Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/0MownU-kBllYHwX90wRP1iifNuM.roa
File:                     0MownU-kBllYHwX90wRP1iifNuM.roa (raw, json)
Hash identifier:          YHXLYY0vPVn2WJqOOZPufJUapCyFVXH0K4Y31eTwPoQ=
Subject key identifier:   D0:CA:30:9D:4F:A4:06:59:58:1F:05:FD:D3:04:4F:D6:28:9F:36:E3
Certificate issuer:       /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial:       02A68EF8
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/0MownU-kBllYHwX90wRP1iifNuM.roa
Signing time:             Sat 01 Jan 2022 03:02:18 +0000
ROA not before:           Sat 01 Jan 2022 03:02:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25459
IP address blocks:        94.124.120.0/21 maxlen: 21
                          2a02:9e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44470008 (0x2a68ef8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
        Validity
            Not Before: Jan  1 03:02:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0ca309d4fa40659581f05fdd3044fd6289f36e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:26:e6:3b:02:55:99:51:46:8c:0a:bf:65:
                    9b:59:0f:9f:e4:27:09:17:87:e4:f8:f2:86:74:ba:
                    16:35:e3:6a:d2:72:09:3d:0c:d8:13:58:4c:92:1e:
                    b9:96:66:40:83:54:50:23:f4:ed:da:47:45:86:2e:
                    7e:3d:8e:0d:9d:af:8f:d6:a7:1d:a9:8d:fa:d2:9d:
                    c7:1a:1f:dc:31:cd:b8:b4:e6:84:0f:a3:3b:72:4c:
                    9d:bb:2e:d5:06:70:a6:a3:f6:5c:2b:b9:f1:67:42:
                    4f:9b:4a:9e:d8:4f:1e:7e:15:d9:3d:c3:dc:e6:45:
                    81:6a:b8:82:00:a7:72:8f:c2:4b:62:a7:b9:e0:87:
                    57:9a:69:8c:f1:c9:da:36:d7:9a:75:cb:f2:e5:44:
                    69:24:4b:79:f1:2b:09:99:49:ee:ad:85:d9:f3:09:
                    8b:fa:5f:12:1b:f3:7f:c0:80:19:93:59:3a:00:c2:
                    d3:c4:85:a2:d9:bb:67:9e:36:95:d2:65:45:28:3a:
                    2e:3b:8e:3c:27:d4:1c:d3:79:4a:27:b1:f3:f8:cc:
                    07:99:60:bc:ee:5a:4b:ab:fe:5e:3b:6c:9e:e4:27:
                    30:3f:6d:4e:7b:d6:bf:25:b4:fe:96:af:ec:72:8e:
                    e5:e1:be:6c:57:83:af:ec:ee:85:ea:05:01:0b:de:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:30:9D:4F:A4:06:59:58:1F:05:FD:D3:04:4F:D6:28:9F:36:E3
            X509v3 Authority Key Identifier:
                keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/0MownU-kBllYHwX90wRP1iifNuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.120.0/21
                IPv6:
                  2a02:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:9a:be:65:66:47:fb:8c:2f:87:ce:53:ee:1c:a9:77:3f:
         d6:b6:7f:41:3c:b0:77:6e:53:c3:18:59:6a:bb:e5:72:9f:fe:
         4f:17:31:a7:e3:d6:bb:34:14:6b:ff:7e:9b:a1:43:e4:9d:b3:
         da:cc:ea:31:3d:4b:3b:39:b9:21:3c:94:95:38:1a:11:3e:27:
         ce:5d:d8:3e:4e:09:70:1f:a5:75:34:59:02:5d:6b:67:18:15:
         6a:38:07:58:4c:68:03:f5:13:b1:b1:86:5e:46:c5:73:f4:10:
         59:52:51:77:36:f7:2b:58:f5:5e:32:9e:1c:cd:04:56:56:72:
         aa:4a:f0:75:58:cd:43:dc:aa:d4:4e:3b:1b:4d:d9:be:22:7c:
         6d:e9:3c:d5:fd:fe:09:b7:8e:33:db:09:07:7e:46:62:ce:4f:
         d9:61:13:33:df:23:b6:98:1d:0a:f2:1b:a2:29:29:5c:b9:6b:
         a1:bb:27:3f:1f:39:7f:f4:fa:11:b0:ed:50:52:e2:5d:fb:c1:
         b1:15:ee:cb:d2:7a:ba:8e:99:f0:10:dc:33:c6:d7:4e:f9:24:
         c4:56:0c:c4:52:6f:73:81:0e:68:c3:b0:c3:1d:bd:78:2a:8d:
         60:5d:c7:b0:fe:0c:54:fe:6b:bf:cd:72:92:fc:9a:15:6b:ed:
         c0:dc:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----