Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h-xij57_fuc_ZS4KT0Xx7K7mEl0.roa
File:                     h-xij57_fuc_ZS4KT0Xx7K7mEl0.roa (raw, json)
Hash identifier:          90pdmzpAq4PxfdkVriUZHw6+xe4p+KsNQG8dX9LvO1Q=
Subject key identifier:   87:EC:62:8F:9E:FF:7E:E7:3F:65:2E:0A:4F:45:F1:EC:AE:E6:12:5D
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1C69B280
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h-xij57_fuc_ZS4KT0Xx7K7mEl0.roa
Signing time:             Sat 01 Jan 2022 01:02:33 +0000
ROA not before:           Sat 01 Jan 2022 01:02:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44796
IP address blocks:        91.92.232.0/24 maxlen: 24
                          2a00:1728:1d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476689024 (0x1c69b280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 01:02:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=87ec628f9eff7ee73f652e0a4f45f1ecaee6125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:d2:3a:19:25:73:f3:55:82:3c:a7:95:2f:
                    dc:81:b5:68:d1:11:75:54:27:d2:9d:1c:fb:f7:c8:
                    a6:08:1d:a3:69:e6:69:0b:c2:ed:7d:71:d3:8d:77:
                    3f:be:d7:3e:4f:a2:9b:1d:47:89:88:7a:1e:f3:57:
                    c6:98:36:6f:11:10:5b:d7:5e:7c:68:f0:af:2d:8b:
                    3f:44:b7:15:8d:c9:8d:af:30:e7:40:6e:bf:5e:02:
                    10:a3:95:05:34:9b:71:f0:eb:25:97:12:05:2a:4f:
                    19:cd:a6:d6:4b:c0:4f:1e:4f:cc:11:1e:af:be:54:
                    0a:fc:93:c2:0e:33:cf:27:06:5e:21:7a:fa:d1:ae:
                    18:b7:2d:78:d4:37:53:27:b8:5d:20:22:33:72:aa:
                    59:51:ea:8a:76:fb:d2:b3:d0:39:d6:46:32:a4:31:
                    43:e0:15:44:7d:a4:01:d9:08:28:39:fb:d9:8d:ca:
                    a0:69:d7:d6:00:d8:24:44:8c:87:0d:14:14:40:79:
                    4f:a8:fb:eb:c9:2e:b4:b4:d2:88:4c:49:cc:ee:ed:
                    f3:24:ed:59:27:a8:0f:ea:a3:45:82:55:0f:46:03:
                    e3:3f:b1:ff:da:68:a6:aa:b9:c5:74:f8:1a:fa:bd:
                    67:4f:bb:1d:77:20:5f:f4:56:e9:97:98:a9:5c:03:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:62:8F:9E:FF:7E:E7:3F:65:2E:0A:4F:45:F1:EC:AE:E6:12:5D
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h-xij57_fuc_ZS4KT0Xx7K7mEl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.92.232.0/24
                IPv6:
                  2a00:1728:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:8c:d0:51:9a:9c:9d:50:97:a8:ca:c0:1f:f5:7e:0a:79:
         8c:10:ec:2b:11:df:c6:97:30:32:f7:bc:18:56:77:96:2e:af:
         24:54:a7:02:59:7e:a1:b2:db:dd:99:6d:cb:26:e0:9c:1b:52:
         10:69:47:da:40:3e:25:fa:63:64:87:0f:5d:4a:41:e7:0b:49:
         eb:db:2d:84:27:eb:61:2b:0e:2c:ee:51:96:fd:fa:fa:fd:b5:
         0c:ed:81:73:12:b8:96:81:9c:9d:de:d6:ff:67:c4:a3:be:f2:
         ef:bc:7b:da:c8:ce:dc:06:69:a1:a2:13:79:34:92:b4:74:b1:
         d1:31:51:17:30:20:0c:2d:a6:79:71:6f:f5:27:7b:1a:69:a8:
         df:b9:b1:26:be:3c:7f:56:86:0c:73:5d:b8:df:5d:d7:ee:33:
         f3:c8:7f:7c:ef:20:27:16:10:77:5c:6f:b0:fd:bf:33:15:d0:
         52:f4:70:9a:e6:43:87:ef:f6:f3:28:d5:35:3f:db:60:7a:0d:
         9a:a6:a5:c4:ef:e5:43:31:a7:b5:b2:52:02:10:d6:6e:71:60:
         ba:1c:2d:9a:6a:5e:ca:0d:f8:a7:52:14:14:a0:7e:03:5f:c4:
         63:be:92:9b:5e:47:48:f5:84:c9:4d:17:73:dd:ec:c6:40:a5:
         10:7b:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----