Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kxWP1TZ31O_zhQJVvycdU-PYfx8.roa
File:                     kxWP1TZ31O_zhQJVvycdU-PYfx8.roa (raw, json)
Hash identifier:          iPmD+DUptbGikw0w0tvluRdIjrErgnEDHCe+ku71ZjQ=
Subject key identifier:   93:15:8F:D5:36:77:D4:EF:F3:85:02:55:BF:27:1D:53:E3:D8:7F:1F
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       01BE38F5
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kxWP1TZ31O_zhQJVvycdU-PYfx8.roa
Signing time:             Sat 01 Jan 2022 09:55:07 +0000
ROA not before:           Sat 01 Jan 2022 09:55:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42831
IP address blocks:        91.201.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29243637 (0x1be38f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jan  1 09:55:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93158fd53677d4eff3850255bf271d53e3d87f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:73:1c:00:4a:88:4b:fe:b5:26:c3:17:61:
                    bc:bb:d5:cc:c1:3d:98:f0:b5:3e:f2:05:2f:03:c7:
                    9e:2c:0d:a3:b9:0f:f7:7d:d0:85:cd:e0:73:3e:34:
                    b8:49:68:f4:80:47:e7:00:ad:ef:33:72:bd:5d:47:
                    0d:d1:ef:98:2f:39:0e:d0:7a:3f:3a:24:15:82:bc:
                    32:19:60:18:db:09:0b:4a:5c:6d:65:a1:1a:ea:d5:
                    c3:13:a2:fd:16:aa:84:c4:07:44:bf:43:cd:60:63:
                    a7:d5:df:cd:20:81:ab:75:2f:d4:4c:84:fa:7e:ce:
                    69:57:15:e5:6b:bb:27:aa:f9:c3:ed:73:d8:e9:df:
                    d2:ee:f0:18:73:1e:fd:6a:6a:d8:53:bd:fa:f3:01:
                    fe:de:c4:3a:ba:e0:82:51:60:b7:e6:58:2c:89:c8:
                    3b:99:86:46:b6:7b:d5:f2:e3:07:40:76:12:b8:7d:
                    8d:26:be:45:e7:07:6d:67:0e:83:4c:ad:f7:43:ef:
                    9b:e9:6e:b4:e2:50:cb:d1:59:85:e0:66:f6:78:aa:
                    5c:2f:17:79:f4:13:17:4e:d3:d6:e4:12:5a:e5:32:
                    c1:bc:50:36:e3:0c:28:9e:10:4e:99:95:01:00:e0:
                    ff:3d:8e:76:ff:e6:f9:2a:bb:8c:97:27:47:80:0e:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:8F:D5:36:77:D4:EF:F3:85:02:55:BF:27:1D:53:E3:D8:7F:1F
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kxWP1TZ31O_zhQJVvycdU-PYfx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.201.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:4b:f7:9b:5e:00:40:22:c4:80:3c:96:87:76:5e:d2:02:27:
         0a:de:06:3f:57:28:b1:ce:46:9a:9b:f6:d4:82:ac:d6:18:bb:
         a3:72:f5:3e:42:9d:1c:86:30:56:cb:2c:5f:f9:6b:35:96:f7:
         8f:9a:ab:ad:b0:32:f6:68:8e:a7:8d:54:dc:c1:ab:d8:96:99:
         49:17:e6:51:d5:fd:40:17:8d:7f:7c:56:4f:5a:45:a7:38:97:
         8e:45:5b:12:74:2b:f5:88:f6:cc:d5:45:52:d7:c4:c0:23:c2:
         b4:75:2d:70:69:66:61:b8:d7:91:9d:86:2a:69:b7:85:76:b0:
         6f:f1:21:9b:0d:da:bd:4d:50:4d:62:aa:2d:fc:44:81:72:5f:
         d5:9c:e6:c5:4f:3c:55:22:b2:08:95:9e:d6:26:53:02:d4:5f:
         32:18:83:cd:60:f4:6f:6f:91:23:b6:59:fb:9c:68:a0:37:36:
         e6:e2:d8:08:19:1a:46:5d:a6:6c:79:77:88:bf:ee:e1:ae:66:
         6d:2b:29:75:d6:77:49:82:2a:3e:61:ef:a2:19:47:6b:13:04:
         7e:1b:e1:80:40:ef:e1:34:fd:d0:bb:47:15:c5:41:75:80:50:
         26:d3:e6:78:42:66:36:9e:4d:38:00:e2:df:9a:54:8a:68:94:
         c8:b4:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----