Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/GGnBR4EFeY8xJrijcPLZ1jw_hLs.roa
File:                     GGnBR4EFeY8xJrijcPLZ1jw_hLs.roa (raw, json)
Hash identifier:          lbM4J6t1B/Z/n8Ii4RADDgIAH/ogT/PcyfwQ4ff3bUk=
Subject key identifier:   18:69:C1:47:81:05:79:8F:31:26:B8:A3:70:F2:D9:D6:3C:3F:84:BB
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       0185204089BEE2ED9F6EA993586FDE5F5971
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/GGnBR4EFeY8xJrijcPLZ1jw_hLs.roa
Signing time:             Sat 17 Dec 2022 13:22:58 +0000
ROA not before:           Sat 17 Dec 2022 13:22:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58007
IP address blocks:        194.8.28.0/24 maxlen: 24
                          2a13:4380::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:20:40:89:be:e2:ed:9f:6e:a9:93:58:6f:de:5f:59:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Dec 17 13:22:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1869c1478105798f3126b8a370f2d9d63c3f84bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:90:ad:bb:4a:1f:03:f7:c3:f1:e3:24:3b:
                    8f:f8:03:d0:e5:62:bc:84:e9:75:e0:7b:12:7e:80:
                    ec:fb:02:36:92:ba:56:3e:07:70:ae:25:54:ae:fc:
                    66:05:43:c8:93:2f:86:3b:71:bc:5a:1d:12:37:b7:
                    f8:26:4e:6b:09:de:e4:10:ae:60:1e:a0:ac:bd:a7:
                    06:7f:b1:ed:9b:94:84:24:67:ac:7b:0a:5e:bd:76:
                    ac:46:74:ba:5b:56:9a:8d:4f:d1:6f:5c:99:d7:3b:
                    43:29:20:ee:5a:b8:0d:b1:b2:1a:28:11:f9:5f:c6:
                    da:f4:cf:32:0b:86:ed:03:55:05:27:22:7e:da:a7:
                    97:2c:e8:07:e1:fc:f2:8e:5c:61:c0:91:2f:cc:69:
                    bf:a6:f1:3a:06:68:b8:67:86:da:17:c1:12:e2:04:
                    4d:0f:00:ec:74:25:11:11:b6:63:1d:ee:a3:5b:a7:
                    ae:fe:a7:84:04:3a:8d:9b:aa:c8:d7:62:cf:c1:3c:
                    53:dc:00:23:77:b6:1b:69:34:8e:c3:e7:b7:30:1e:
                    56:da:23:93:ee:04:f9:03:e5:26:54:de:70:3a:7f:
                    4c:d8:c1:67:94:db:25:b6:9b:02:fb:4a:79:94:e9:
                    1d:44:36:ad:a2:4e:46:cb:0a:f4:e4:1a:5b:2d:e9:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:69:C1:47:81:05:79:8F:31:26:B8:A3:70:F2:D9:D6:3C:3F:84:BB
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/GGnBR4EFeY8xJrijcPLZ1jw_hLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.8.28.0/24
                IPv6:
                  2a13:4380::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:34:39:af:aa:39:ce:93:27:13:94:f0:13:23:80:99:bd:ef:
         3c:04:a8:f1:a5:11:d1:39:96:c2:0b:a6:2a:d6:a4:66:b4:21:
         d1:da:44:b5:72:98:c0:55:97:5b:b2:56:70:fe:c4:80:5b:73:
         e4:59:2d:1e:96:41:7f:03:dc:5d:41:12:f5:5f:e2:a0:d3:6b:
         e7:73:23:4e:87:5e:a9:58:91:01:14:17:98:ac:df:85:53:ff:
         93:29:2f:d6:22:f1:e6:ff:dd:b6:44:05:10:4d:d9:4c:3e:e5:
         82:5b:df:d8:9f:aa:85:6d:27:89:4a:2b:3d:10:d7:61:6d:11:
         68:b5:d6:f8:f8:2c:8c:d5:ce:23:8d:80:de:1c:06:0a:0d:bb:
         46:c2:bb:4d:b2:38:1b:89:05:94:b9:f7:fa:0a:93:ed:ba:40:
         54:6d:7d:21:be:34:d9:c4:47:37:36:2e:84:46:56:ce:f9:0c:
         6e:4a:04:12:3f:77:74:19:24:72:e1:b7:97:45:8e:c3:7d:25:
         83:a3:2f:7c:38:ab:26:7d:7d:4a:e8:e7:b3:13:a1:35:28:5c:
         2f:d6:ec:84:6a:51:3d:61:6c:e6:45:ca:0c:0f:66:1d:9c:c9:
         57:3d:42:40:29:28:3f:47:20:c1:c6:86:53:2b:b5:bc:01:67:
         5c:26:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----