Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/uV-Zs9HqoMKTCtVO1qTaip8IXI0.roa
File:                     uV-Zs9HqoMKTCtVO1qTaip8IXI0.roa (raw, json)
Hash identifier:          gW3Oe/B+LacCbIQuD3z9+uxqBG8KCAXC2DyO9o8yWHM=
Subject key identifier:   B9:5F:99:B3:D1:EA:A0:C2:93:0A:D5:4E:D6:A4:DA:8A:9F:08:5C:8D
Certificate issuer:       /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial:       E9B4
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/uV-Zs9HqoMKTCtVO1qTaip8IXI0.roa
Signing time:             Fri 30 Sep 2022 03:24:06 +0000
ROA not before:           Fri 30 Sep 2022 03:24:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     4128
IP address blocks:        198.180.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59828 (0xe9b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Sep 30 03:24:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=B95F99B3D1EAA0C2930AD54ED6A4DA8A9F085C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:25:3d:93:fe:74:21:d9:c7:05:58:71:b2:
                    00:6c:74:f7:96:59:53:a8:fb:ef:73:48:75:79:0c:
                    d0:1b:fa:7d:32:bd:97:a1:7b:ec:5d:6f:53:a2:4d:
                    bd:5c:6b:42:0e:2f:63:74:89:eb:d6:62:b7:1c:d6:
                    34:cd:a8:35:a3:05:b6:38:87:e3:28:73:70:19:bd:
                    25:62:df:26:19:41:21:f9:76:fc:19:db:48:4d:0a:
                    dc:80:38:d0:64:6f:0b:1c:b6:d7:d4:ed:76:49:bf:
                    8b:18:cd:9f:fc:71:a5:34:ea:0d:ca:08:22:8b:bd:
                    ef:e6:48:8c:08:63:a5:da:f0:2c:dc:49:58:ff:ea:
                    b2:fe:bd:68:86:15:61:fe:32:e0:cd:e0:64:1a:d6:
                    77:dc:c6:25:3c:7b:89:c8:e8:05:fb:8e:4d:ea:8d:
                    b2:4c:05:52:10:c9:17:d9:8d:62:42:f6:c1:9e:42:
                    54:2a:fb:d5:17:a1:47:67:a7:d5:33:1e:8c:87:3d:
                    cf:fd:c7:c0:3a:7b:80:bf:e8:f4:db:7b:ae:3a:8b:
                    f8:89:4e:a8:4e:31:41:5b:1a:ef:b1:a7:9a:c0:d7:
                    0b:19:3e:c4:b3:ef:5a:ad:51:78:3a:cf:1b:50:99:
                    ce:80:59:5b:51:e7:76:c4:a9:9d:5a:5b:d9:72:06:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:99:B3:D1:EA:A0:C2:93:0A:D5:4E:D6:A4:DA:8A:9F:08:5C:8D
            X509v3 Authority Key Identifier:
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/uV-Zs9HqoMKTCtVO1qTaip8IXI0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:81:97:b7:0f:a8:ff:4a:00:90:fa:b8:a3:c3:1e:93:14:68:
         f7:91:2f:61:15:4b:f1:a4:c0:0e:af:91:0e:68:fa:17:8d:25:
         c1:34:bb:3e:13:c7:62:ea:3a:94:32:7d:38:65:21:fd:81:e9:
         b2:2d:b0:3f:9e:b9:f3:28:64:78:58:5d:16:7b:ed:d7:7c:af:
         b2:ea:03:c8:f3:a0:d9:23:b3:46:5f:b5:da:07:27:ee:bb:73:
         36:ff:2d:0a:ab:3b:2b:bf:b2:f0:ce:83:8a:f5:5f:3e:09:b9:
         4f:71:14:bf:86:40:f8:68:32:ec:4a:49:40:aa:b1:b2:d3:b0:
         e1:ca:47:22:7c:77:e6:9a:0e:1f:aa:af:e0:4e:9c:c9:41:40:
         05:0b:94:09:1d:65:e0:e4:d5:cb:6b:eb:54:17:57:e0:a5:a0:
         ce:88:ad:81:3a:66:9a:71:d2:38:a5:b9:e7:3c:9c:74:72:f0:
         84:bd:16:16:da:86:c9:45:b2:31:90:1f:ec:5b:81:00:6b:ff:
         85:87:8c:06:ec:00:ac:19:4e:d3:63:47:52:e7:58:0c:1a:38:
         4b:33:0a:aa:3a:29:6a:b1:25:2c:a1:44:d6:90:b9:d3:11:f9:
         68:19:49:56:04:50:2f:28:bb:2d:d1:bf:04:d3:33:2b:43:f3:
         2f:1a:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----