Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa
File:                     JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa (raw, json)
Hash identifier:          2/B2EmOJfRlda7aPadib6OFSm6W2wnjCBj0B23Q86+w=
Subject key identifier:   24:E8:19:2B:D0:B2:06:D6:D5:A2:90:C1:CC:D8:FD:62:2F:14:90:3A
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38B60109
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa
Signing time:             Tue 17 May 2022 05:30:25 +0000
ROA not before:           Tue 17 May 2022 05:30:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197897
IP address blocks:        88.203.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951451913 (0x38b60109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24e8192bd0b206d6d5a290c1ccd8fd622f14903a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:f3:ef:7a:19:e2:85:b7:63:e8:ee:4d:cf:
                    2c:b2:bc:91:9d:ba:cf:6f:ec:4d:a5:10:03:d5:8f:
                    2d:a2:cc:e1:b2:3d:44:ce:51:2c:8a:81:e1:81:34:
                    f9:d7:0b:ee:6e:58:21:41:9f:4d:37:80:e2:df:fa:
                    b6:29:17:07:a3:35:05:c1:89:22:ee:d7:34:0f:e7:
                    d4:6e:b8:3f:b5:c5:96:bc:91:e3:05:7d:0e:cf:5f:
                    6e:2f:2f:63:0e:7e:40:05:8f:d2:7f:87:cf:c9:e0:
                    b7:f2:77:fe:77:9f:26:f3:91:71:72:f5:44:38:6e:
                    d3:ba:07:e8:b3:d7:8d:9c:07:8d:97:2f:b6:3b:a5:
                    15:63:22:76:9e:8c:3e:0d:9e:99:b2:39:4a:78:e3:
                    a8:40:d0:18:2c:49:69:b0:2e:1c:02:3f:3a:8e:3d:
                    53:a3:f9:3e:08:b9:35:e8:27:41:56:04:f2:11:0e:
                    1e:44:31:33:57:76:96:0b:da:84:6b:5e:42:af:34:
                    46:94:5e:88:69:20:08:1a:df:1b:1f:da:3e:df:67:
                    fe:d6:40:25:33:df:ee:09:cc:ed:40:b0:12:09:aa:
                    83:5d:b0:1b:15:70:71:25:8b:b0:b7:52:88:b8:a5:
                    2d:f2:23:1a:bc:65:24:70:67:25:59:2d:cc:69:15:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:19:2B:D0:B2:06:D6:D5:A2:90:C1:CC:D8:FD:62:2F:14:90:3A
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/JOgZK9CyBtbVopDBzNj9Yi8UkDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.203.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:15:6f:f5:f7:e3:95:5a:2e:4d:d0:40:07:a5:9c:f2:71:f0:
         47:fd:60:9e:f4:fb:d8:b1:3f:e0:15:34:ef:96:5e:ad:80:58:
         10:2d:e9:49:93:c0:d3:d8:64:51:eb:b8:fe:e2:6a:0c:d4:20:
         1b:85:90:7a:d9:fa:fa:bf:e5:23:68:c8:7a:f9:35:98:58:78:
         8d:85:52:6e:4a:e2:2c:27:01:48:99:28:bb:25:04:58:b8:7a:
         8f:c1:24:e8:68:83:95:97:b1:2e:f7:ba:b0:17:78:06:cf:02:
         4f:c7:b3:d0:b6:86:d6:ac:91:a2:a1:d0:31:cc:40:b6:9b:c4:
         58:10:41:60:65:d3:82:74:b3:11:5a:04:2f:43:42:56:89:9c:
         96:d6:60:80:73:88:b0:6c:61:e9:60:ae:12:44:ce:b9:24:4a:
         5a:72:67:66:5c:66:ee:bd:f5:34:1f:aa:3c:c7:e8:0c:33:83:
         ee:23:f6:8f:08:01:22:3f:ba:64:bc:e7:7f:34:e5:75:ea:86:
         50:58:b9:a7:ec:17:b4:f8:0e:a7:cb:27:34:a2:33:2a:04:1e:
         13:8d:3f:41:30:6e:aa:e4:bf:82:05:00:97:a6:e0:2f:17:e2:
         b7:97:54:d1:ae:6e:85:36:a9:8f:e7:c9:a6:15:51:f4:1d:d0:
         cc:25:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----