Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/RV1s-qBs9E2294MU3Ni6vP_4_C8.roa
File:                     RV1s-qBs9E2294MU3Ni6vP_4_C8.roa (raw, json)
Hash identifier:          8UlfxDwAE8hZALSltgeYVL9yhIAs8odf3x6iG208JJI=
Subject key identifier:   45:5D:6C:FA:A0:6C:F4:4D:B6:F7:83:14:DC:D8:BA:BC:FF:F8:FC:2F
Certificate issuer:       /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial:       0181DA12067D93D8E1B15B00EC98B2CCCB80
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/RV1s-qBs9E2294MU3Ni6vP_4_C8.roa
Signing time:             Thu 07 Jul 2022 19:10:23 +0000
ROA not before:           Thu 07 Jul 2022 19:10:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44580
IP address blocks:        194.8.82.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:da:12:06:7d:93:d8:e1:b1:5b:00:ec:98:b2:cc:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
        Validity
            Not Before: Jul  7 19:10:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=455d6cfaa06cf44db6f78314dcd8babcfff8fc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:2f:df:93:32:11:c6:07:f4:53:62:a6:2a:
                    6c:5c:81:9c:ce:69:15:40:60:d9:c9:14:31:4f:66:
                    4f:98:65:a3:f6:66:17:fb:51:f7:06:00:02:46:dd:
                    59:58:86:cf:c6:2f:e4:ea:18:18:3b:3d:46:cd:01:
                    93:02:11:28:86:47:9e:53:27:5c:ac:4f:eb:a6:0f:
                    07:70:56:77:8c:89:75:16:2c:c9:bc:a4:a1:64:ec:
                    07:e8:4b:6d:9a:0e:f1:d8:d8:fb:c6:c8:e8:58:f9:
                    ea:6f:ba:f3:ee:94:d6:6f:c6:ad:6d:36:b8:0b:a1:
                    26:78:8f:21:71:02:cb:7e:4d:43:e5:2f:68:78:04:
                    5d:5b:3a:d5:da:83:6f:d4:27:9d:2a:14:25:b1:f1:
                    bf:05:52:64:20:f7:c9:bc:bd:0a:09:60:d5:8a:ea:
                    aa:d9:47:0a:2e:56:1b:b2:8c:7b:98:21:f9:42:ea:
                    6b:55:99:6f:f2:5b:55:83:92:41:33:ce:20:15:46:
                    df:42:6b:58:08:fa:78:02:f1:ec:65:69:3d:ba:f7:
                    29:87:c8:d1:54:ca:6f:e3:9c:54:ce:54:32:7b:0c:
                    9f:58:4f:b3:c3:1d:93:f5:f1:4d:54:30:82:d3:c4:
                    4b:66:1f:38:b9:ae:b8:63:09:de:7c:01:b9:24:d2:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:6C:FA:A0:6C:F4:4D:B6:F7:83:14:DC:D8:BA:BC:FF:F8:FC:2F
            X509v3 Authority Key Identifier:
                keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/RV1s-qBs9E2294MU3Ni6vP_4_C8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.8.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:9e:09:70:97:26:8c:3c:c6:4c:ad:b1:c2:df:6d:82:fb:1a:
         61:3a:4d:23:d3:3f:f7:ff:d5:2b:0a:97:e1:56:40:26:22:c2:
         56:0e:94:9e:1d:1b:82:b5:0e:2e:ad:1e:0c:a3:29:d4:b7:0a:
         da:9a:ea:e8:ef:aa:e0:8b:53:74:8a:11:9e:ae:4d:eb:0e:da:
         95:7f:70:ec:63:6d:21:40:63:88:24:74:b4:68:85:14:53:0d:
         1e:a6:84:de:e5:9c:e5:da:24:63:51:fa:3c:70:ee:9f:08:82:
         55:24:e3:80:fe:cf:c8:92:06:f9:41:e1:0c:d2:01:50:7e:85:
         73:73:4a:3c:5d:1e:e3:29:eb:68:fe:27:33:63:df:24:15:8b:
         36:97:60:4b:ed:ab:30:82:1c:c5:57:a6:f8:e8:20:72:55:2c:
         d1:bb:ab:55:a7:92:dd:c9:da:bb:3d:4a:a4:e0:aa:96:6f:40:
         1b:21:30:66:32:9a:aa:ab:71:1a:4c:9c:db:15:3b:68:8f:67:
         ac:a4:f2:e8:ed:97:da:e1:61:b3:e1:0f:64:ef:9c:d2:c9:2a:
         04:51:6b:ea:02:e4:aa:64:62:49:b9:f8:32:21:19:a7:f2:7b:
         ed:a8:ad:13:7c:b5:b8:7c:01:7b:c4:1c:09:1e:e7:af:76:89:
         eb:fa:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----