Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EdhUScZhUqKEF2xJC47FSZd5OEI.roa
File:                     EdhUScZhUqKEF2xJC47FSZd5OEI.roa (raw, json)
Hash identifier:          cyJj+t+wZ+LnH0Bycks6NgpqFZpoccmK5mfpsRmt+G4=
Subject key identifier:   11:D8:54:49:C6:61:52:A2:84:17:6C:49:0B:8E:C5:49:97:79:38:42
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0E0DB34C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EdhUScZhUqKEF2xJC47FSZd5OEI.roa
Signing time:             Sat 01 Jan 2022 01:58:10 +0000
ROA not before:           Sat 01 Jan 2022 01:58:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3170
IP address blocks:        195.133.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235778892 (0xe0db34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  1 01:58:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11d85449c66152a284176c490b8ec54997793842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:ce:df:f4:72:80:c8:d2:5d:d0:09:d0:bc:
                    a7:ab:30:bb:dd:c8:14:5e:df:da:71:9e:41:fc:b7:
                    6c:e7:4c:61:bf:74:0a:65:31:03:c1:a9:08:f4:52:
                    a0:50:27:e3:63:ee:ea:09:38:c2:f2:e7:4f:b9:0c:
                    12:f1:da:bc:1d:26:98:46:c8:ed:18:b1:96:5d:32:
                    46:53:6c:68:3a:b1:8c:12:e7:20:70:98:af:ca:fb:
                    1e:25:2a:9d:96:ad:c3:0e:de:73:7d:61:46:b6:09:
                    3e:d8:fd:04:78:a0:c4:7f:a3:21:d3:60:c4:51:63:
                    40:76:46:48:34:0f:46:23:0a:77:30:aa:3f:a5:4d:
                    78:6f:59:04:d9:ed:55:b1:56:d0:92:ff:54:f3:2f:
                    fa:82:56:3d:0e:10:ff:e5:2f:a8:82:41:32:bd:6a:
                    22:e6:7c:93:f0:4c:99:df:fd:ea:14:96:b4:a9:bd:
                    84:5b:30:25:fa:6f:f0:66:da:78:37:8a:c2:3f:06:
                    7f:d8:bb:c4:7f:05:d8:f3:27:22:b4:ca:b5:dd:60:
                    dd:09:c6:2b:54:1f:95:c5:af:65:43:54:f8:ee:e1:
                    e0:30:e1:10:5f:b1:59:77:79:f2:e2:40:83:34:0b:
                    26:0b:53:1b:92:3d:61:36:1a:df:d6:33:e0:71:eb:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:54:49:C6:61:52:A2:84:17:6C:49:0B:8E:C5:49:97:79:38:42
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EdhUScZhUqKEF2xJC47FSZd5OEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.133.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:50:1d:5a:ce:db:bc:9b:13:52:57:14:37:c5:1d:8e:73:
         c9:72:b6:3e:00:09:b1:33:56:91:4c:0c:8b:5e:c9:bc:73:09:
         dd:07:41:4b:a2:b1:35:cc:8e:48:0a:5f:fc:5d:ff:9e:25:00:
         76:79:50:0d:8a:13:33:86:59:cd:c9:c3:22:80:ce:44:a7:cd:
         c8:d1:04:b8:af:34:d1:56:62:f7:c9:04:7c:93:8c:09:db:14:
         4d:ce:a4:05:c2:20:2a:13:04:32:03:dc:bd:c3:e9:c6:b0:22:
         20:fa:61:62:3a:00:c4:3f:9c:f8:98:c6:a0:54:23:57:fe:e1:
         c5:9d:c1:4b:41:4c:52:11:54:d5:0e:71:9d:d4:eb:a5:71:fe:
         f7:53:e8:79:77:ac:8f:92:54:70:f1:4a:dd:cf:c5:07:f3:75:
         7c:8d:1a:d8:f9:c6:8c:74:de:26:16:ff:5f:b6:8e:ea:40:8a:
         c4:dc:c6:f8:ca:3c:1a:bc:f4:7b:42:bc:cf:3c:64:f3:32:6d:
         86:d9:ed:9e:c3:46:32:a7:4d:ca:26:da:b0:8a:02:bc:39:b6:
         19:a1:8a:6e:50:9e:f0:ef:75:b4:11:60:50:83:ef:1e:d9:ed:
         dc:c1:00:16:91:e0:ce:e4:c8:08:0c:92:9c:ce:33:94:e0:47:
         6b:cf:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----