Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa
File:                     Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa (raw, json)
Hash identifier:          gL49QuLh61SwP1vboqSDJUHpFTjGYUsYU3o1v3vhFY8=
Subject key identifier:   43:B1:B7:F6:CD:EA:27:45:D9:F9:DE:77:2E:A6:16:1B:61:7C:C8:EB
Certificate issuer:       /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial:       1B9EECC2
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa
Signing time:             Sat 01 Jan 2022 01:01:48 +0000
ROA not before:           Sat 01 Jan 2022 01:01:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25509
IP address blocks:        213.190.96.0/19 maxlen: 24
                          2a00:5380::/29 maxlen: 32
                          2a00:5380::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463400130 (0x1b9eecc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
        Validity
            Not Before: Jan  1 01:01:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=43b1b7f6cdea2745d9f9de772ea6161b617cc8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:8e:7a:45:d6:5c:f1:93:a7:6e:e6:3f:c7:
                    0a:dc:82:b4:42:a9:03:90:d8:61:65:15:66:10:b7:
                    99:d5:fa:6a:4f:05:b5:8d:30:33:09:03:6e:ab:e6:
                    b0:30:0b:78:3e:ba:4b:ba:c1:1d:8e:bf:99:d2:4a:
                    83:a1:eb:81:fc:c2:41:42:86:c4:50:b4:c4:41:b4:
                    96:e0:04:75:2b:9f:6c:f5:ae:ac:a1:fc:f0:95:2c:
                    16:8e:b4:71:9c:c5:b9:83:61:17:24:88:7a:62:dc:
                    0b:a4:1d:a5:48:61:6d:9e:3e:d1:24:4e:0d:77:70:
                    55:80:a9:3f:2b:cb:52:7f:d9:b6:28:bc:f1:9a:28:
                    b0:7c:8e:c0:24:ef:82:bf:e1:b3:bb:7f:66:39:4b:
                    b2:32:fe:8f:c7:4b:84:2a:37:60:a9:f2:67:06:cd:
                    65:fc:eb:9a:70:a3:14:e4:fa:92:80:a9:46:6c:bb:
                    25:6f:31:fb:50:bc:0b:61:c6:36:6c:d5:48:f8:8c:
                    d2:4b:73:7f:41:95:05:d2:b4:a6:7b:f0:9e:d2:65:
                    a3:cd:c8:d5:ca:2b:a6:ad:2d:58:26:fd:f9:26:92:
                    e9:32:30:81:0b:75:ac:0e:fa:af:a9:bb:06:49:89:
                    4e:7f:04:eb:c1:58:93:e6:4b:28:13:66:47:56:6c:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B1:B7:F6:CD:EA:27:45:D9:F9:DE:77:2E:A6:16:1B:61:7C:C8:EB
            X509v3 Authority Key Identifier:
                keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/Q7G39s3qJ0XZ-d53LqYWG2F8yOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.190.96.0/19
                IPv6:
                  2a00:5380::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:ca:eb:25:5a:71:92:e8:62:2f:4f:b4:cf:d9:81:d2:20:38:
         4d:b3:4c:8f:d9:98:d1:02:9e:de:61:6e:d4:7e:4c:cd:ca:df:
         62:43:14:4c:be:10:74:31:85:68:3d:21:58:05:58:bd:7a:f2:
         00:ea:86:d9:78:55:82:96:73:f5:25:68:d6:8c:ad:d8:15:34:
         03:74:50:f9:09:05:96:db:9b:24:85:ad:00:3a:d1:c6:81:87:
         0b:39:59:c3:c9:30:bd:f6:9b:a5:49:49:65:b8:4f:9a:a5:36:
         4a:c4:8b:2a:66:92:69:15:a2:3a:73:82:8b:7b:e9:e6:39:a3:
         af:0f:81:b3:a6:5e:c8:7d:86:93:fd:b1:ba:e0:c2:d2:f1:75:
         2e:08:de:87:96:89:ef:80:da:28:df:43:2d:44:a8:12:97:69:
         ab:b6:a7:f2:50:2b:5f:b0:80:6a:7c:1d:f0:82:bd:ef:4b:95:
         1d:4e:52:21:6d:70:a6:17:de:da:8b:d0:ea:a9:f1:4a:19:f2:
         35:74:7b:fa:33:84:84:de:f2:d7:19:7d:61:bd:77:2b:3b:e1:
         63:67:3c:0b:a8:29:ce:90:37:6d:5f:88:03:11:82:a0:76:e6:
         f5:c5:5b:e2:5d:28:7b:a8:2f:ec:3b:bf:0b:8e:ca:96:b1:90:
         e1:21:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----