Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/kyEQlElxnMXXW7uzcjkwVmbKQtQ.roa
File:                     kyEQlElxnMXXW7uzcjkwVmbKQtQ.roa (raw, json)
Hash identifier:          eSnekc74+RwR1Ok1UkA/0AGGX0M4DhRcBi9SbeL9QAY=
Subject key identifier:   93:21:10:94:49:71:9C:C5:D7:5B:BB:B3:72:39:30:56:66:CA:42:D4
Certificate issuer:       /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial:       056EC625
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/kyEQlElxnMXXW7uzcjkwVmbKQtQ.roa
Signing time:             Sat 01 Jan 2022 13:01:46 +0000
ROA not before:           Sat 01 Jan 2022 13:01:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47396
IP address blocks:        195.216.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91145765 (0x56ec625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
        Validity
            Not Before: Jan  1 13:01:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9321109449719cc5d75bbbb37239305666ca42d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:ce:74:70:8e:82:1c:5c:8b:8e:5b:5d:4e:
                    f1:4c:55:a8:a5:9e:f0:81:5e:9f:ff:29:8a:07:05:
                    68:ac:50:53:e6:06:8a:4d:98:9e:cf:24:3c:3c:37:
                    fc:4b:a8:b2:2e:e4:f2:11:e5:ba:a3:d4:83:96:86:
                    b8:2b:96:6f:0c:14:08:71:39:99:1e:11:1b:c6:6a:
                    54:6d:c9:02:8d:cc:83:20:7c:16:a9:65:fd:0d:10:
                    ef:87:04:6d:f2:36:cb:d6:ee:74:ee:87:d2:66:24:
                    ae:63:18:fd:4c:5c:10:53:98:f6:71:44:9a:ed:ee:
                    39:0a:ca:40:42:1b:62:1f:04:3a:33:cb:4a:06:fc:
                    ee:c5:51:b8:71:82:4b:04:01:6f:a2:94:33:3e:b4:
                    32:59:d8:dc:7e:58:2a:a2:da:61:00:50:50:e1:8c:
                    3d:09:40:64:1d:4b:3d:0a:55:9c:f7:47:16:42:d7:
                    f3:5b:8f:3a:5d:ce:bc:0d:e6:56:16:88:96:7a:e7:
                    39:ff:62:ef:46:78:39:b3:cc:ce:6c:3b:c2:2e:0a:
                    d1:74:b6:3d:7d:4b:21:f6:a1:3f:63:bc:aa:f1:b1:
                    3a:ce:5e:1a:5a:d5:4c:c8:bd:f5:97:9d:96:29:fc:
                    64:3d:56:a7:64:28:57:bb:4e:9f:34:8b:47:58:a9:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:21:10:94:49:71:9C:C5:D7:5B:BB:B3:72:39:30:56:66:CA:42:D4
            X509v3 Authority Key Identifier:
                keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/kyEQlElxnMXXW7uzcjkwVmbKQtQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:82:23:c7:a2:4e:01:6b:5d:29:9d:5a:a5:9b:d5:b0:7b:
         ad:43:15:f1:c6:55:58:81:a8:44:18:82:e7:e8:cb:bb:f3:af:
         55:67:b4:75:66:05:1e:d3:1e:64:5f:8f:e0:ae:8e:22:da:b9:
         c6:7d:85:8c:7f:3c:0e:7b:7a:2f:c6:56:71:2e:be:ae:50:db:
         cd:68:f6:10:2a:19:65:d7:2f:1a:2c:cf:86:5e:97:ec:ec:ac:
         5e:1b:d7:23:7e:a3:3d:45:30:31:fc:55:42:aa:1e:98:e3:6b:
         36:5b:6c:37:d8:ce:8c:e4:9b:36:54:8b:2a:e8:c5:58:13:b9:
         b8:e0:f4:6a:98:ba:14:96:52:84:9c:7c:68:9f:9d:15:61:e8:
         01:65:a5:c2:04:d0:b4:13:85:6c:cf:fa:93:a7:21:e9:3a:f0:
         16:48:b5:35:d5:44:0b:fc:cc:63:35:b7:1a:68:22:14:bc:d0:
         74:f2:4b:6a:64:16:42:64:11:3a:a9:52:47:01:ef:a6:a1:02:
         05:d2:0a:e2:13:2f:07:07:bc:52:06:3b:6f:c4:4d:88:d3:28:
         66:fe:9a:55:9c:41:5b:f0:7a:32:3f:73:c0:ab:2b:89:cc:78:
         d9:d6:51:ef:4c:21:e0:d8:94:3f:15:26:65:e8:12:e8:54:43:
         85:7d:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----