Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/e_VnDFC0YA2ouSQyIWkBqU48UIw.roa
File:                     e_VnDFC0YA2ouSQyIWkBqU48UIw.roa (raw, json)
Hash identifier:          s5QXjNJlCtGebTun458ARlFbYm7rSRXTvNso12VB2ys=
Subject key identifier:   7B:F5:67:0C:50:B4:60:0D:A8:B9:24:32:21:69:01:A9:4E:3C:50:8C
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       068ADDAC
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/e_VnDFC0YA2ouSQyIWkBqU48UIw.roa
Signing time:             Mon 18 Apr 2022 21:37:35 +0000
ROA not before:           Mon 18 Apr 2022 21:37:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203279
IP address blocks:        194.50.176.0/24 maxlen: 24
                          2a0a:4540::/48 maxlen: 48
                          2a0a:4540:2000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109764012 (0x68addac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Apr 18 21:37:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bf5670c50b4600da8b92432216901a94e3c508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:31:6f:a3:48:28:ba:a2:ed:56:37:ec:78:
                    1a:e7:2e:7d:d8:bd:45:70:f1:69:2e:73:cd:7f:2d:
                    72:05:31:23:cf:f5:5f:44:e8:56:ba:47:e8:1e:cf:
                    c5:54:19:76:c7:ee:91:50:af:22:a9:1f:f0:07:f9:
                    ea:63:ae:7d:f9:b9:fc:4c:aa:b6:33:a5:00:18:f7:
                    ec:a8:84:f7:75:c5:9c:a5:6a:73:36:7b:cc:d7:6c:
                    13:ec:ca:05:bf:31:25:51:40:2b:3d:9a:ee:3a:10:
                    d5:c1:5f:f6:ce:46:fd:af:b3:f0:37:56:fb:3f:8a:
                    0c:7e:5a:11:10:94:f7:b7:a9:dc:de:4c:85:32:b4:
                    30:02:fe:1f:ac:0c:5b:b8:de:be:9d:55:ed:e9:ec:
                    79:23:d1:5d:6b:c0:78:c9:1b:49:d5:08:50:d7:10:
                    25:15:56:8e:c1:33:b3:83:f3:d8:a5:f5:96:75:37:
                    a0:9e:23:98:48:ef:44:71:c6:2f:3e:e7:a1:0a:ff:
                    e7:67:5e:38:30:61:5e:9d:7d:19:c7:c0:fd:94:7e:
                    72:69:b7:e5:e3:c2:3d:78:9f:53:23:d1:e5:e7:da:
                    12:94:d6:4a:06:ce:4e:05:15:e3:14:44:24:a6:b4:
                    94:f7:d6:f5:6b:8f:d2:71:9c:10:4f:ea:ee:a5:0f:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F5:67:0C:50:B4:60:0D:A8:B9:24:32:21:69:01:A9:4E:3C:50:8C
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/e_VnDFC0YA2ouSQyIWkBqU48UIw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.176.0/24
                IPv6:
                  2a0a:4540::/48
                  2a0a:4540:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:24:00:f7:eb:0b:ec:69:9a:6d:41:67:dd:93:57:74:40:df:
         cf:b0:04:9b:2f:d5:17:98:99:fc:ad:03:4c:d3:55:23:9d:ab:
         68:de:a2:fe:30:da:e1:5c:61:35:01:6b:45:46:89:07:f5:81:
         5f:2b:f5:65:2c:22:90:3e:e9:bc:a4:1d:c4:14:9b:5d:fe:22:
         5d:20:5c:26:02:a9:4d:71:b7:cd:5f:00:42:0f:67:83:14:ed:
         c1:f5:58:e2:0b:93:34:28:9e:38:e6:b9:5c:91:bb:72:78:e0:
         b5:29:c5:d7:e6:98:bb:1d:1a:a8:c2:f5:2b:2c:f1:81:10:46:
         b9:84:b7:3f:3d:1c:b0:fc:11:b6:91:b2:26:e6:97:88:ab:f7:
         ed:1f:74:b9:26:77:44:19:95:09:03:f4:41:a3:1a:01:dc:dc:
         08:3d:dd:5d:0d:ef:cb:12:a7:91:4c:f2:0f:e9:24:ce:5e:61:
         8a:ee:3b:c9:e2:9f:1b:0c:df:70:3e:1d:f9:bd:16:6a:91:08:
         08:b9:fb:0f:5f:60:70:ea:d8:39:16:d6:bb:df:e7:41:3f:e5:
         f8:4e:a0:e2:fe:63:be:c9:ee:b3:72:7b:ce:02:fc:fc:5a:df:
         d1:56:85:eb:45:c2:81:43:1c:8e:09:bd:91:c4:89:58:81:68:
         f4:3e:7c:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----