Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/xviXyL-zklqcuxMTrFsyZEXceE0.roa
File:                     xviXyL-zklqcuxMTrFsyZEXceE0.roa (raw, json)
Hash identifier:          8eaWvGe8VVVgZDTS6n2jTjPrfNeFb+bHC+ic2gd9Bnk=
Subject key identifier:   C6:F8:97:C8:BF:B3:92:5A:9C:BB:13:13:AC:5B:32:64:45:DC:78:4D
Certificate issuer:       /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial:       01F0D44C
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/xviXyL-zklqcuxMTrFsyZEXceE0.roa
Signing time:             Sat 01 Jan 2022 09:58:29 +0000
ROA not before:           Sat 01 Jan 2022 09:58:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34564
IP address blocks:        194.126.228.0/24 maxlen: 24
                          2001:67c:2310::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32560204 (0x1f0d44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
        Validity
            Not Before: Jan  1 09:58:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6f897c8bfb3925a9cbb1313ac5b326445dc784d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:28:f6:89:53:0d:17:d5:82:17:a5:8c:f1:
                    b2:34:2b:22:46:32:06:9b:1c:f5:81:12:04:1b:d1:
                    f0:4e:b0:a7:4a:08:87:8b:ab:cd:41:e1:3f:0e:7c:
                    1b:cd:41:89:f2:2f:45:cc:73:7c:c0:69:2a:b1:b4:
                    d1:ae:76:64:2b:ba:ea:a8:d7:2a:20:55:7b:e0:ac:
                    74:d1:41:7d:11:d6:fc:7d:6e:a3:55:c0:20:26:4f:
                    40:26:4b:61:bb:6d:30:ae:0d:11:0b:4d:f5:df:d5:
                    37:9b:66:1c:85:c4:f1:a1:8a:14:e5:82:a8:c9:b4:
                    77:bf:07:0f:60:4b:71:23:6e:de:82:01:85:0e:f2:
                    46:ab:2b:41:2d:ae:2d:bc:b9:33:f6:26:31:a3:fc:
                    7a:1d:9b:3e:ce:46:d5:d7:7e:08:46:a0:80:7a:b5:
                    5d:d5:8b:17:87:6c:b6:05:12:94:36:ab:2c:28:68:
                    f0:34:11:ec:85:a8:d7:a7:e7:42:db:30:8c:ad:3b:
                    27:79:ef:99:cd:d2:79:0a:67:67:8b:82:93:b4:6f:
                    c1:56:8b:b7:d8:62:85:69:b3:4f:7a:34:2f:ee:0a:
                    61:14:d9:c9:67:4b:16:d4:a7:54:50:0f:1e:3e:0d:
                    5d:58:2b:2e:91:c9:c0:c9:63:e3:56:a5:b8:ce:c1:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:97:C8:BF:B3:92:5A:9C:BB:13:13:AC:5B:32:64:45:DC:78:4D
            X509v3 Authority Key Identifier:
                keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/xviXyL-zklqcuxMTrFsyZEXceE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.228.0/24
                IPv6:
                  2001:67c:2310::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:e3:78:36:06:8e:fe:89:3c:33:b2:80:4d:81:96:76:d6:
         bf:be:4c:ca:50:81:49:c5:c7:03:14:69:29:37:8c:76:00:7a:
         bb:0e:da:c5:c3:c6:64:b0:ae:b8:58:f3:55:7f:2f:b1:23:87:
         ba:8b:e2:55:64:d6:c3:18:da:93:f5:23:26:c9:b0:c6:1f:26:
         2a:1a:c2:e4:ec:f5:e8:f0:0d:7f:e2:44:ac:9e:8d:44:76:c1:
         2b:ac:d7:03:2f:a6:df:76:66:65:1c:06:ef:67:f9:0d:bd:03:
         e9:6c:bb:93:1b:1b:34:88:78:69:4d:0a:9c:89:b7:b0:09:f6:
         12:e9:fc:4e:d8:87:5e:04:8f:8f:8c:a7:6e:7e:7a:ca:d5:5b:
         95:0a:f3:f0:c8:52:c8:5f:93:69:50:76:5f:4d:be:99:6f:27:
         89:7b:69:d4:f8:94:54:4e:96:2b:2d:f8:59:c9:18:76:17:fa:
         70:80:f4:38:4f:e8:5b:36:ec:37:6b:06:9b:c9:20:5c:0b:cf:
         1a:b2:e1:45:71:16:79:89:3e:ee:f9:d8:cb:d7:28:58:bd:a7:
         5d:99:1f:85:e6:81:7c:4b:fd:52:2f:ee:75:d2:da:f3:24:8a:
         99:55:47:20:44:7e:69:2a:a1:09:e2:6c:b5:94:fb:85:0d:ae:
         98:44:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----