Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vHBWmc9q_kIzzyTQHoKKXYfgPNk.roa
File:                     vHBWmc9q_kIzzyTQHoKKXYfgPNk.roa (raw, json)
Hash identifier:          fcRb6s4WK7ZdKBmukVnksmJA0ByZzVr4kq9wR4yBh7o=
Subject key identifier:   BC:70:56:99:CF:6A:FE:42:33:CF:24:D0:1E:82:8A:5D:87:E0:3C:D9
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38C5FB85
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vHBWmc9q_kIzzyTQHoKKXYfgPNk.roa
Signing time:             Tue 17 May 2022 05:30:33 +0000
ROA not before:           Tue 17 May 2022 05:30:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210024
IP address blocks:        92.247.78.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952499077 (0x38c5fb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc705699cf6afe4233cf24d01e828a5d87e03cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:77:d8:7f:4c:10:3e:19:ba:6d:b8:d3:4b:
                    11:20:37:3b:44:f0:1a:08:5a:e8:3d:82:03:ec:00:
                    10:a7:3f:d0:e6:c5:3b:af:20:19:dc:c5:76:92:96:
                    2a:fa:0a:05:09:27:49:52:ee:e6:4a:1c:90:39:58:
                    bc:06:a4:f9:21:ed:af:f9:40:c6:18:29:02:60:ab:
                    be:da:ad:cc:8f:d0:a3:8d:76:5e:c3:e7:9f:3d:36:
                    72:8e:69:3f:8a:5c:57:42:be:dc:fb:2e:6c:1a:ed:
                    29:6e:c9:64:75:48:0f:40:94:f7:68:d6:0f:c2:cd:
                    83:39:32:78:c0:f4:ea:7b:c2:9d:10:52:d7:88:e5:
                    ac:55:a0:82:46:31:70:fd:dd:87:58:17:3f:f9:c5:
                    ad:d0:3e:83:9a:5c:ea:40:ba:86:7d:e7:5d:30:32:
                    b5:12:24:6f:37:a7:1f:fd:3b:57:3a:15:31:a6:af:
                    49:f9:9c:62:4d:64:ed:f5:69:0f:3c:44:ae:52:f4:
                    75:92:d8:ff:fc:7c:3a:2b:d6:bd:ee:10:9e:52:04:
                    bf:4d:d9:db:75:cd:32:d7:b1:d1:22:09:1b:d9:19:
                    67:eb:46:9f:8a:3e:57:41:79:7f:7b:b1:41:61:89:
                    1f:62:73:2c:2b:ce:3b:05:0f:a2:97:b5:23:7b:b2:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:70:56:99:CF:6A:FE:42:33:CF:24:D0:1E:82:8A:5D:87:E0:3C:D9
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vHBWmc9q_kIzzyTQHoKKXYfgPNk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:78:e0:3c:46:c6:1a:a7:47:9b:5d:4b:95:5e:18:81:74:
         2f:19:27:61:b2:b9:22:41:27:5b:a1:da:61:45:2a:0c:7c:1f:
         7f:da:c9:ac:a7:49:04:27:63:74:15:c1:04:c6:55:a4:e4:f4:
         7e:2b:7b:4f:c3:ff:6b:45:1d:8b:03:17:a6:f9:ac:b0:fd:c5:
         cc:3d:da:62:e7:bb:16:06:1f:d0:0e:50:a2:c9:2e:b1:1d:2d:
         f7:5a:0e:76:6e:e9:2a:54:46:8b:e0:66:2e:fa:17:fb:0e:01:
         69:92:c6:d7:38:0f:75:e6:4c:70:9b:b2:d2:fb:b4:7d:1f:74:
         d8:40:7b:2a:e1:6c:6c:0b:e8:b6:88:cc:f1:3a:0d:03:94:bc:
         74:28:b6:64:c5:36:2e:14:e7:f9:61:b4:46:93:4f:5e:0f:e3:
         9a:3a:8d:c8:11:73:b9:83:db:f6:88:ed:50:e4:6e:07:9e:32:
         5a:32:06:67:32:eb:16:cd:66:0a:85:a1:bd:97:7d:b4:16:01:
         30:60:03:bd:5a:50:95:9a:1a:33:a2:53:1c:d3:d4:9d:f8:20:
         97:f6:11:b3:29:13:f6:38:9b:53:16:af:5a:b6:9d:4e:3f:2e:
         4c:fa:8d:d2:e7:16:f7:cd:2c:11:12:db:ee:4e:f6:34:1f:3c:
         e8:76:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----