Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ybI3lo7ZeOZu6eMePugzDgeNWCU.roa
File:                     ybI3lo7ZeOZu6eMePugzDgeNWCU.roa (raw, json)
Hash identifier:          ABdt2335NJE/CO/PYCXCmTNaxweafisEjt1pUMjoPwE=
Subject key identifier:   C9:B2:37:96:8E:D9:78:E6:6E:E9:E3:1E:3E:E8:33:0E:07:8D:58:25
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       0F7DF16E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ybI3lo7ZeOZu6eMePugzDgeNWCU.roa
Signing time:             Sat 01 Jan 2022 08:05:01 +0000
ROA not before:           Sat 01 Jan 2022 08:05:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45029
IP address blocks:        193.232.166.0/24 maxlen: 24
                          2a0c:a9c7:166::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259912046 (0xf7df16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  1 08:05:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9b237968ed978e66ee9e31e3ee8330e078d5825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:9d:dd:df:e1:5d:fe:d0:d6:8f:ab:f6:ef:
                    24:09:ea:48:ff:d9:de:5e:a0:25:56:aa:54:1d:0f:
                    02:0b:3d:75:52:83:d1:3c:e9:e2:20:84:3a:66:78:
                    f1:06:71:9a:47:d5:e4:5c:61:55:f8:a8:02:68:07:
                    fd:6f:4b:3c:a4:e0:cc:ae:16:75:55:22:d6:4c:ea:
                    c6:40:98:59:40:50:e1:ce:9b:5d:26:e9:7b:ea:d6:
                    2b:a3:fb:43:95:d7:86:f6:c6:76:51:2a:93:9a:cf:
                    66:68:f6:6f:d9:04:1b:83:c3:0d:c9:32:a9:84:5a:
                    b2:aa:5d:95:43:c1:4e:7d:e7:8d:d6:a8:80:9f:66:
                    e1:d9:86:28:9b:3e:ee:08:27:2f:4c:9a:87:74:a2:
                    1b:d6:20:99:dd:63:c3:e5:0e:b6:79:01:8f:6a:c7:
                    66:df:a2:ed:2e:aa:2b:33:0e:e1:79:a4:b2:fc:3d:
                    53:9c:3f:e4:23:ed:82:2e:05:90:1e:e2:06:13:e5:
                    67:c0:ac:c1:0d:fc:33:f0:e3:98:1a:93:bb:f0:c9:
                    a2:68:2a:10:a6:e6:f2:c4:cf:7c:ed:c3:78:26:da:
                    7c:15:79:e0:96:80:3f:83:d4:9f:6e:5e:2f:c0:a3:
                    5d:e7:d6:64:81:c1:be:99:c9:23:b6:fe:9d:ae:1b:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B2:37:96:8E:D9:78:E6:6E:E9:E3:1E:3E:E8:33:0E:07:8D:58:25
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ybI3lo7ZeOZu6eMePugzDgeNWCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.232.166.0/24
                IPv6:
                  2a0c:a9c7:166::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:43:63:e6:8e:52:37:be:68:4a:e2:ad:3f:91:91:dd:17:76:
         d2:8f:e7:2b:58:e2:73:c4:ff:f8:45:e1:7c:62:44:37:ce:b8:
         c0:c7:75:9c:c9:26:eb:46:cf:1b:36:e8:6e:7b:7a:e4:76:c2:
         af:3a:fd:d8:a8:50:fb:f3:e4:f0:14:5c:c4:e4:0d:a9:ce:7e:
         df:a6:79:dc:7f:bd:ff:2c:a4:5f:5d:b0:e9:ba:82:12:1a:ee:
         a7:83:2f:ba:b0:2d:86:4c:33:bf:5b:8f:81:a4:fe:22:6e:1b:
         c6:6c:8b:a6:27:79:e7:6a:c4:85:45:97:59:b7:fd:a0:5f:75:
         89:b6:a2:79:eb:12:58:e5:ca:6a:3a:42:13:aa:b8:55:2c:48:
         d8:80:30:73:c8:0b:62:4a:42:9c:fb:9d:d8:58:56:a8:28:07:
         df:f0:2e:16:82:27:c9:b7:03:6c:a4:24:71:40:ae:cc:d3:5b:
         03:f9:64:45:f3:bc:01:fc:c3:34:d3:37:99:9a:1c:c9:ae:f5:
         18:9b:05:74:3b:74:55:fb:52:61:9e:07:c9:80:8b:7d:c6:d4:
         97:9b:03:fe:fe:14:41:e0:d7:3a:f2:4d:51:4d:cf:b7:10:3e:
         aa:ed:bc:56:64:bc:31:e6:fb:31:51:76:35:f1:40:cb:51:dd:
         71:14:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----