Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/n_0ZLA_TsaYNOj_dOcTsC5tr_ss.roa
File:                     n_0ZLA_TsaYNOj_dOcTsC5tr_ss.roa (raw, json)
Hash identifier:          LCgAGsuLFb5EKekTs6ZylZrix38+VxjAE4/h65nmH0s=
Subject key identifier:   9F:FD:19:2C:0F:D3:B1:A6:0D:3A:3F:DD:39:C4:EC:0B:9B:6B:FE:CB
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       06E06076
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/n_0ZLA_TsaYNOj_dOcTsC5tr_ss.roa
Signing time:             Mon 16 May 2022 12:13:30 +0000
ROA not before:           Mon 16 May 2022 12:13:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57944
IP address blocks:        194.5.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115368054 (0x6e06076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: May 16 12:13:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ffd192c0fd3b1a60d3a3fdd39c4ec0b9b6bfecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:6c:e4:eb:ea:bb:4b:9f:58:8a:aa:19:b1:
                    e3:e8:97:1c:c1:e0:e7:62:82:1a:70:f8:6a:c1:88:
                    84:65:72:3f:6f:d6:fc:48:2d:1b:b6:83:dc:fe:84:
                    1c:87:f3:9a:da:78:8d:4d:4a:5d:85:68:a2:76:34:
                    9d:a7:a7:a4:e8:36:2c:39:fb:da:ff:ec:7b:50:ef:
                    19:b8:ed:8a:d6:48:57:4e:0e:42:d6:29:8f:30:c3:
                    2e:87:83:e5:b7:06:8e:50:d9:74:1c:fc:1a:32:e9:
                    1a:74:f2:4b:4e:8d:e5:c8:c0:ff:e1:1b:11:3c:5f:
                    b3:e9:9f:f0:04:f8:99:9c:98:9b:6e:82:f8:e5:56:
                    45:95:1f:b2:91:64:e5:55:da:5b:71:70:6f:b5:8c:
                    3b:93:f7:36:e0:e1:3b:92:ae:11:17:8f:20:39:ca:
                    44:1c:2d:9c:44:6c:a0:51:6d:de:c6:ac:2e:91:15:
                    99:6f:e8:f4:30:b4:e8:85:85:1f:20:d7:14:4e:a2:
                    36:0b:ed:03:6c:91:99:fe:89:94:9d:07:d3:7c:70:
                    83:b0:f2:99:ca:15:22:35:9c:79:c2:42:c0:b8:5f:
                    20:df:26:41:7d:d7:d0:0a:d3:5d:52:15:61:31:5a:
                    05:b0:65:14:c1:fd:4c:e5:ca:32:fc:68:9d:63:6b:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:19:2C:0F:D3:B1:A6:0D:3A:3F:DD:39:C4:EC:0B:9B:6B:FE:CB
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/n_0ZLA_TsaYNOj_dOcTsC5tr_ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:10:a2:a7:81:64:28:84:f1:cb:47:9c:e7:cc:0c:9d:55:
         c7:09:4b:d8:2b:fa:5e:18:86:dd:67:f1:ec:dc:80:71:17:96:
         84:11:55:51:1b:71:b9:92:7c:d2:22:0d:aa:dc:5f:ef:ab:20:
         a4:96:50:9b:8b:85:98:20:39:c4:18:5c:9d:83:41:90:46:df:
         bc:c6:f4:a1:e1:c2:9f:c1:ea:6e:08:9b:18:ab:1b:03:22:15:
         a9:99:55:83:45:2b:30:40:d1:f0:fd:51:a0:fd:a3:77:e6:3a:
         78:72:22:19:85:d0:91:c4:a6:14:f6:73:5c:a9:bb:6d:14:7a:
         bb:64:fc:ee:1b:b0:f7:79:2a:fa:cd:98:c0:88:d7:64:a1:f1:
         90:66:7a:63:e9:d5:66:cc:51:76:09:62:d1:6a:9a:d9:23:31:
         28:58:f8:f4:2f:1c:a3:47:c2:41:76:ca:34:d3:6a:9a:d3:e0:
         22:af:5b:a8:65:a1:e4:ed:4d:aa:68:c5:02:49:2d:2c:90:eb:
         08:75:c4:7f:06:f4:95:27:f6:0a:cf:73:94:72:25:65:b4:2f:
         52:25:5d:9e:ce:ea:67:c3:05:c7:51:71:44:8e:74:35:3a:14:
         bb:8f:7b:0d:f0:fe:81:69:7a:a1:c2:a5:39:5c:d3:c1:aa:ad:
         9b:bd:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----