Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nV0-BuN92Zit3II3SqEZ7qhI78Y.roa
File:                     nV0-BuN92Zit3II3SqEZ7qhI78Y.roa (raw, json)
Hash identifier:          g0RCCz7yGDmOOdCGoQ5ZvQt24vS0gzlnEiO/p+1i/7s=
Subject key identifier:   9D:5D:3E:06:E3:7D:D9:98:AD:DC:82:37:4A:A1:19:EE:A8:48:EF:C6
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       0184AE74A7879F81FB71D452D89820DFC5F6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nV0-BuN92Zit3II3SqEZ7qhI78Y.roa
Signing time:             Fri 25 Nov 2022 11:03:11 +0000
ROA not before:           Fri 25 Nov 2022 11:03:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29390
IP address blocks:        94.131.0.0/23 maxlen: 24
                          2a01:d0:3a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ae:74:a7:87:9f:81:fb:71:d4:52:d8:98:20:df:c5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Nov 25 11:03:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9d5d3e06e37dd998addc82374aa119eea848efc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:53:f1:ad:a8:71:49:d7:3b:c2:1b:54:df:
                    80:7d:84:30:51:fe:e8:2b:ff:89:b0:74:e3:3d:a5:
                    28:1d:dc:49:79:c4:8b:ad:f5:06:76:b3:73:ca:d7:
                    5f:b9:e4:36:5b:a5:60:30:09:15:56:2b:03:b9:de:
                    b4:82:2c:3f:3e:16:90:cc:d2:01:a8:82:6a:50:6c:
                    59:a0:67:0c:62:07:4d:2e:09:15:bf:af:a7:7e:ce:
                    83:96:f8:85:1e:3f:77:72:ba:a4:7e:4b:61:42:59:
                    e7:49:dc:22:01:25:f1:df:1c:eb:25:02:7e:71:2b:
                    42:10:75:78:32:f0:c3:8f:e0:a5:68:ab:63:48:3c:
                    2f:2e:cd:ba:81:cb:5d:9c:cb:6e:a0:f8:f2:c8:9c:
                    d4:ac:4a:ea:12:ea:a3:ed:12:60:b8:0a:27:16:0a:
                    35:d2:5d:32:81:8d:71:9e:e8:11:39:7e:1a:09:72:
                    63:18:c1:d6:14:1f:6e:77:97:83:00:5a:0e:87:d6:
                    15:e4:9a:1a:50:b0:d8:b3:00:7f:e4:32:cd:60:b7:
                    09:07:f9:8e:5d:28:1e:a7:ab:9e:d0:3a:69:ef:7c:
                    72:36:a8:7f:e4:70:1c:01:85:2f:2c:74:cc:58:85:
                    46:f3:21:2c:e5:f9:a0:ce:f6:4b:12:fe:81:1c:1e:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5D:3E:06:E3:7D:D9:98:AD:DC:82:37:4A:A1:19:EE:A8:48:EF:C6
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nV0-BuN92Zit3II3SqEZ7qhI78Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.131.0.0/23
                IPv6:
                  2a01:d0:3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:c4:8b:a3:d5:03:7a:b6:51:31:23:bd:5e:6c:eb:5c:03:
         53:af:51:41:d5:48:1e:99:8f:52:f5:0f:78:95:2e:16:0f:1f:
         cb:dc:2b:8a:6b:64:59:89:23:a1:36:31:2f:6b:74:15:ee:32:
         41:a5:d5:d5:99:ff:7f:c9:3d:b1:97:25:c5:8c:91:da:e0:8f:
         58:6c:1c:8e:a3:d4:8d:c2:fb:02:1a:b7:de:74:91:31:25:62:
         26:83:40:67:3f:4f:06:d6:dc:2f:a2:01:00:a3:e1:78:e9:72:
         91:fe:36:0a:b5:16:84:c9:9c:60:92:58:61:9c:cb:ed:1c:ab:
         3a:a8:b2:a8:f6:d6:19:d4:10:a0:e6:be:d8:36:29:59:7a:18:
         40:ee:94:7c:04:01:15:a9:44:75:f0:bd:8b:e6:98:fd:36:47:
         7a:ec:5a:98:90:60:aa:73:f7:ed:37:50:ba:b1:b9:a6:c7:f7:
         3e:d7:86:09:97:61:81:0c:65:6c:6a:6a:13:3f:a9:5f:fc:2a:
         62:60:21:8b:b0:00:7d:20:a8:54:ab:e6:4b:20:f8:93:05:c8:
         98:c3:c2:d8:5b:d6:b2:26:71:97:36:7c:86:7e:93:5c:ff:ca:
         f8:c0:5b:0b:b0:64:6e:bc:99:38:c8:0f:f5:62:5c:40:de:72:
         5d:66:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----