Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/xzp1zhb9_wi8KoPizExxhONhC8I.roa
File:                     xzp1zhb9_wi8KoPizExxhONhC8I.roa (raw, json)
Hash identifier:          tzkjaOHOEX+iy6xa6YlFlTsEUUrmlVHtqp2KDrFUmBU=
Subject key identifier:   C7:3A:75:CE:16:FD:FF:08:BC:2A:83:E2:CC:4C:71:84:E3:61:0B:C2
Certificate issuer:       /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial:       018479729CEC15572EB50ED3482D4308A841
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/xzp1zhb9_wi8KoPizExxhONhC8I.roa
Signing time:             Tue 15 Nov 2022 04:01:05 +0000
ROA not before:           Tue 15 Nov 2022 04:01:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51661
IP address blocks:        185.99.71.80/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:79:72:9c:ec:15:57:2e:b5:0e:d3:48:2d:43:08:a8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
        Validity
            Not Before: Nov 15 04:01:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c73a75ce16fdff08bc2a83e2cc4c7184e3610bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:01:45:7d:73:9f:cd:3b:79:8b:c4:86:cf:
                    16:1d:f3:bd:a8:c3:9c:6d:11:55:24:8f:3a:29:05:
                    27:cd:bb:ac:69:15:86:ef:52:67:38:29:74:3b:ab:
                    18:6a:be:d9:c2:7c:37:81:a8:e8:53:0c:8c:98:10:
                    30:27:34:65:cd:97:ef:73:8e:06:55:69:ac:05:57:
                    af:af:fe:99:e4:c9:27:2a:c3:7d:a4:28:0a:de:9d:
                    5a:95:5c:ef:1e:c8:2a:e1:63:c2:0e:f7:43:54:8c:
                    14:fe:1e:e8:d3:de:ab:cb:ac:ff:04:1e:cf:06:82:
                    cb:92:d9:76:89:6b:6f:12:1c:ba:c7:d4:37:f2:79:
                    c5:1e:88:d3:72:14:95:6a:64:e0:19:47:75:76:b7:
                    5d:cf:ce:91:85:c9:c6:95:a0:a9:c3:57:5b:e7:22:
                    cc:28:21:dd:14:d3:25:9f:ca:f0:5e:99:ed:26:20:
                    50:12:2b:aa:8b:5d:05:43:10:f9:6a:80:7a:19:c7:
                    18:7a:65:48:a7:51:89:1d:41:d6:ca:92:c5:b7:2e:
                    03:73:31:3c:ac:44:7b:fc:9d:cf:68:97:52:54:e7:
                    d4:52:ae:5c:6a:91:5f:50:21:d7:2c:8f:7d:ba:98:
                    90:69:54:a5:27:19:20:4a:87:6f:81:7b:35:30:58:
                    3d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3A:75:CE:16:FD:FF:08:BC:2A:83:E2:CC:4C:71:84:E3:61:0B:C2
            X509v3 Authority Key Identifier:
                keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/xzp1zhb9_wi8KoPizExxhONhC8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.99.71.80/29

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:ad:83:cf:6a:4e:67:52:fc:ec:52:6f:89:03:7f:51:55:
         19:e8:10:e1:b1:d2:8a:c8:32:10:19:62:7b:35:a0:ac:37:3e:
         b5:c0:9d:1b:24:0f:b1:7d:4f:01:26:b0:61:22:1b:26:1a:b9:
         51:81:42:c4:83:9c:05:cc:6b:46:f0:45:23:eb:58:70:42:50:
         fb:c3:ac:e6:9c:93:55:2d:54:46:c9:37:73:7a:a1:cd:89:f2:
         d9:89:c1:6d:69:77:5d:e0:15:af:0f:28:63:f9:dc:08:bc:f6:
         49:8b:0a:8d:67:2c:d5:ca:fc:dd:47:c2:61:af:32:dc:e8:39:
         48:46:f1:77:75:ee:63:b6:ae:73:55:2e:8b:1b:63:1d:b3:12:
         db:e2:53:12:45:37:a4:d3:93:91:92:04:14:25:3c:0b:fb:a3:
         4b:ea:42:b1:59:3b:21:90:07:60:85:8f:5f:31:67:f9:0c:c8:
         c0:33:50:2c:72:f8:df:8b:bc:35:02:11:54:d0:cb:19:44:b7:
         5b:37:5e:d7:2f:c2:d9:1c:77:c6:03:8f:e3:d4:62:60:73:3e:
         b1:32:a8:5e:a8:84:79:06:0d:2c:fa:54:fe:b0:2c:1a:c5:3e:
         45:5c:3e:43:aa:07:72:ff:76:4d:b7:e0:9a:1a:09:75:4f:45:
         c3:b7:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----