Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/AfLWomKxcR-3XKnrkF_BYOkUfcI.roa
File:                     AfLWomKxcR-3XKnrkF_BYOkUfcI.roa (raw, json)
Hash identifier:          YBsRnJwPzJmojeCAnXBMODMgKB7fddZmTZwV+BSTxuo=
Subject key identifier:   01:F2:D6:A2:62:B1:71:1F:B7:5C:A9:EB:90:5F:C1:60:E9:14:7D:C2
Certificate issuer:       /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial:       026ED28A
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/AfLWomKxcR-3XKnrkF_BYOkUfcI.roa
Signing time:             Sat 01 Jan 2022 02:56:54 +0000
ROA not before:           Sat 01 Jan 2022 02:56:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196754
IP address blocks:        195.88.248.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40817290 (0x26ed28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
        Validity
            Not Before: Jan  1 02:56:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01f2d6a262b1711fb75ca9eb905fc160e9147dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:fd:1f:f5:2e:2c:bd:e3:75:4b:22:72:a9:
                    96:33:04:77:bb:bb:b3:16:3c:ef:04:81:f5:75:a5:
                    b4:2c:13:dd:a8:ad:49:fd:6f:66:42:1c:7b:4c:e0:
                    1f:fb:16:0d:22:c0:67:5c:ac:0b:04:9a:e7:6c:58:
                    69:9b:b7:d9:d9:0e:34:df:48:34:d6:2f:76:22:0e:
                    68:30:fb:f3:c4:e7:2c:a5:48:20:c9:58:65:59:d9:
                    cf:13:97:c2:66:dc:1e:b1:1b:b5:22:91:c0:56:b0:
                    e9:d1:d0:d2:28:d6:46:2f:8d:e3:2d:f1:11:34:fb:
                    ee:7b:50:99:3d:87:8a:af:5d:e6:60:e3:ab:a6:a0:
                    a3:ae:68:00:ae:12:92:66:67:12:1b:a7:ca:38:16:
                    cc:6d:bd:28:a5:b2:fb:dc:f0:c7:d2:2d:c1:1d:e5:
                    03:53:06:39:1c:66:a0:92:7c:6b:d2:f2:97:04:6c:
                    76:81:f1:eb:ed:89:ad:29:24:8f:52:ae:36:8f:4e:
                    62:f0:b8:f7:b1:fc:3a:44:84:23:b9:a0:15:a6:d6:
                    85:de:62:e2:53:02:a0:45:38:c6:b2:06:f9:f0:e4:
                    a7:eb:95:06:c5:48:e3:0a:18:c3:80:c6:3c:3d:56:
                    12:3a:6f:bd:85:85:27:ec:6e:d9:e6:c0:bb:29:e6:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:D6:A2:62:B1:71:1F:B7:5C:A9:EB:90:5F:C1:60:E9:14:7D:C2
            X509v3 Authority Key Identifier:
                keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/AfLWomKxcR-3XKnrkF_BYOkUfcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:da:08:b0:5b:12:cf:1d:1c:b1:3c:32:c8:f9:2d:94:0b:f8:
         24:64:39:b0:21:a9:c6:87:15:22:fb:16:21:21:6f:16:a5:ba:
         17:07:5e:39:9a:ec:5d:0d:41:e4:33:03:55:7f:c3:39:27:ef:
         f7:54:67:f6:a0:f6:65:a7:3e:52:72:20:b0:f9:1a:c4:5c:48:
         18:c7:40:06:4a:37:e0:74:4e:c1:77:1c:b5:25:3e:e3:c8:0c:
         ca:64:9a:51:22:24:50:0d:98:a8:73:41:22:1f:de:0d:da:5c:
         28:f6:32:ef:f5:a6:2f:e9:b6:7d:ed:38:98:82:f9:98:1d:10:
         db:d5:74:7d:c5:d9:90:2c:31:62:f4:6e:f7:18:2e:05:4f:f4:
         ce:57:3d:7e:bb:68:d1:1b:33:28:5b:d1:36:f5:10:0d:a2:ca:
         6f:56:18:3d:d4:a4:f6:a3:fd:1c:e2:a1:37:10:71:8a:4e:ce:
         9a:c6:61:0a:99:ed:36:70:28:d6:fb:77:db:10:50:1e:96:e8:
         62:4f:f0:76:16:81:32:83:45:ff:03:55:30:6e:10:ae:b7:fc:
         a4:ff:a3:9a:1b:dd:ff:be:96:4c:f5:a7:b0:69:28:b9:61:fc:
         29:a3:81:45:fe:e6:58:bb:27:c2:69:b1:82:a2:80:91:ff:63:
         f3:9f:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----