Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/ueQCwYbx1RDo8ARkZGuHUmgzvuw.roa
File:                     ueQCwYbx1RDo8ARkZGuHUmgzvuw.roa (raw, json)
Hash identifier:          oTH1/oiD7ptyr8yn82eNYJMwO/XOIqP1lsTXhHwCgng=
Subject key identifier:   B9:E4:02:C1:86:F1:D5:10:E8:F0:04:64:64:6B:87:52:68:33:BE:EC
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       06FA044E
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/ueQCwYbx1RDo8ARkZGuHUmgzvuw.roa
Signing time:             Sat 01 Jan 2022 07:54:03 +0000
ROA not before:           Sat 01 Jan 2022 07:54:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44953
IP address blocks:        93.95.248.0/21 maxlen: 24
                          2a02:fe8::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117048398 (0x6fa044e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Jan  1 07:54:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9e402c186f1d510e8f00464646b87526833beec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:b7:ba:89:14:81:21:c5:ac:b9:70:b2:b3:
                    b2:17:42:0c:c3:90:69:99:1a:c3:94:fd:af:80:b8:
                    13:f7:16:2f:37:b3:7d:1c:85:7f:78:78:eb:52:a1:
                    07:37:e0:0e:c2:1e:ef:91:55:86:1d:e6:73:ad:76:
                    b8:c5:bc:cd:e9:f6:82:75:5a:29:53:52:e9:4b:db:
                    cb:38:20:99:9a:e8:d8:62:d7:69:97:c1:5f:e8:54:
                    9c:26:6b:18:2d:c4:36:b5:c2:80:7f:ee:20:64:85:
                    6b:6d:b6:44:c3:36:ed:0f:9f:37:fa:1d:f8:a2:fe:
                    e6:5d:39:a7:67:d1:16:d6:21:49:c0:9b:87:2c:6c:
                    c8:51:85:c2:86:26:54:7c:ee:5f:d4:4c:39:98:81:
                    db:e6:31:d6:a1:f9:2d:50:96:b1:f8:61:6a:79:80:
                    67:f8:f9:bc:28:d1:a1:75:24:1e:47:f1:8c:98:df:
                    02:30:ce:5c:df:a2:9b:be:89:1a:80:0e:05:c9:ce:
                    34:79:3a:54:75:e3:dc:23:d0:4f:23:98:eb:d8:78:
                    2b:18:e7:6a:c3:cd:19:19:dd:05:54:f2:10:dc:ef:
                    14:76:af:8a:00:64:50:d5:26:c8:c2:82:fc:bf:ac:
                    5e:3f:8d:0b:27:4f:92:a5:62:73:e4:32:0c:0e:84:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E4:02:C1:86:F1:D5:10:E8:F0:04:64:64:6B:87:52:68:33:BE:EC
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/ueQCwYbx1RDo8ARkZGuHUmgzvuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.248.0/21
                IPv6:
                  2a02:fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:ce:50:7d:1c:a5:7b:59:33:69:bd:e9:d8:b0:fd:5b:90:
         6f:b5:eb:2e:4e:21:a1:05:2e:9d:2e:6d:d7:f8:9c:21:03:4b:
         bf:dd:76:f9:0e:a0:bb:89:19:37:99:67:b5:4b:07:4c:75:36:
         a0:cc:3c:44:e9:cd:03:50:22:74:43:b7:cd:ba:42:3a:a5:68:
         d1:67:ff:b0:69:07:ac:8c:43:b1:a9:30:8b:bd:83:03:c3:b5:
         32:17:8a:da:11:94:48:98:e0:eb:7e:21:0b:b5:c8:e5:0c:65:
         4b:f7:8c:58:c4:03:80:bb:fa:ea:1e:bf:91:a3:79:54:59:0c:
         f9:19:22:1e:54:f3:fa:2d:75:9c:33:a4:85:23:c7:34:78:83:
         39:12:7d:79:73:fc:f3:ba:21:11:6c:a8:59:7b:26:61:38:75:
         4d:71:2d:2d:b5:ec:37:3a:ab:75:73:2b:52:68:9e:c2:fa:c5:
         c5:35:57:2d:27:6d:7c:5f:66:c1:e3:07:ff:d5:7b:05:46:e9:
         19:1c:d3:d3:e9:81:b9:ac:4b:33:69:6b:3a:86:36:59:56:51:
         60:4c:ed:7e:df:15:15:f4:08:28:a7:cb:30:e7:68:36:76:d5:
         ac:b9:e1:9c:b3:b5:2c:66:23:e9:f4:5c:50:af:d9:d2:c2:4f:
         75:1c:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----