Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/_hZOeLo3n_yfn-EWWMGQ3Jjly-o.roa
File:                     _hZOeLo3n_yfn-EWWMGQ3Jjly-o.roa (raw, json)
Hash identifier:          kkU/QwbfWmvdTB51tgPs1O8++MaeXwoNnAjkcT+8gok=
Subject key identifier:   FE:16:4E:78:BA:37:9F:FC:9F:9F:E1:16:58:C1:90:DC:98:E5:CB:EA
Certificate issuer:       /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial:       2EE75F2B
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/_hZOeLo3n_yfn-EWWMGQ3Jjly-o.roa
Signing time:             Tue 12 Apr 2022 15:43:39 +0000
ROA not before:           Tue 12 Apr 2022 15:43:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207163
IP address blocks:        93.96.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786915115 (0x2ee75f2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
        Validity
            Not Before: Apr 12 15:43:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe164e78ba379ffc9f9fe11658c190dc98e5cbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:db:bd:4c:cb:16:5f:81:9b:79:d0:61:df:
                    af:b3:ae:d2:83:86:63:7c:2f:9f:63:17:a3:02:e3:
                    56:ec:31:75:4c:ab:71:e3:a7:a1:55:82:18:fe:03:
                    e1:80:08:a0:78:89:7b:f1:05:86:28:c3:56:a3:27:
                    e9:56:9a:ad:ae:31:70:c7:27:21:79:be:f1:e5:41:
                    68:33:5d:89:87:c1:be:b1:90:72:cc:39:3b:b3:76:
                    f5:55:64:a5:a1:5f:6e:0f:9c:d9:8a:49:bd:30:55:
                    f4:8e:f0:2b:b2:b7:da:ee:77:6f:c9:c5:df:1c:6d:
                    3b:da:d4:cb:e7:ce:c8:22:aa:61:ad:3c:37:93:39:
                    5d:b1:69:b0:f9:1c:b5:a0:6a:9f:ad:84:a2:97:fb:
                    51:66:21:b6:4f:cf:f9:8e:ef:b5:7d:45:c4:5f:cc:
                    1c:2c:04:0e:93:5c:8e:e6:e9:98:d6:7d:b7:ee:7c:
                    63:61:79:8c:f9:e1:9a:65:ce:a3:45:95:04:04:16:
                    80:3c:1f:e2:54:0c:13:3e:b1:66:e7:bd:b3:ea:32:
                    b7:e8:45:b8:f3:2f:4f:77:56:a7:72:b8:12:3c:2b:
                    1c:0b:f2:e0:76:d7:cb:52:ed:40:61:3c:43:04:69:
                    19:a6:c9:44:e5:24:68:52:89:ea:3b:28:c1:45:65:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:4E:78:BA:37:9F:FC:9F:9F:E1:16:58:C1:90:DC:98:E5:CB:EA
            X509v3 Authority Key Identifier:
                keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/_hZOeLo3n_yfn-EWWMGQ3Jjly-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.96.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:94:dd:77:a3:cd:f3:9c:76:d4:8c:f3:b5:ce:dc:e5:5b:1c:
         35:33:d7:96:bc:72:cf:e6:74:6e:4e:c9:13:d8:fb:3e:b5:36:
         b3:45:99:d1:2d:6a:56:d6:c2:ad:07:f2:55:51:38:bf:8c:65:
         cb:a9:7f:c2:85:e0:d4:5a:43:18:e0:a7:37:e2:3f:4a:70:a9:
         55:88:e9:01:24:e2:fb:d2:76:c2:87:8c:9c:80:74:d0:2a:d2:
         75:ff:7d:7a:4e:94:a7:0b:8d:4c:4b:fe:78:7d:7f:06:d4:53:
         d8:35:53:87:6a:5d:b1:45:52:18:d3:89:b0:64:4d:11:5c:2f:
         37:ff:7a:a0:9c:16:0b:d4:64:8e:a9:bd:8c:6f:da:ca:8b:27:
         41:1b:3a:88:77:4f:67:a0:22:fb:74:2d:b7:ec:48:7b:12:8d:
         17:d7:31:e0:7b:eb:4c:26:8f:d4:89:d0:f7:60:38:20:b0:17:
         8f:f5:e4:f3:74:18:7c:ae:5b:2b:4a:09:3d:f3:70:55:bb:e4:
         3a:11:43:df:88:0e:c8:80:eb:be:0e:d7:83:36:0d:37:4a:50:
         60:a2:d3:08:4a:cb:1b:eb:19:57:11:b9:b5:99:79:f7:94:ae:
         a7:55:12:cc:70:ef:12:8d:5d:63:84:cf:d3:49:57:22:b5:f3:
         08:09:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----