Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/P0fjfZVzmGdW3PJkueDrEtM9qig.roa
File:                     P0fjfZVzmGdW3PJkueDrEtM9qig.roa (raw, json)
Hash identifier:          7l4HoS2giqLqKZuSW5Vvmz7L0V+YFRLJ5C/K9M/5rX8=
Subject key identifier:   3F:47:E3:7D:95:73:98:67:56:DC:F2:64:B9:E0:EB:12:D3:3D:AA:28
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       01B50F9C
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/P0fjfZVzmGdW3PJkueDrEtM9qig.roa
Signing time:             Sat 01 Jan 2022 09:55:11 +0000
ROA not before:           Sat 01 Jan 2022 09:55:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62336
IP address blocks:        185.193.44.0/24 maxlen: 24
                          2a10:fcc0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28643228 (0x1b50f9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Jan  1 09:55:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3f47e37d9573986756dcf264b9e0eb12d33daa28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:f2:9d:ff:0f:12:47:85:19:d1:67:e5:f4:
                    1a:10:d2:94:fd:a7:b7:88:97:ac:8a:57:03:59:cd:
                    4b:95:a6:10:7f:46:07:3f:20:d9:6e:a5:45:ab:81:
                    65:f2:54:56:98:72:16:b5:be:08:f7:4c:f2:28:f5:
                    12:14:db:59:91:e2:2b:bd:c9:a6:f7:4c:83:19:1c:
                    1e:ae:69:95:c8:a4:62:67:6b:c6:76:9b:e0:f7:8a:
                    dd:39:d7:60:03:69:3a:5a:a7:d9:cc:90:48:08:2c:
                    0c:b2:b0:66:ce:44:af:e5:12:f7:dd:52:fc:ce:8a:
                    1e:89:94:2a:be:e3:a9:1e:6c:3a:2d:37:ee:e1:ad:
                    fa:58:cb:98:9d:46:2c:ba:a4:63:12:53:6b:59:b1:
                    24:8b:97:b7:33:c4:16:e7:62:21:ed:bc:f4:58:50:
                    b6:fa:9e:43:42:35:08:86:f7:97:06:8d:57:92:79:
                    e8:01:14:00:e4:48:95:6f:bb:08:6b:ba:b6:6a:d6:
                    c7:31:36:d8:21:f6:63:d5:16:b0:9d:13:3b:77:1f:
                    33:8e:5a:a4:c0:5f:d5:89:e4:39:60:99:73:53:d4:
                    1b:61:2e:6b:ba:c9:a4:5e:98:81:41:94:fd:e6:0b:
                    08:6a:38:1f:aa:84:62:4e:9d:e1:5c:00:bf:2e:7a:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:E3:7D:95:73:98:67:56:DC:F2:64:B9:E0:EB:12:D3:3D:AA:28
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/P0fjfZVzmGdW3PJkueDrEtM9qig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.44.0/24
                IPv6:
                  2a10:fcc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         ad:dd:3d:73:f6:2c:80:db:69:3a:7d:49:b3:4c:4c:9b:50:45:
         3d:f2:51:c7:a3:ad:0d:80:58:71:c5:b6:84:68:33:43:2c:8a:
         e1:9c:68:93:c2:24:c7:0f:25:1d:c2:14:ed:64:fa:18:cb:49:
         05:51:43:29:66:28:b9:b7:df:e7:53:d6:4e:23:d5:17:7d:d2:
         e3:cd:7c:d1:f8:15:72:b9:c0:0e:2d:1e:9f:8a:83:ec:48:6d:
         58:c4:89:47:2a:22:15:54:a7:bd:31:10:9c:19:f8:ab:bf:4a:
         19:fe:a8:6e:fa:7e:66:6d:c7:87:f2:e6:f4:e2:f1:57:ca:19:
         2d:47:ce:23:c0:07:f3:8a:84:eb:4d:72:02:b5:33:20:5c:44:
         0c:58:10:17:89:32:b8:6a:d6:8b:73:20:4c:a1:3f:06:cf:d6:
         e8:cc:18:f2:e3:1e:60:93:eb:61:3d:b5:28:f7:9a:94:2e:92:
         da:9d:a3:83:b4:c9:2d:5a:35:dd:93:ac:a1:85:f4:da:36:8c:
         08:e4:6c:a2:47:f8:fa:0b:ec:03:ac:6d:fe:d8:14:aa:c2:a9:
         00:f8:a5:fa:77:03:a6:79:6f:5f:4b:fb:ec:d8:93:2f:f8:de:
         cd:84:8e:fc:14:bc:46:03:c2:06:47:a2:7c:69:18:c9:ba:5e:
         4a:c7:dc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----