Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WbXNyxrtbnHlf0QPCfOVKbp4BMw.roa
File:                     WbXNyxrtbnHlf0QPCfOVKbp4BMw.roa (raw, json)
Hash identifier:          lUiT6zoLGZ/xBgo4z0QrrnWaK/y5J7QxE1Jc++pQaE8=
Subject key identifier:   59:B5:CD:CB:1A:ED:6E:71:E5:7F:44:0F:09:F3:95:29:BA:78:04:CC
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       070D69DB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WbXNyxrtbnHlf0QPCfOVKbp4BMw.roa
Signing time:             Sat 01 Jan 2022 03:54:15 +0000
ROA not before:           Sat 01 Jan 2022 03:54:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     267784
IP address blocks:        193.57.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118319579 (0x70d69db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Jan  1 03:54:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59b5cdcb1aed6e71e57f440f09f39529ba7804cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:03:43:fb:0e:6e:d3:79:25:e0:5f:e3:ad:
                    7b:69:6a:fa:9d:fb:28:52:c1:fa:97:d2:5d:b0:87:
                    ca:9e:2c:06:a9:06:09:f2:97:07:46:e8:79:b5:fc:
                    2a:1d:e4:7f:df:35:27:79:8e:8d:5b:ae:b6:92:62:
                    f8:37:57:9e:2f:58:f9:e5:2d:48:a4:46:00:da:cc:
                    f9:ad:1d:11:c3:20:cf:4c:18:87:85:ac:2b:b8:01:
                    9f:96:d7:4c:e2:a6:94:36:c3:1b:73:31:a5:31:1b:
                    ce:f6:90:c8:09:f0:19:0a:45:8e:74:9d:de:2b:50:
                    8b:de:7e:c2:8b:82:4b:31:53:2e:72:86:1c:ab:26:
                    63:48:2a:d3:43:a5:f9:b8:4e:25:02:c4:19:4f:b1:
                    0a:92:76:f2:e6:8a:63:e0:a3:2e:fd:b5:0e:c9:51:
                    56:c4:fe:c3:57:13:4e:ce:13:f2:b8:00:3f:f5:ed:
                    ea:77:27:b6:6e:32:59:5a:69:d6:ef:fa:fb:9a:5b:
                    b4:6f:26:83:6b:84:a8:68:97:06:be:b9:60:db:1d:
                    d8:5f:ff:e4:79:ab:f6:9a:ed:3c:52:24:05:88:f8:
                    6f:3d:12:f7:1d:fc:b8:41:73:e8:49:b2:c5:86:fe:
                    4d:88:d3:f7:52:f5:e8:e7:6e:3f:23:7a:57:8b:a8:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:CD:CB:1A:ED:6E:71:E5:7F:44:0F:09:F3:95:29:BA:78:04:CC
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WbXNyxrtbnHlf0QPCfOVKbp4BMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:75:02:a2:f4:f3:f4:01:3a:7b:bc:47:82:90:e4:71:43:
         87:a1:49:f3:5f:f8:29:63:7d:bc:36:76:a8:87:56:ae:28:19:
         44:ad:77:b3:7c:33:17:37:8e:29:45:75:cc:66:62:95:bf:04:
         86:06:12:33:98:3b:c9:17:6c:ca:18:c4:22:69:2e:73:f8:94:
         38:49:f2:cf:f9:fc:8e:4d:54:2a:c2:61:ae:b6:4c:e3:af:81:
         4e:3a:1a:10:9b:3a:7f:fc:54:6c:ee:f9:fc:cf:c9:71:1d:7a:
         7e:49:fc:92:35:13:02:80:5d:b8:52:cb:75:96:6e:08:69:ad:
         b0:96:d7:bb:51:50:51:11:78:3c:25:b0:34:e2:a8:e6:0f:47:
         c0:4b:a0:1c:24:81:95:62:56:68:8a:0b:40:8b:f8:24:d7:c1:
         21:cc:33:ff:d1:3a:63:56:83:76:c7:bf:32:81:7d:d5:5b:0a:
         b5:b0:75:0d:c4:97:02:8d:b5:b0:d7:26:dc:81:37:4a:88:44:
         df:b6:9e:42:58:5c:a3:a1:d8:b2:96:80:e2:97:3c:b1:b1:59:
         71:a4:5f:07:a0:41:f4:13:ec:3d:80:73:ae:f9:52:b3:33:b4:
         76:98:df:b6:eb:a2:2a:69:65:ba:7e:a0:dc:a5:ed:cb:ae:5b:
         7e:85:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----