Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/XDfCgDxH2sJl4qxO6BUQ0OYhgJg.roa
File:                     XDfCgDxH2sJl4qxO6BUQ0OYhgJg.roa (raw, json)
Hash identifier:          6Q51IhZmAzJchMNl2K5GmDH8FuYPfDZ0BWmK0jfiGic=
Subject key identifier:   5C:37:C2:80:3C:47:DA:C2:65:E2:AC:4E:E8:15:10:D0:E6:21:80:98
Certificate issuer:       /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial:       E4D7
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/XDfCgDxH2sJl4qxO6BUQ0OYhgJg.roa
Signing time:             Thu 28 Apr 2022 12:25:58 +0000
ROA not before:           Thu 28 Apr 2022 12:25:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3303
IP address blocks:        91.226.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58583 (0xe4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
        Validity
            Not Before: Apr 28 12:25:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c37c2803c47dac265e2ac4ee81510d0e6218098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:32:8c:8b:2c:96:74:f2:6e:bf:6f:c1:4b:
                    3b:33:4b:56:97:2e:86:75:79:fd:cb:3a:b0:c5:1d:
                    fa:56:33:9f:f7:e1:77:ea:21:2d:4c:1f:83:41:17:
                    79:56:76:66:b3:0c:68:e4:f0:ed:69:6d:91:3e:72:
                    95:63:b4:41:d3:39:df:79:a3:d0:0d:2b:ce:e9:c2:
                    0a:a1:05:d1:ab:bf:9d:f3:50:8c:f7:6c:99:cb:58:
                    80:34:77:5c:d2:ea:3d:84:10:6e:97:b5:0a:e6:5a:
                    c5:89:e7:05:5b:16:35:64:af:94:37:bd:16:3a:76:
                    ad:94:f2:e9:2b:19:8e:73:7f:ad:d4:85:94:df:21:
                    83:f0:32:97:70:46:e0:2f:bf:69:98:3b:98:39:8d:
                    d7:40:ca:59:2a:24:dd:44:fe:fe:24:7b:32:6b:bc:
                    1a:55:83:ff:b7:71:3d:37:4c:3c:89:58:4b:b2:77:
                    ce:d9:60:40:da:68:40:d1:54:8e:ae:8c:aa:d9:ee:
                    bd:f5:ca:9f:47:56:0f:94:d1:78:bc:1b:33:ad:54:
                    29:24:2e:b9:39:d7:c5:77:26:4a:1a:bc:76:0a:7c:
                    23:fd:63:47:df:c6:d9:11:be:78:9d:84:69:1b:4c:
                    45:35:50:c0:e5:3f:51:38:01:8f:83:6f:87:92:c9:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:37:C2:80:3C:47:DA:C2:65:E2:AC:4E:E8:15:10:D0:E6:21:80:98
            X509v3 Authority Key Identifier:
                keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/XDfCgDxH2sJl4qxO6BUQ0OYhgJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:44:4e:45:eb:d0:a2:2d:13:ea:ff:e5:f2:c3:39:36:28:6b:
         24:bf:55:2e:ad:ac:e0:90:c0:8d:02:86:6c:e8:04:c9:de:45:
         2d:25:8d:7c:ac:a0:01:89:51:33:79:68:d4:87:be:f1:f5:89:
         bc:29:b7:cc:36:0f:38:6f:11:63:55:89:0a:6a:22:2f:a1:32:
         96:d3:e5:b9:ef:88:fc:c4:90:aa:77:1b:39:66:64:1a:6f:28:
         5c:cc:ed:83:b5:92:39:47:a9:b1:82:c0:d9:33:f6:fb:17:83:
         ff:92:e1:70:17:54:ee:f9:56:91:11:7f:50:d8:74:e8:0c:6f:
         6d:1f:f0:6d:e6:66:cf:e7:07:c1:72:eb:6d:cb:64:9e:95:ab:
         34:99:61:4b:a4:86:87:63:a0:f5:f4:7e:76:83:de:e7:f2:6f:
         a1:66:c4:c4:d8:d3:24:10:2e:a4:3e:54:52:4f:a1:64:d4:91:
         82:c7:76:f7:a0:67:92:71:50:95:01:4c:0b:07:29:1c:4b:0d:
         27:f6:d5:62:e1:67:42:24:8a:e1:56:0f:ff:a2:d9:82:12:98:
         08:7a:62:2f:30:6d:a5:42:bb:53:ca:7c:e4:e9:e7:97:0c:89:
         f4:6e:c7:46:a0:57:ca:a0:cf:8a:8d:97:c5:64:0a:a4:0b:26:
         36:6e:01:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----