Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/4sete6XCxu_eNBNI0b94-WDkEuA.roa
File:                     4sete6XCxu_eNBNI0b94-WDkEuA.roa (raw, json)
Hash identifier:          Zks/mpLn70NMJMhTMy6kUgeWnexM4Nerpy/XJ/Cc2bE=
Subject key identifier:   E2:C7:AD:7B:A5:C2:C6:EF:DE:34:13:48:D1:BF:78:F9:60:E4:12:E0
Certificate issuer:       /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial:       17304D17
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/4sete6XCxu_eNBNI0b94-WDkEuA.roa
Signing time:             Sat 01 Jan 2022 14:06:33 +0000
ROA not before:           Sat 01 Jan 2022 14:06:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25365
IP address blocks:        195.190.136.0/24 maxlen: 24
                          2001:67c:2f24::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389041431 (0x17304d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
        Validity
            Not Before: Jan  1 14:06:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2c7ad7ba5c2c6efde341348d1bf78f960e412e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:b6:32:05:7e:57:ad:c9:49:e7:f7:73:4b:
                    bd:8d:6c:fb:e4:e9:fe:8c:e8:f2:cd:ec:34:9f:7f:
                    cd:a0:5e:df:03:3c:a5:45:b1:67:d1:7d:0a:93:11:
                    35:ce:3a:40:ff:a0:04:ec:de:61:04:75:0c:b6:76:
                    94:f5:d7:49:d3:4d:86:db:ef:e5:89:5d:93:ae:36:
                    5c:78:81:75:e1:ca:d5:c0:0d:b6:97:8f:7d:3f:d9:
                    49:30:d5:da:ac:7f:dc:c3:39:87:0a:26:be:2e:9e:
                    29:e1:ce:8d:40:82:da:d8:ac:04:c7:b2:e3:7f:9a:
                    4b:de:54:cd:02:03:fb:88:af:4d:55:12:72:63:6f:
                    57:56:9c:d2:d8:80:81:86:74:37:7f:50:22:87:ef:
                    c1:bd:ae:4c:22:cd:ed:ee:70:f2:af:b0:e2:05:06:
                    cd:fa:db:64:19:3f:01:d8:14:1b:2b:77:9b:55:a9:
                    26:36:8b:d0:63:8a:fa:3c:e2:d6:da:f2:3b:54:c3:
                    6a:88:86:34:6e:15:ef:45:7f:75:7a:29:b0:26:64:
                    3b:b5:84:cc:81:52:71:b2:e7:45:46:09:b3:29:30:
                    a4:6e:1b:26:04:9c:3f:39:d6:6f:3d:8d:fe:ba:ec:
                    45:03:f3:50:15:18:86:d8:95:86:76:c9:c0:d4:d6:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C7:AD:7B:A5:C2:C6:EF:DE:34:13:48:D1:BF:78:F9:60:E4:12:E0
            X509v3 Authority Key Identifier:
                keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/4sete6XCxu_eNBNI0b94-WDkEuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.190.136.0/24
                IPv6:
                  2001:67c:2f24::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:ec:8d:ef:2e:55:6c:88:90:66:c3:a2:af:35:2f:63:e8:
         56:75:0b:30:92:95:c1:9d:ae:13:57:4a:d6:33:3f:24:35:27:
         81:d0:86:9f:cd:68:86:e3:5f:47:40:e1:7a:5c:f6:97:c1:50:
         e9:3b:54:5e:0a:58:8a:94:a7:96:47:bd:ad:10:74:48:55:1e:
         82:d1:aa:88:a4:14:cc:ce:0e:9c:3c:95:05:05:3a:62:4b:28:
         95:ad:c0:5c:f1:66:19:6f:f1:fa:5d:7e:6c:38:b8:64:4f:f2:
         8e:f1:2f:d7:ee:a6:73:de:14:0f:94:1f:bb:23:14:f6:b3:d8:
         30:81:eb:73:c2:be:b2:89:79:0a:bb:32:05:88:5c:86:7f:d6:
         2c:a2:b9:c7:b3:d0:a7:c9:67:70:fb:d8:63:be:99:f6:3f:58:
         8e:91:50:19:c3:de:cc:ae:37:ad:c4:93:72:c1:c6:65:10:de:
         69:a8:e8:ef:17:e5:74:c1:3c:db:97:9e:43:12:06:d9:8e:2c:
         5c:a7:ef:b7:7a:a6:05:af:76:22:b0:8e:17:37:fb:38:97:52:
         f3:88:57:46:ad:41:2f:1d:c3:54:ab:34:8c:a5:11:43:97:dc:
         d0:ab:b8:6f:02:1f:4a:a1:3f:a4:d7:ca:d4:01:03:b0:a4:83:
         e2:37:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----