Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/70Gx21qwkgiCigz2FoFrtVVgM5M.roa
File:                     70Gx21qwkgiCigz2FoFrtVVgM5M.roa (raw, json)
Hash identifier:          uRXb80/kASsHfgUZiFU/wI3VXKQKkYOnTcmpOW2I7LA=
Subject key identifier:   EF:41:B1:DB:5A:B0:92:08:82:8A:0C:F6:16:81:6B:B5:55:60:33:93
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       177AD4C8
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/70Gx21qwkgiCigz2FoFrtVVgM5M.roa
Signing time:             Sat 01 Jan 2022 06:55:23 +0000
ROA not before:           Sat 01 Jan 2022 06:55:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197991
IP address blocks:        193.126.88.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393925832 (0x177ad4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  1 06:55:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef41b1db5ab09208828a0cf616816bb555603393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:e8:da:9c:59:b1:17:7d:73:f6:2e:40:4b:
                    95:85:45:75:47:2c:dd:1a:9a:83:bd:71:88:3e:6e:
                    47:ac:19:56:df:8b:a3:f4:5e:84:80:59:90:32:07:
                    22:43:d5:76:c0:45:7f:82:08:e5:aa:22:04:34:0f:
                    f2:76:8e:a8:e1:25:9a:53:6b:6b:ef:01:a6:87:85:
                    23:a6:71:05:1e:20:13:7f:d1:0e:c3:c2:1d:99:5d:
                    0e:e9:49:ca:6c:62:c9:3f:4d:09:66:1a:93:2e:f0:
                    62:21:31:69:80:18:50:30:5b:7c:bb:e9:78:c6:65:
                    77:d0:d5:1a:cb:94:34:b2:a2:30:e6:10:ed:9c:49:
                    d0:91:16:f4:fd:f9:a7:95:53:65:d5:fa:b5:57:45:
                    81:db:fe:da:22:c7:1c:ce:c2:80:a9:f9:3b:2b:73:
                    60:02:16:af:c8:66:82:42:6e:f8:bf:e9:3b:ef:7e:
                    59:d0:c1:48:1a:32:bd:3b:76:02:fc:56:18:1a:56:
                    b5:9e:2a:93:7e:9b:74:02:21:1d:13:77:78:31:34:
                    fe:88:fc:b1:22:dd:3d:45:9e:3b:14:7d:2a:7e:9e:
                    c4:6d:cd:a2:e9:58:56:d5:ce:1a:e4:59:ba:70:53:
                    e6:ce:26:b2:62:7e:68:5e:af:72:12:61:0e:28:bf:
                    af:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:B1:DB:5A:B0:92:08:82:8A:0C:F6:16:81:6B:B5:55:60:33:93
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/70Gx21qwkgiCigz2FoFrtVVgM5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.126.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:7f:02:c2:6a:10:61:ed:49:66:f4:72:c5:9c:78:46:b1:98:
         ea:6a:7a:23:ff:b6:c8:a1:58:79:a1:79:ba:84:48:f3:bd:ca:
         e4:73:b4:e5:96:c1:f3:41:50:fa:ba:70:96:6c:4f:00:d3:71:
         f3:7f:0b:c5:b8:6c:0d:19:1f:6d:22:2e:e7:b1:6f:bf:ac:b1:
         73:06:8b:10:b4:22:15:11:89:40:22:ea:e1:46:7f:cb:61:70:
         00:25:a8:90:77:dc:b3:96:78:6d:ef:f9:71:2c:ec:35:15:eb:
         7b:38:33:dd:42:38:66:94:c2:9e:df:56:8a:7c:ff:4d:a9:55:
         16:e5:50:54:a1:61:2f:ee:33:01:04:29:b0:26:35:49:99:73:
         9a:bb:bd:32:bc:4f:e1:44:a4:40:c0:b9:55:e1:ce:ca:39:14:
         f4:4c:bc:c4:7b:06:64:d6:02:3b:99:43:64:5f:61:a8:c2:b1:
         ef:eb:41:98:df:60:3d:ff:87:68:1f:7c:05:a3:ee:f5:af:74:
         6c:d1:e0:f6:65:f6:51:a3:5d:be:dc:62:f2:7c:18:1c:61:f5:
         82:a5:3b:0d:d9:03:f8:57:dd:7e:59:86:6f:f1:06:52:69:08:
         39:82:6a:80:27:db:c2:16:7c:3c:e4:1b:ca:05:69:6a:b9:63:
         41:46:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----