Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/fRXFQkqDqgM55bVYRukc9_BuCFE.roa
File:                     fRXFQkqDqgM55bVYRukc9_BuCFE.roa (raw, json)
Hash identifier:          KZNMrIc/d0EUlQFdfUsl6P8dzsZOyquFz3MACFD29dI=
Subject key identifier:   7D:15:C5:42:4A:83:AA:03:39:E5:B5:58:46:E9:1C:F7:F0:6E:08:51
Certificate issuer:       /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial:       0152A3A8
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/fRXFQkqDqgM55bVYRukc9_BuCFE.roa
Signing time:             Sat 01 Jan 2022 15:01:23 +0000
ROA not before:           Sat 01 Jan 2022 15:01:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9153
IP address blocks:        193.168.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22193064 (0x152a3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
        Validity
            Not Before: Jan  1 15:01:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d15c5424a83aa0339e5b55846e91cf7f06e0851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fb:7e:47:d3:63:2a:a4:c2:40:74:37:57:78:
                    cb:94:39:00:08:cb:1c:f1:0a:16:d8:f9:29:9a:3d:
                    53:36:94:df:f8:bc:2d:6f:ab:4d:1d:62:c5:6b:da:
                    69:11:44:87:9a:70:4f:19:d8:ad:c4:62:f6:fa:74:
                    54:2b:07:05:58:45:40:ef:ec:5f:11:63:81:38:56:
                    09:e9:c7:a6:e4:97:60:a7:c2:98:20:7c:27:48:cc:
                    6d:2f:fc:0d:16:c3:a6:5a:5c:cf:b5:d9:27:22:b1:
                    ce:09:48:c2:7d:ad:41:27:18:f3:55:dd:63:61:46:
                    ad:44:61:b0:3d:82:13:9d:49:1a:32:8b:4d:d0:d3:
                    04:17:6c:81:12:78:cb:40:08:45:e3:84:cf:d6:14:
                    2b:73:a0:0c:51:39:30:92:19:52:24:e2:84:4c:20:
                    d9:f7:5e:84:40:c7:47:ca:83:e2:75:5d:48:63:83:
                    67:e1:88:ca:7c:d6:59:a3:1c:96:5e:38:ab:99:88:
                    2e:e4:ae:52:78:49:55:d9:32:45:92:8f:00:ca:83:
                    ad:ec:1a:6d:f1:73:e2:96:3b:88:49:a2:44:56:62:
                    6b:e5:3a:f8:b7:86:ae:e5:dd:10:9e:34:3d:ac:26:
                    b6:27:88:3e:53:cb:98:88:8b:9d:e5:94:e5:2e:38:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:C5:42:4A:83:AA:03:39:E5:B5:58:46:E9:1C:F7:F0:6E:08:51
            X509v3 Authority Key Identifier:
                keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/fRXFQkqDqgM55bVYRukc9_BuCFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.168.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:0d:fb:7d:ce:76:62:d9:1d:16:eb:1b:83:a1:a3:95:f3:
         10:31:d9:7e:1e:50:85:d3:94:bb:4b:13:e1:ad:99:f9:f1:ee:
         e4:fd:38:f5:42:c8:1d:30:72:18:41:8f:91:af:56:6f:34:4a:
         a4:b1:c4:db:cf:cd:c4:2c:9c:cc:ee:1f:a6:27:45:2d:20:f9:
         94:cf:39:b3:6d:59:60:96:5e:9b:cb:01:c9:55:b1:b9:dd:f0:
         53:98:01:aa:5b:e8:bf:0e:97:69:46:74:1c:81:aa:17:65:a2:
         74:17:18:18:94:49:a2:51:d7:ca:72:4f:e3:51:fa:2a:dd:d1:
         ca:e1:5d:ff:2d:79:1c:f3:01:1a:ee:66:03:14:1b:0b:d8:09:
         9e:dc:72:8a:5e:ea:fa:88:7e:4b:a4:c7:2a:35:fe:a5:d9:e5:
         60:15:7c:73:bf:61:0f:24:c9:56:cd:ca:3b:3c:cd:cc:d4:a7:
         83:90:64:82:29:ea:5f:9a:34:4f:d9:f5:17:98:6c:94:db:84:
         25:4c:78:b1:fe:b6:ed:9e:8a:97:f1:ec:a6:ad:ee:eb:a0:fa:
         8d:ab:de:c0:73:10:e6:d3:4b:3a:07:f6:b0:b8:51:3d:28:16:
         27:18:eb:b6:49:2e:f2:d0:70:15:0d:46:11:49:ee:75:e9:b7:
         90:23:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----