Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/ZUtJgQXi6lJ9e70yVDZ933SkiCo.roa
File:                     ZUtJgQXi6lJ9e70yVDZ933SkiCo.roa (raw, json)
Hash identifier:          xiBVEoFOHwQVPtzGwkLXUB/EUNrK/mVGodkgVk6bqRY=
Subject key identifier:   65:4B:49:81:05:E2:EA:52:7D:7B:BD:32:54:36:7D:DF:74:A4:88:2A
Certificate issuer:       /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial:       05FD9D45
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/ZUtJgQXi6lJ9e70yVDZ933SkiCo.roa
Signing time:             Sat 01 Jan 2022 03:57:07 +0000
ROA not before:           Sat 01 Jan 2022 03:57:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34447
IP address blocks:        185.97.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100506949 (0x5fd9d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
        Validity
            Not Before: Jan  1 03:57:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=654b498105e2ea527d7bbd3254367ddf74a4882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:d9:a6:4f:1e:79:c7:16:92:be:eb:a7:2b:
                    98:d3:7f:c5:16:8a:79:e8:52:21:10:23:98:61:72:
                    04:7c:cc:3e:f2:ac:cb:3e:95:ba:91:01:d4:ad:c2:
                    6c:0c:49:a0:f6:6a:39:64:69:1f:f8:28:d8:50:38:
                    f3:f7:cd:b8:92:46:a4:68:7f:aa:71:6f:4a:f2:0a:
                    ed:49:60:ee:50:3c:18:43:ab:6e:5b:95:3c:00:7b:
                    b2:44:c7:15:51:53:89:cb:01:b4:2d:b5:d8:3a:77:
                    b6:b4:6b:cb:82:31:ac:99:28:c6:2b:8e:87:0e:b3:
                    72:fe:77:06:74:fe:8d:e8:c4:6b:88:78:ee:0c:57:
                    cf:2a:2e:24:00:25:40:0a:a8:f2:8f:e3:4d:54:7d:
                    3a:17:1a:06:07:f5:b1:d8:4b:79:e8:1d:ac:41:05:
                    73:02:bf:30:ab:0b:e6:f4:a2:c3:61:59:77:35:62:
                    4d:4c:27:e3:bc:c5:9f:d6:bc:6f:32:28:d7:d3:4e:
                    9d:ac:35:1d:21:79:1e:6f:fe:e5:6e:92:d3:6e:ef:
                    f1:47:81:30:60:e4:64:8c:0b:f4:3c:af:04:7b:49:
                    49:44:5c:0f:07:64:aa:0f:59:c6:c7:85:c9:b6:b4:
                    cd:ff:72:2d:4f:1c:4d:c0:24:29:3e:f7:2e:c2:8a:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:49:81:05:E2:EA:52:7D:7B:BD:32:54:36:7D:DF:74:A4:88:2A
            X509v3 Authority Key Identifier:
                keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/ZUtJgQXi6lJ9e70yVDZ933SkiCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:7c:43:2e:ca:e2:cd:b3:e8:e1:77:90:14:9d:45:25:bd:
         7c:45:a4:0f:16:5f:3d:59:b7:9d:7e:34:d3:e6:35:0e:52:28:
         99:80:af:8e:77:52:b4:8b:7f:dd:58:67:a0:3f:aa:c2:4b:25:
         da:ac:33:5d:35:e2:30:1c:8e:23:fc:9c:73:ec:df:c9:fa:ab:
         7b:60:be:8d:ec:cb:df:0a:c8:69:97:ef:75:a7:8b:31:45:aa:
         73:06:b0:73:8a:e3:b8:a5:7c:25:ef:0b:32:e0:f1:8e:a7:3d:
         ab:95:7f:0c:23:d3:17:7f:85:e5:45:b4:50:1f:5c:16:87:02:
         ff:2d:51:f4:3e:a2:59:de:e0:b1:99:3c:f4:58:1e:0f:40:1d:
         24:ad:6d:e9:27:98:11:ac:56:f1:87:74:e3:33:a2:04:6b:a8:
         4a:0a:1c:ea:88:ea:a5:0c:13:ee:36:0d:97:0a:12:ec:7d:3c:
         47:3d:b7:82:bc:3d:c7:d5:d0:54:52:e0:64:02:3b:25:6c:12:
         60:45:12:7e:6f:69:21:f5:5d:b6:0e:83:46:17:3c:90:ab:b6:
         18:e8:cd:85:c5:bc:2e:bd:98:9b:44:b2:e6:de:9a:5f:f9:99:
         9d:6f:79:43:a1:0f:db:4f:c8:b6:3a:5c:80:5c:cc:bc:95:a4:
         7c:56:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----