Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/P_lJTIqMZDnhdNHLO0palD8ppfw.roa
File:                     P_lJTIqMZDnhdNHLO0palD8ppfw.roa (raw, json)
Hash identifier:          GddrD+LKHR9GK1iwyBTsSH37OFZVV9LjmflYlxBE3Hc=
Subject key identifier:   3F:F9:49:4C:8A:8C:64:39:E1:74:D1:CB:3B:4A:5A:94:3F:29:A5:FC
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       0369B385
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/P_lJTIqMZDnhdNHLO0palD8ppfw.roa
Signing time:             Sat 01 Jan 2022 11:54:07 +0000
ROA not before:           Sat 01 Jan 2022 11:54:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205715
IP address blocks:        188.95.148.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57258885 (0x369b385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Jan  1 11:54:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3ff9494c8a8c6439e174d1cb3b4a5a943f29a5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:a3:b1:72:94:ac:f7:7e:04:67:52:4d:db:
                    4b:f0:f6:ab:33:66:b4:19:d1:78:5e:b8:64:15:48:
                    99:57:89:c8:ce:4d:b2:31:d6:e5:f1:45:b0:05:d4:
                    d6:d8:b1:92:93:98:e8:8e:54:8a:be:ec:31:70:eb:
                    58:90:cb:d2:99:38:31:ee:76:45:23:c5:f1:79:c6:
                    a4:5a:13:82:40:80:0a:0d:35:5d:a7:a9:76:0e:67:
                    e3:a5:da:24:52:ac:71:a9:ad:68:c3:e5:10:dc:61:
                    25:13:a2:53:23:8b:4b:20:3d:0d:de:44:13:81:ee:
                    a3:d6:55:04:ef:d3:0e:7c:60:cc:54:f9:51:c1:10:
                    9f:58:ff:d1:aa:95:00:6a:ee:94:35:0e:91:6e:ea:
                    2d:3b:13:3d:87:13:b0:37:e3:02:73:af:6f:51:ce:
                    29:36:3c:f6:58:f1:85:af:42:46:1a:48:87:c7:1a:
                    a0:cb:5b:81:3b:c4:01:27:66:e9:89:9a:ba:77:34:
                    0f:95:5a:be:8b:79:80:64:eb:ea:3c:7c:de:4f:f0:
                    4d:e5:5f:54:4f:df:cd:00:ec:9c:fc:81:c2:47:17:
                    80:d4:48:78:0c:9b:5f:1e:ef:c3:2e:2c:0d:93:f7:
                    58:b6:2f:63:97:31:d8:1d:88:01:9d:d3:f6:39:28:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F9:49:4C:8A:8C:64:39:E1:74:D1:CB:3B:4A:5A:94:3F:29:A5:FC
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/P_lJTIqMZDnhdNHLO0palD8ppfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:bc:19:64:ca:72:ac:8e:a4:07:63:aa:df:b1:48:d4:30:
         4e:3f:f7:bd:7a:6c:17:6a:1d:1d:7f:3c:47:02:8e:40:43:76:
         22:26:25:1f:d5:a5:ae:c5:7a:32:89:1c:78:e4:bf:a4:26:02:
         7f:e0:c7:d4:b2:96:42:9e:e0:88:93:ae:37:10:76:84:61:9c:
         1d:16:be:f9:4e:f7:36:fb:cb:1a:b1:db:12:19:cd:96:05:c6:
         3c:e4:4c:75:67:70:70:ce:13:c3:ca:91:f7:20:68:4a:24:ae:
         69:15:ea:57:15:52:37:ae:6d:07:2b:41:a9:9d:67:c7:dd:d6:
         6c:d7:07:11:60:19:bd:ec:b8:d6:5b:28:32:77:b5:17:db:dd:
         28:78:a5:cc:26:c1:97:9a:2d:ec:ee:ef:15:e4:6b:00:98:bf:
         d5:30:39:ef:20:9a:5e:b3:59:6a:ad:55:a5:f5:66:29:2d:a5:
         df:1f:35:7c:ad:81:57:50:c9:9c:27:04:df:a0:43:40:aa:41:
         2c:8e:fc:f4:94:26:71:11:9a:ae:52:1d:64:69:e6:7f:28:38:
         43:92:0e:2e:e1:f5:51:21:bc:39:8d:6c:84:25:3b:ea:72:68:
         67:76:91:5d:12:18:0c:5e:f8:3e:0c:4f:76:17:3d:7d:0e:e8:
         d6:c1:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----