Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/cMGMRIBN35_sXIxdbXQBG-0GyrQ.roa
File:                     cMGMRIBN35_sXIxdbXQBG-0GyrQ.roa (raw, json)
Hash identifier:          uO/OLgyyfncmOywrzoTv+4ip1tUIKXR8kRrtSbacABY=
Subject key identifier:   70:C1:8C:44:80:4D:DF:9F:EC:5C:8C:5D:6D:74:01:1B:ED:06:CA:B4
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       8D49BA
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/cMGMRIBN35_sXIxdbXQBG-0GyrQ.roa
Signing time:             Thu 23 Jun 2022 19:56:18 +0000
ROA not before:           Thu 23 Jun 2022 19:56:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48314
IP address blocks:        91.214.8.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9259450 (0x8d49ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Jun 23 19:56:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=70c18c44804ddf9fec5c8c5d6d74011bed06cab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:69:d6:3d:38:f8:4d:54:1f:76:42:2f:28:
                    7b:86:dc:5f:10:59:f7:4d:9a:40:dc:3c:21:6e:e7:
                    24:5b:85:7d:75:b4:c2:1a:3e:27:c3:b3:b7:92:86:
                    ec:9f:b8:75:5b:18:2c:1d:cd:50:fb:bb:6c:fc:1e:
                    f4:0d:f5:71:ae:f4:f3:24:22:5b:ba:90:aa:3d:a1:
                    27:10:5f:23:01:6e:2e:fa:85:e3:44:37:07:ca:b8:
                    45:e4:f4:2a:c4:75:09:62:e8:6d:fd:f5:3a:d1:fd:
                    13:f0:9c:d4:44:3f:b5:b0:e3:32:a2:0e:61:b2:9a:
                    c4:55:66:25:94:e6:9e:b2:4b:ef:f3:0a:cf:6c:a3:
                    83:53:70:24:7a:8d:6d:9d:5e:f0:05:84:c4:16:c4:
                    70:48:4d:44:f5:91:09:b0:33:cf:77:77:d0:59:20:
                    31:4d:d1:41:1a:00:a3:84:91:bf:14:73:42:b9:16:
                    80:4e:6d:3e:00:ef:74:7b:2f:cb:7c:dc:45:8a:aa:
                    bf:6b:b0:79:79:a0:8b:1a:d0:a8:93:bd:e6:07:82:
                    cc:2a:3c:ee:ae:ec:05:6c:d0:55:f0:fa:cf:0e:75:
                    81:22:a8:20:26:89:44:35:85:9a:bd:e6:aa:04:d0:
                    d5:0d:ad:63:8a:2c:f5:3e:fe:9e:4e:ad:d8:d3:1e:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C1:8C:44:80:4D:DF:9F:EC:5C:8C:5D:6D:74:01:1B:ED:06:CA:B4
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/cMGMRIBN35_sXIxdbXQBG-0GyrQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:57:92:8f:56:98:1a:5f:8e:cf:92:a6:3b:c5:9a:45:49:
         0a:2b:e0:1f:54:29:dd:8d:d2:f0:2b:35:33:3c:c2:de:01:61:
         25:df:f2:a0:eb:31:a3:c2:65:1c:b0:70:7a:9f:bb:6c:27:22:
         8b:cb:03:b0:49:59:91:3e:8b:43:cf:3b:07:5d:39:e7:11:6b:
         aa:c5:4e:38:33:7c:2b:90:19:42:b7:8f:93:e9:61:e9:a2:4b:
         ee:ea:78:3c:75:c1:a0:96:b2:ef:80:40:40:4f:65:61:2b:ee:
         5c:3e:a6:81:b8:c4:15:93:10:02:8d:43:b3:58:49:b0:d5:a7:
         c3:f8:06:f3:70:80:fd:2e:a0:32:2a:c8:b5:6e:c0:88:7e:7d:
         78:1a:b0:d2:44:49:6c:69:d4:1b:08:e8:2a:d5:47:b3:04:89:
         0e:a1:13:ae:13:79:9d:4b:8d:2c:80:90:20:a0:9c:88:a1:c6:
         63:f8:13:40:44:5c:0a:11:28:b2:a7:16:0b:a0:18:31:26:ac:
         35:2d:1a:3b:4e:6d:9a:7e:22:ed:1e:28:29:0a:6b:b4:1c:97:
         4d:d7:55:a4:9d:52:22:be:2b:5a:fe:a9:c7:64:c6:1a:bf:b4:
         03:29:f2:68:f7:28:a2:16:5c:68:5f:ab:f8:9b:d4:cd:a9:dc:
         9e:15:fc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----