Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vlzfifIIBQ0CVGC_LbHwnNzum_4.roa
File:                     vlzfifIIBQ0CVGC_LbHwnNzum_4.roa (raw, json)
Hash identifier:          4/BrnvekK1tZEwfxNk6hn7gKMK6uv6q0vV0XW0mFQQs=
Subject key identifier:   BE:5C:DF:89:F2:08:05:0D:02:54:60:BF:2D:B1:F0:9C:DC:EE:9B:FE
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       05D44FFC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vlzfifIIBQ0CVGC_LbHwnNzum_4.roa
Signing time:             Sun 05 Jun 2022 18:06:20 +0000
ROA not before:           Sun 05 Jun 2022 18:06:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        193.233.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97800188 (0x5d44ffc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jun  5 18:06:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be5cdf89f208050d025460bf2db1f09cdcee9bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:fa:4e:81:6a:a4:a7:46:92:3e:ef:c1:68:
                    30:26:d5:f2:52:42:a8:70:4d:e4:cd:c0:c9:05:e2:
                    b6:f5:73:35:ac:37:3d:aa:49:02:93:43:ad:72:e6:
                    db:17:ef:90:f5:a7:6a:ce:49:e0:41:d5:f0:f5:41:
                    b8:4a:2a:cc:73:53:c4:ea:49:12:24:76:f4:14:28:
                    8a:46:23:db:8b:8d:e0:6a:a0:2d:22:cc:e9:4f:b2:
                    9e:e5:c3:ab:92:fa:a1:11:48:2b:fc:2a:a3:99:1d:
                    5b:d5:ef:49:28:1f:04:ed:7a:d5:a3:88:2c:d8:f8:
                    3f:ed:0c:fd:7a:43:f8:be:e9:17:c3:02:e0:85:51:
                    be:2b:55:e0:44:d7:06:71:7c:ae:14:36:19:79:1d:
                    88:c4:4f:39:02:fb:70:1f:22:30:36:84:b0:42:02:
                    93:2c:e9:99:50:c3:77:f5:a2:1f:35:a4:fb:2a:85:
                    c3:ee:03:ba:75:d9:7b:34:82:bb:3b:fa:3c:29:de:
                    26:10:ed:ab:08:aa:f7:1d:50:7b:b9:35:7f:17:70:
                    64:3c:81:6e:d5:76:7a:37:e7:ef:8a:a1:60:3f:04:
                    2e:db:a5:f5:be:9b:2b:13:8d:74:e1:49:9d:2d:ca:
                    9e:15:a6:22:78:4c:cc:a0:12:04:a0:89:f4:b8:bb:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5C:DF:89:F2:08:05:0D:02:54:60:BF:2D:B1:F0:9C:DC:EE:9B:FE
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vlzfifIIBQ0CVGC_LbHwnNzum_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:36:48:c5:0d:36:9c:35:95:a3:99:04:b9:09:8a:48:72:91:
         b2:16:f1:b8:80:06:fc:26:2f:87:fe:1c:35:94:3b:11:28:27:
         e9:df:df:ea:84:f6:d3:59:8d:4b:e0:4a:c6:47:97:38:eb:b9:
         7f:e4:4a:93:5c:ef:99:f5:64:87:ba:2b:3b:ee:79:e0:4c:02:
         a6:b7:a4:31:b5:88:6e:56:40:a3:24:22:ad:f6:2f:86:c5:aa:
         c6:3c:40:31:36:52:c7:ed:b4:8d:47:af:ca:b3:ff:f0:c4:42:
         f4:0c:71:91:91:07:59:f7:7b:61:26:3a:bd:ae:6b:c0:1d:4a:
         d1:4f:c6:fc:64:80:22:03:88:1d:72:d3:35:a1:69:af:62:6c:
         e4:c4:8e:4e:ce:ed:19:11:f6:8f:ec:87:0c:ea:ba:cf:95:5b:
         48:7a:5d:35:68:69:48:67:ff:7a:1b:0f:4c:6d:5b:53:0a:4d:
         d0:b9:5c:2b:c0:08:1e:30:58:37:f5:7f:1f:d5:f1:fc:18:7d:
         38:cd:01:c7:aa:17:75:eb:7a:45:21:a8:87:ed:b0:00:39:d0:
         85:96:1c:8b:da:5e:06:c2:b8:b9:81:fc:05:fd:16:23:7f:a4:
         66:14:59:59:4d:73:7e:29:08:53:c6:31:b7:59:96:69:5f:ee:
         86:84:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----