0::/47
                  2001:67c:1954::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:d7:44:6c:c8:79:44:c0:63:67:39:b5:9b:35:36:2e:2a:1a:
         5b:c6:20:17:44:56:d5:0e:58:20:1b:48:36:d4:1b:f9:8d:dc:
         12:79:bf:4d:da:9b:a9:d7:36:93:28:8d:ac:0f:d6:31:d3:09:
         36:a6:43:72:dc:b1:c0:07:e9:5e:38:f8:5d:e5:71:fd:bf:1a:
         f4:67:50:e4:ed:a2:51:10:d2:b4:b8:b5:1e:42:25:b3:12:56:
         49:49:bd:f6:f2:0b:08:d8:90:ca:8d:34:f2:e4:f0:c8:27:f1:
         99:f8:83:fc:f1:8e:48:4e:ca:8d:d6:7c:6e:57:2d:9e:26:86:
         4e:09:76:25:04:9e:75:a6:e8:ff:e8:6c:a5:b6:ba:bd:22:53:
         b9:b3:31:7c:9e:c5:20:f5:81:b7:3f:39:33:52:e7:9e:1c:37:
         7e:3c:27:9a:f3:af:c5:c9:8d:17:74:e6:cc:c5:7b:91:3f:74:
         68:fe:5f:64:23:f4:48:bd:54:17:51:78:7a:fc:ae:50:62:16:
         4f:e1:1d:20:ca:a5:35:b0:49:4e:5a:ec:99:80:36:46:65:a3:
         22:cb:2c:c5:de:5e:2b:dd:a3:aa:5d:e3:88:5b:d4:b7:c2:8d:
         89:cf:45:b4:fa:7d:e8:f5:96:72:62:41:ef:19:41:2a:11:0a:
         be:15:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----