Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/jyX_c1SAJ-ZG02WKrGpY4ocH7Tk.roa
File:                     jyX_c1SAJ-ZG02WKrGpY4ocH7Tk.roa (raw, json)
Hash identifier:          HcES5W7IrmzpO/IGlwFm9l6yXVdD3i3DTfmAQRoaXGo=
Subject key identifier:   8F:25:FF:73:54:80:27:E6:46:D3:65:8A:AC:6A:58:E2:87:07:ED:39
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       01DA671E
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/jyX_c1SAJ-ZG02WKrGpY4ocH7Tk.roa
Signing time:             Sat 01 Jan 2022 03:57:14 +0000
ROA not before:           Sat 01 Jan 2022 03:57:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200345
IP address blocks:        194.147.24.0/22 maxlen: 24
                          2a0d:840::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31090462 (0x1da671e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: Jan  1 03:57:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f25ff73548027e646d3658aac6a58e28707ed39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:03:9b:bc:62:e9:27:e3:32:79:19:4a:47:
                    a2:0f:26:2e:57:38:50:fe:ce:fc:21:2d:05:25:f0:
                    6c:8f:89:a4:c0:84:24:25:96:58:52:ed:14:d6:7f:
                    8a:4b:51:ea:67:51:b4:c9:39:aa:9d:b3:69:ae:0d:
                    0f:01:1a:75:43:66:38:28:06:dc:53:0d:3a:7a:79:
                    82:3f:a4:ce:3f:26:a6:1c:ce:32:05:ba:a2:49:5f:
                    37:e3:ad:76:c8:fe:7e:84:b4:7c:a8:fc:13:48:cb:
                    22:65:cb:9e:73:4f:1f:ec:2a:c3:3b:7d:12:52:35:
                    39:7f:1d:53:05:c5:a4:ee:64:78:7f:e5:73:ec:00:
                    ab:8e:52:21:9d:1a:08:35:7f:2e:cf:e2:eb:b1:bd:
                    ba:74:0a:54:c7:98:36:c1:5f:f8:3a:3b:13:6c:db:
                    0a:0a:e3:9f:f4:65:8e:63:06:29:97:92:18:1f:6d:
                    25:3a:e7:2a:56:78:d8:61:80:02:cc:5f:65:c5:da:
                    9c:36:18:5d:a2:60:02:85:35:df:96:8b:22:87:26:
                    a1:ec:d8:aa:46:8b:a6:ad:88:21:57:85:33:20:ef:
                    50:f5:fc:ee:c6:04:bf:09:62:08:c5:f7:a6:1d:51:
                    1e:fd:d4:0c:80:55:09:56:42:cc:af:2d:27:bf:91:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:25:FF:73:54:80:27:E6:46:D3:65:8A:AC:6A:58:E2:87:07:ED:39
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/jyX_c1SAJ-ZG02WKrGpY4ocH7Tk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.24.0/22
                IPv6:
                  2a0d:840::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:31:a7:9b:dd:8f:56:99:75:af:17:0a:90:2a:83:dc:64:c9:
         19:79:5d:3f:64:f7:01:bc:ab:cc:14:80:21:a5:fe:95:e7:d7:
         87:61:c1:5c:7b:55:7e:9b:f9:ea:44:24:7e:b4:ec:73:3a:8e:
         b8:69:8d:91:cc:a6:93:3f:66:a8:5d:45:bd:6b:fc:8e:cb:b6:
         fa:0a:d0:9c:de:b7:45:97:15:65:b6:69:a7:7a:ae:99:93:69:
         1a:18:5a:ed:ab:0a:e1:6a:f3:8a:33:26:5c:46:22:58:b7:25:
         14:59:87:28:3a:35:d5:e8:da:e3:09:e2:66:b1:48:1c:f7:ea:
         bd:9c:25:4d:18:f7:11:3c:45:8e:fd:8e:7e:89:a5:2c:a7:54:
         db:83:f0:af:3e:e9:e8:2c:37:36:58:e3:32:22:03:69:bc:ea:
         f4:bf:3e:f1:43:53:6d:6f:50:82:b7:fc:f0:b2:d6:49:c2:46:
         9e:0f:1f:8b:89:dc:1b:b3:a4:f5:92:8d:c2:12:16:fd:a2:4c:
         87:06:ac:93:f5:9c:dc:3c:84:ad:de:a4:97:c4:cf:be:58:14:
         71:26:ad:c8:7e:87:15:25:dd:d8:1a:55:6b:95:6e:1a:41:40:
         02:0e:02:5e:be:3b:88:9d:09:14:11:8d:a7:d4:fc:92:30:54:
         68:d2:da:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----