Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa
File:                     hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa (raw, json)
Hash identifier:          u5eEJbkTB+kgBf7X/C1bma8UPICnnrOsAk9uOWb8xwc=
Subject key identifier:   84:CA:EF:CB:95:B7:08:C4:F3:6D:B0:3C:B4:26:F0:BC:44:2D:F1:57
Certificate issuer:       /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial:       DDB441
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa
Signing time:             Sat 01 Jan 2022 02:54:00 +0000
ROA not before:           Sat 01 Jan 2022 02:54:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        93.191.148.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14529601 (0xddb441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
        Validity
            Not Before: Jan  1 02:54:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84caefcb95b708c4f36db03cb426f0bc442df157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:df:e5:69:83:f5:48:fc:c9:02:2b:5b:99:
                    c1:f0:59:a6:ce:0c:74:92:f2:3f:e3:72:2d:e8:c6:
                    7f:58:f1:4f:21:22:12:fe:0b:7e:4d:1c:56:e7:9a:
                    73:09:18:5b:09:77:10:d9:e7:32:9a:eb:55:75:fb:
                    3c:23:27:74:9b:7d:c6:07:53:28:0f:cb:fa:bd:47:
                    df:09:82:f9:e9:38:c5:a3:cd:c5:3a:4b:44:ca:00:
                    72:f8:f2:a8:13:23:d2:d8:18:1a:61:2d:08:a2:3f:
                    d7:3b:f7:cc:5d:92:0e:c5:32:e2:46:17:c6:50:44:
                    5c:fd:ae:1a:d9:27:d5:37:81:ae:23:50:f9:ce:8f:
                    3f:25:d2:38:17:41:7e:d9:f9:ed:7f:9e:f8:9e:b8:
                    06:ae:43:7b:0e:83:4d:31:77:c0:c0:76:97:ac:45:
                    c8:59:32:6d:38:e6:fc:83:6e:58:f2:1e:f6:05:5b:
                    b3:73:23:55:e4:7c:d1:31:1d:df:e4:69:72:01:23:
                    81:ea:ea:c0:dc:a6:2e:f7:15:91:75:f8:8a:df:87:
                    14:b4:fe:e3:5f:c9:24:1b:eb:15:b4:69:fc:69:69:
                    b8:da:4d:00:55:22:31:8e:4d:c3:cf:40:f1:1e:2b:
                    83:82:a7:f4:31:32:f2:64:7f:44:48:e9:3f:cd:3e:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CA:EF:CB:95:B7:08:C4:F3:6D:B0:3C:B4:26:F0:BC:44:2D:F1:57
            X509v3 Authority Key Identifier:
                keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/hMrvy5W3CMTzbbA8tCbwvEQt8Vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:44:d3:1d:3e:55:cc:12:07:98:85:93:cc:b9:00:42:14:cb:
         e9:86:19:bc:49:02:f4:ac:10:a5:33:11:5c:0d:b9:07:55:a1:
         cf:cb:89:f3:11:f0:03:25:16:1c:dc:9b:37:f2:39:ad:8b:d8:
         eb:8a:5f:af:36:31:b7:c0:bf:a6:91:d2:a2:c1:80:ba:22:99:
         cd:04:1b:34:30:72:21:3b:20:64:fc:a2:c6:cf:b0:b7:01:4d:
         9a:5b:74:3a:6b:ad:fd:8d:8f:ac:75:57:d7:4d:b2:e3:4d:34:
         fd:f2:aa:87:85:e7:80:ac:7d:aa:cc:14:11:5a:2c:f9:af:fd:
         d0:01:fc:fa:3c:0a:f3:18:3e:d9:22:db:dd:98:3b:f1:95:eb:
         7e:39:b9:85:ac:8d:f1:cc:01:ab:66:47:91:07:ae:5e:86:e6:
         32:40:4b:ab:4e:ee:c2:24:a9:fc:c4:c1:d4:c5:b3:c1:8f:ff:
         19:50:14:6d:66:3f:ac:48:fc:8e:ff:f1:b4:b0:ef:83:fb:5f:
         14:e6:46:bf:a4:74:ca:5b:cd:50:f6:2b:2d:4a:13:87:96:1e:
         93:1f:59:fd:10:0a:a9:13:67:f6:14:8b:c9:c5:07:b3:fb:1a:
         41:d9:33:90:98:54:69:fb:42:00:62:15:f1:fc:5b:b9:9b:a0:
         43:6e:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----