Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/AtuB2LtWaB-toCtC68s89gRFvPY.roa
File:                     AtuB2LtWaB-toCtC68s89gRFvPY.roa (raw, json)
Hash identifier:          9UGuCLFQhNLkD5yU93VrN0crUZsZ0cIsitznqD06Yt4=
Subject key identifier:   02:DB:81:D8:BB:56:68:1F:AD:A0:2B:42:EB:CB:3C:F6:04:45:BC:F6
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       F306
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/AtuB2LtWaB-toCtC68s89gRFvPY.roa
Signing time:             Tue 26 Apr 2022 15:32:49 +0000
ROA not before:           Tue 26 Apr 2022 15:32:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3303
IP address blocks:        194.147.134.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62214 (0xf306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Apr 26 15:32:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02db81d8bb56681fada02b42ebcb3cf60445bcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:0e:f3:18:67:70:24:8e:38:e2:5e:0c:50:
                    ba:0e:27:b2:a8:6e:7f:46:b7:38:38:0a:7b:94:ba:
                    23:4b:08:fb:4d:53:ce:b4:0e:ca:d8:43:e0:e2:b8:
                    eb:92:5a:72:90:1a:dc:df:f5:d3:04:a5:89:ed:22:
                    5d:e5:63:4f:23:a2:da:bd:e5:b9:ca:a5:8d:c5:85:
                    94:76:c5:75:43:37:f3:5e:9b:ca:8b:d4:90:8c:b0:
                    b3:20:99:31:b5:24:ff:44:cd:38:6c:13:15:8d:3c:
                    45:25:cc:b5:4c:46:d4:03:89:ca:bc:1b:01:00:90:
                    c5:ca:7f:6c:36:9b:4e:20:85:dd:ed:f4:a2:a8:32:
                    91:a0:ce:66:c5:7c:04:e0:d1:b6:a0:cb:30:c5:6f:
                    1a:7d:bf:2e:48:3a:ad:14:9c:a3:71:6e:5a:6b:32:
                    02:2d:7b:39:64:3c:ed:af:b9:53:32:75:d5:c8:a8:
                    0e:ec:cc:fb:74:9a:ea:4d:65:56:25:9a:21:cd:42:
                    f5:eb:38:dd:12:53:0d:d3:67:c6:a8:24:87:d6:21:
                    31:75:82:d8:24:99:2a:84:f4:fe:5c:86:a7:0e:7f:
                    e4:04:12:3d:8b:1d:5d:e2:b2:95:e9:91:48:21:a4:
                    3c:ae:f5:df:a3:a9:2a:34:cd:21:f9:a9:d9:1d:1f:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DB:81:D8:BB:56:68:1F:AD:A0:2B:42:EB:CB:3C:F6:04:45:BC:F6
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/AtuB2LtWaB-toCtC68s89gRFvPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:30:85:f7:8d:aa:e0:09:8a:0e:18:09:89:a1:ab:88:63:eb:
         d5:88:fd:e1:f0:4e:fa:36:95:a9:f1:33:cf:02:4a:70:7b:5e:
         b6:55:46:a2:5c:9b:99:d8:dc:fd:38:14:11:2e:7b:a0:b4:5b:
         ae:ab:9a:6a:50:76:82:da:2e:7c:8a:4f:09:c7:19:17:61:8f:
         52:32:72:d5:6c:b5:23:82:f9:ac:08:ba:26:4d:77:5e:0c:d6:
         50:b7:fc:86:30:05:de:fd:54:00:94:3e:dd:1e:41:c5:cf:0a:
         41:4b:a8:66:49:40:fe:05:b2:b9:cb:db:9c:f7:f6:c1:06:68:
         b5:91:98:59:1c:bc:46:03:76:6a:7b:7f:8c:c3:34:40:eb:be:
         6e:2a:39:dd:d7:7e:41:c6:42:4e:27:e9:22:c0:b5:57:32:51:
         1e:bc:c5:41:cc:18:96:2e:62:8b:e8:5a:b4:6c:08:ba:17:c2:
         ad:f3:d6:d7:dd:45:e0:d2:b1:80:0f:50:c2:0c:67:e3:8c:e6:
         20:b4:8b:54:92:7e:16:da:25:72:81:7d:4f:c8:e9:da:1e:11:
         3f:87:e0:66:bc:e0:dd:bb:4f:98:85:2b:41:74:fc:3d:fd:b0:
         b5:b0:6a:09:9b:1a:56:2e:22:72:be:c9:fa:49:bd:39:aa:59:
         0f:b4:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----