Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/WbuJRTHGsNPJeissLmopoOjcO7o.roa
File:                     WbuJRTHGsNPJeissLmopoOjcO7o.roa (raw, json)
Hash identifier:          hIBwU/ByAOPyvfPZ/N9oTn4F9874i1lSLvCtO9GKhE0=
Subject key identifier:   59:BB:89:45:31:C6:B0:D3:C9:7A:2B:2C:2E:6A:29:A0:E8:DC:3B:BA
Certificate issuer:       /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial:       0184AA0BCD35B9AC13C75847DD4539DD8078
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/WbuJRTHGsNPJeissLmopoOjcO7o.roa
Signing time:             Thu 24 Nov 2022 14:30:10 +0000
ROA not before:           Thu 24 Nov 2022 14:30:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25166
IP address blocks:        193.201.172.0/24 maxlen: 24
                          2001:67c:16b8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:aa:0b:cd:35:b9:ac:13:c7:58:47:dd:45:39:dd:80:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
        Validity
            Not Before: Nov 24 14:30:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59bb894531c6b0d3c97a2b2c2e6a29a0e8dc3bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:cf:41:f7:30:7f:17:e1:85:60:0b:50:e9:
                    fc:64:cf:6e:d3:9f:a1:f5:21:8e:79:c5:10:ab:4a:
                    aa:97:da:9c:ff:72:b7:0c:9e:93:c9:d7:f9:aa:dd:
                    05:17:67:21:cc:24:4e:95:ee:1b:b3:8c:52:3f:39:
                    54:3c:fd:ca:bd:52:3e:f6:cb:b0:73:a5:e4:a9:34:
                    68:71:94:68:d5:77:94:e1:ed:b9:b5:59:95:a0:46:
                    b2:6b:fd:4c:76:6d:75:dd:cd:64:7e:81:a7:ad:94:
                    61:be:bd:ff:e6:a3:c8:72:42:b8:dd:67:ae:c2:6b:
                    2c:68:cd:26:3e:72:0a:5d:16:9a:a6:63:84:1e:91:
                    37:41:38:8d:55:12:82:25:f9:ec:9f:0d:d7:90:77:
                    84:71:cb:da:81:54:63:17:ce:d5:7a:47:b7:ae:c2:
                    ca:8c:04:f8:f6:cf:08:c1:eb:84:83:5d:e2:1e:72:
                    4c:41:d0:e9:a6:33:c0:26:1e:97:14:ff:3d:65:cd:
                    69:22:3c:4c:42:38:22:7c:a8:21:86:35:85:73:2c:
                    0f:16:0d:82:82:f3:06:bf:c9:ec:89:13:7c:0a:b4:
                    f1:61:43:16:c0:fa:73:15:34:c2:11:b3:e5:a2:ed:
                    ca:47:ec:01:d2:12:a9:80:07:ca:ab:39:7c:d5:39:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BB:89:45:31:C6:B0:D3:C9:7A:2B:2C:2E:6A:29:A0:E8:DC:3B:BA
            X509v3 Authority Key Identifier:
                keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/WbuJRTHGsNPJeissLmopoOjcO7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.172.0/24
                IPv6:
                  2001:67c:16b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:33:b0:b8:52:d7:6c:af:73:e1:73:ed:db:d2:a1:c1:b8:c7:
         e9:5b:d3:e5:b8:bf:72:86:18:5b:95:cd:ed:47:3b:46:c5:c2:
         ee:a6:49:e8:56:cb:c7:40:3c:fe:9b:be:9c:7f:f2:1d:53:bd:
         bc:ad:0a:93:e1:40:9b:bc:ee:18:12:41:e2:81:bb:ab:ea:4c:
         6a:cc:18:70:18:97:7d:19:79:20:0f:7c:81:25:a4:86:da:56:
         f0:3e:4f:ca:3c:ec:ab:3e:27:69:93:bd:bc:b7:1e:76:12:db:
         6d:43:aa:b0:41:3d:e6:80:87:26:00:61:3b:ca:1e:01:4c:57:
         de:9d:1a:e5:82:bc:87:f8:4e:68:0a:26:17:c1:a0:92:97:38:
         08:dc:ef:94:98:fa:ab:e2:86:51:18:77:6a:53:e3:26:f2:4d:
         54:0d:74:03:f9:63:5e:71:37:63:b8:5b:16:28:b8:27:15:3f:
         1c:5e:9f:77:62:2a:63:55:ab:6f:f3:13:92:a0:e9:0b:fc:9b:
         c8:13:b5:62:88:46:91:fa:59:57:9d:f6:cb:a5:c1:7b:23:e4:
         f9:14:77:f2:87:da:4d:4a:41:ce:a8:c2:f6:c2:4a:83:2e:a8:
         de:f7:1f:89:2e:bc:ea:59:97:a6:1f:a2:d9:a7:24:06:84:b3:
         02:af:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----