Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/LGK1dDrppQMAH7T555ebFSctyT8.roa
File:                     LGK1dDrppQMAH7T555ebFSctyT8.roa (raw, json)
Hash identifier:          ILNm7HBLIWcfwpg/cZ2ld8+QmBLn+J3FLyKRziWeGi8=
Subject key identifier:   2C:62:B5:74:3A:E9:A5:03:00:1F:B4:F9:E7:97:9B:15:27:2D:C9:3F
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       0184EED246EF5211E47DC625961FC1F26F4C
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/LGK1dDrppQMAH7T555ebFSctyT8.roa
Signing time:             Wed 07 Dec 2022 23:01:08 +0000
ROA not before:           Wed 07 Dec 2022 23:01:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58007
IP address blocks:        194.8.28.0/24 maxlen: 24
                          2a13:4380::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:d2:46:ef:52:11:e4:7d:c6:25:96:1f:c1:f2:6f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Dec  7 23:01:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c62b5743ae9a503001fb4f9e7979b15272dc93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:e6:4c:72:71:7e:3b:08:e9:28:dc:a2:a0:
                    be:1f:16:37:7e:67:d8:aa:33:3b:54:13:08:63:e2:
                    22:de:8c:2e:f2:60:ef:4a:b9:d5:22:03:c3:dc:8f:
                    03:a3:22:0c:34:1a:e1:66:fb:4d:c5:da:3c:9d:e6:
                    ed:da:cd:8e:2e:e7:20:a1:81:6e:73:b2:ec:df:8f:
                    72:1a:9b:38:1b:1d:44:ae:24:68:a8:22:ac:64:06:
                    ef:3d:c0:23:ed:8f:8f:5f:f3:cd:b8:7f:1d:3e:c3:
                    f2:fa:cc:cd:4e:e7:6b:90:8b:8d:32:81:bf:d1:55:
                    05:2f:51:6a:f4:6c:de:c2:8a:9e:bd:07:e8:dd:16:
                    7b:73:30:2a:03:ca:d8:b6:d1:83:6a:ee:14:aa:aa:
                    df:6e:e3:f6:dc:65:49:8d:61:b8:7a:b2:9c:ce:99:
                    5b:77:f5:00:61:be:10:2c:2c:0c:88:60:61:ee:a7:
                    3c:7c:1c:67:63:ee:9e:73:a7:b8:4f:ce:4e:42:a7:
                    4b:a9:1a:9c:26:22:b9:82:c5:90:c7:62:96:f0:5f:
                    f7:3e:20:23:88:25:ee:52:7d:90:15:b4:17:e3:1a:
                    5f:fa:39:0d:e2:13:7c:b4:b9:ed:68:17:15:71:7a:
                    5d:c9:66:66:ac:74:23:6b:50:7a:d1:6d:a2:83:30:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:62:B5:74:3A:E9:A5:03:00:1F:B4:F9:E7:97:9B:15:27:2D:C9:3F
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/LGK1dDrppQMAH7T555ebFSctyT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.8.28.0/24
                IPv6:
                  2a13:4380::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:37:45:7d:70:d0:ef:99:52:d8:61:3c:54:00:2f:13:55:9f:
         f2:d7:1b:7b:ad:94:e2:57:39:53:79:2d:d9:6b:45:0c:6d:7e:
         d1:a6:26:78:78:0c:a7:4d:be:27:26:fb:71:3e:62:63:35:49:
         98:59:3d:8c:16:4c:28:24:f8:6e:1b:f8:06:55:34:d8:8a:da:
         1a:69:14:a3:dc:87:83:0c:30:55:63:ec:75:35:83:f1:97:69:
         3d:7d:ca:59:9f:e1:cf:99:62:a3:9f:ff:0b:7d:0a:e1:7d:d4:
         54:e2:f7:00:ca:d8:10:95:23:87:03:1d:a4:d8:0b:63:5d:f5:
         88:f9:06:43:26:ea:28:e8:f5:54:bd:f2:f2:9d:d4:30:1a:aa:
         2b:4b:c9:87:18:fc:3c:71:89:99:9a:79:09:b1:77:3e:e3:21:
         35:72:a5:0b:9b:cb:8f:fc:7c:8c:63:20:9e:93:f8:43:35:b5:
         49:88:fb:14:99:77:02:f9:5a:18:0c:d1:bd:a0:08:ef:b1:89:
         b6:73:4d:0f:b7:05:94:70:21:8e:a4:13:1c:e7:45:ad:2d:56:
         d0:b8:84:5b:8f:f2:09:33:e7:bc:81:88:b1:3e:60:5f:8d:de:
         a2:5b:38:72:3f:9e:e2:26:f8:06:79:f3:dc:c7:7d:6d:d1:48:
         d0:da:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----