Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/JFj-muI9AS0-zMBXSXs3nRssV7A.roa
File:                     JFj-muI9AS0-zMBXSXs3nRssV7A.roa (raw, json)
Hash identifier:          7O0rFiknXK1TV3mipgV88AZEjmqMR8IFmGIFgOyaGLc=
Subject key identifier:   24:58:FE:9A:E2:3D:01:2D:3E:CC:C0:57:49:7B:37:9D:1B:2C:57:B0
Certificate issuer:       /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial:       1BBF5DC7
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/JFj-muI9AS0-zMBXSXs3nRssV7A.roa
Signing time:             Sat 01 Jan 2022 11:56:10 +0000
ROA not before:           Sat 01 Jan 2022 11:56:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2116
IP address blocks:        62.176.192.0/19 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465526215 (0x1bbf5dc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
        Validity
            Not Before: Jan  1 11:56:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2458fe9ae23d012d3eccc057497b379d1b2c57b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:b3:52:a2:a1:52:b2:fd:19:26:3b:cc:ee:
                    ac:4d:62:d7:e7:f7:53:3e:e6:34:f7:92:d0:b1:2a:
                    03:07:ca:d4:5d:a6:5f:05:83:e6:c0:50:5e:ba:6c:
                    ee:6b:80:ea:f5:79:39:21:9a:ae:18:0b:e4:e1:14:
                    54:35:9f:93:6f:ba:f5:1b:e7:e7:da:20:ab:45:4f:
                    44:a1:1f:2a:07:49:c4:e3:76:0f:d7:4e:43:7e:6f:
                    9e:92:78:7f:ca:db:ce:45:d3:65:8f:53:8c:b0:22:
                    f3:ca:52:ec:ed:bc:0c:6e:a5:12:e9:98:64:0a:bb:
                    1e:cc:3b:a6:d3:ec:c5:65:31:45:b4:c9:a0:35:ee:
                    26:d5:6e:26:e3:f7:b2:4a:3e:3e:bc:0c:59:c1:cd:
                    d4:bb:03:10:81:67:cb:b3:da:cb:7c:f2:f1:41:82:
                    c5:fe:ba:38:1a:62:99:25:aa:70:86:1f:dd:07:31:
                    1f:13:74:24:20:72:fa:a3:b0:d2:60:ea:c1:be:20:
                    61:f1:2e:da:76:70:50:13:40:9b:7c:07:fa:f9:03:
                    61:a1:93:67:97:ba:4f:2b:1d:18:7a:11:58:ef:80:
                    0d:58:a7:78:f4:3b:5e:be:ea:e2:1b:86:2b:b0:85:
                    24:80:67:d0:a4:93:82:b1:94:bc:d8:96:b2:fa:83:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:58:FE:9A:E2:3D:01:2D:3E:CC:C0:57:49:7B:37:9D:1B:2C:57:B0
            X509v3 Authority Key Identifier:
                keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/JFj-muI9AS0-zMBXSXs3nRssV7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.176.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:a7:c0:55:38:db:95:e9:1e:f3:80:ff:e0:fe:3f:55:6b:
         e5:63:ef:f3:03:72:70:92:77:0c:68:81:2d:a8:ab:19:ce:90:
         83:73:8f:e9:5c:71:0a:b9:29:29:36:34:65:dc:4f:4a:d6:da:
         25:48:1d:e4:30:d1:6b:75:b7:2b:3e:ba:73:e1:39:9d:27:e1:
         a9:83:ba:60:51:6b:42:ce:5c:1c:08:1e:85:e8:38:67:2b:8f:
         26:fb:45:b8:0a:ac:f1:74:f7:1a:1c:04:43:fe:a7:8c:28:5d:
         9f:d7:30:6a:10:63:3f:df:62:df:c2:c5:b6:0d:f0:9c:ee:e3:
         ed:a3:f7:ab:7a:c9:90:b3:dc:e1:3d:e7:68:97:4e:bc:8a:21:
         48:cc:9e:88:71:81:2d:d4:99:65:02:5f:1a:5b:f6:35:dc:a6:
         3c:8d:2f:9e:dd:f7:10:df:44:2a:3b:e6:83:ee:80:75:2a:20:
         a5:97:38:53:be:5e:c9:ab:9b:c6:c6:7b:97:b6:91:00:d8:48:
         35:0e:b7:7a:a9:21:57:2b:85:55:df:2a:08:e0:f6:07:c2:90:
         c9:f9:47:ed:11:98:1b:6a:94:a4:78:d7:2e:14:51:8d:84:c6:
         7a:4d:f7:5f:6b:60:94:fb:b6:9f:89:b7:53:fc:c3:13:6a:7c:
         ef:b7:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----