Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/UfLJWcmR99pwZL2Q4QD2o6a9pI8.roa
File:                     UfLJWcmR99pwZL2Q4QD2o6a9pI8.roa (raw, json)
Hash identifier:          ckFzUCQJO0FBxsla+oXqR5shOmHLE+6DauT3vptsZh4=
Subject key identifier:   51:F2:C9:59:C9:91:F7:DA:70:64:BD:90:E1:00:F6:A3:A6:BD:A4:8F
Certificate issuer:       /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial:       0ADE53E4
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/UfLJWcmR99pwZL2Q4QD2o6a9pI8.roa
Signing time:             Wed 08 Jun 2022 12:25:02 +0000
ROA not before:           Wed 08 Jun 2022 12:25:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        194.140.230.0/24 maxlen: 24
                          2001:67c:144::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182342628 (0xade53e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
        Validity
            Not Before: Jun  8 12:25:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51f2c959c991f7da7064bd90e100f6a3a6bda48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:70:cd:5c:7e:5f:3a:d4:ff:f3:87:8d:44:
                    22:58:2d:c0:9f:1e:c0:7e:b2:b1:82:20:89:92:42:
                    a8:82:fb:6c:8d:12:ec:6d:70:5e:a1:74:0f:a8:64:
                    92:37:ff:08:e6:77:d4:ac:46:35:b2:f6:16:13:ef:
                    4a:19:c7:81:15:c0:d0:03:4c:7b:70:e1:32:a0:42:
                    ed:6a:1a:6a:84:12:7f:33:74:c3:e9:22:d7:28:e5:
                    37:7e:d8:ea:8e:7c:06:7d:7e:61:fa:75:01:99:26:
                    86:0e:6a:2f:50:17:f9:f3:cf:72:29:35:38:e8:58:
                    40:7d:c7:76:8b:eb:ee:ee:78:14:2e:be:a0:d9:33:
                    73:ae:76:e7:a7:f1:16:1b:16:f8:4b:ea:fc:a1:14:
                    ea:63:a9:3d:34:60:41:c3:46:5c:62:14:97:b0:1a:
                    0b:fa:30:a5:fa:66:ac:de:61:07:bd:e2:0c:ae:91:
                    91:ae:f8:fc:fd:0f:ed:b4:fc:2b:55:40:46:59:75:
                    81:91:a2:4b:d2:74:bc:97:09:01:55:3e:d8:2a:14:
                    6f:57:b2:af:12:b3:c5:bc:cb:2b:cb:70:09:a2:88:
                    25:6e:1f:f5:be:3c:bf:09:20:69:b3:f0:67:f1:3a:
                    14:d3:d6:0c:f8:b7:d1:ab:0a:0b:c8:16:15:51:39:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:C9:59:C9:91:F7:DA:70:64:BD:90:E1:00:F6:A3:A6:BD:A4:8F
            X509v3 Authority Key Identifier:
                keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/UfLJWcmR99pwZL2Q4QD2o6a9pI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.140.230.0/24
                IPv6:
                  2001:67c:144::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:21:be:1f:58:40:e1:f7:7c:e5:5b:ee:ae:11:59:63:31:60:
         42:39:38:4b:04:08:67:ff:d4:05:00:d3:d2:a2:75:c1:30:11:
         79:c5:14:e6:51:3c:2d:74:c3:e3:36:07:ff:e6:8f:d0:e9:8f:
         93:45:37:81:df:b7:a7:f9:74:7c:fa:06:4d:9e:5d:c5:70:6a:
         c1:18:c7:27:75:5f:f7:0d:18:c8:c5:fe:ef:58:31:66:86:83:
         4f:15:13:63:1f:d1:01:5c:7a:69:6d:d2:67:bf:64:33:6b:5f:
         08:9b:cc:cf:f4:0a:5d:93:79:ed:da:4b:ea:0c:ab:38:d7:86:
         f6:24:30:1f:cc:2f:23:56:b4:c6:bb:20:8f:7e:25:69:df:fe:
         a1:71:45:14:18:46:0d:9c:04:54:7a:07:e5:e0:7c:6c:81:a7:
         10:54:5f:4b:b6:9d:e9:59:9e:c9:c6:2c:67:a8:f9:13:d7:ad:
         ec:24:1d:5a:71:ba:ce:83:91:58:7f:00:da:ca:a2:1c:cf:cc:
         b8:52:e9:c9:d1:dc:b9:f0:be:d2:bf:58:eb:56:7d:05:48:3c:
         36:24:4f:52:d3:62:03:47:61:1a:89:f4:ed:e4:96:18:28:02:
         2c:63:c3:03:b0:17:e0:22:13:7d:a1:b0:7d:1d:1f:0f:f8:56:
         ac:f5:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----