Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/hrDa0bFdgR9Iakr1-Edm8AY0MX0.roa
File:                     hrDa0bFdgR9Iakr1-Edm8AY0MX0.roa (raw, json)
Hash identifier:          CLGr9tQy+MR/ZpyasWGog9dXFrf+fkf1RaUK3SfHrEE=
Subject key identifier:   86:B0:DA:D1:B1:5D:81:1F:48:6A:4A:F5:F8:47:66:F0:06:34:31:7D
Certificate issuer:       /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial:       0183B1D56CB8D7429D97D3D6AD1B9E8D8EC7
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/hrDa0bFdgR9Iakr1-Edm8AY0MX0.roa
Signing time:             Fri 07 Oct 2022 09:44:57 +0000
ROA not before:           Fri 07 Oct 2022 09:44:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197942
IP address blocks:        2001:67c:2384::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b1:d5:6c:b8:d7:42:9d:97:d3:d6:ad:1b:9e:8d:8e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
        Validity
            Not Before: Oct  7 09:44:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=86b0dad1b15d811f486a4af5f84766f00634317d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:20:d9:99:2f:bd:71:12:30:9b:0d:aa:80:
                    1a:b1:fd:89:cb:5e:27:01:49:06:d4:52:ba:fe:3b:
                    d9:f8:0a:94:7e:14:7c:53:8a:45:a9:8c:1a:72:4b:
                    d4:8a:5e:b6:55:a6:27:36:37:60:66:29:07:42:3b:
                    82:27:61:9b:db:b4:e1:ba:40:8d:73:ba:86:b1:12:
                    87:92:b5:57:96:19:c6:71:38:f1:34:e8:04:a8:16:
                    79:40:b9:df:a0:e6:ef:d3:c6:ca:f6:72:15:04:39:
                    09:11:b8:a9:3c:53:f0:4e:f3:0a:6d:e7:d6:6e:9e:
                    79:da:ed:ed:a0:2e:7f:55:d7:1d:b1:d2:3f:69:c1:
                    a1:52:b7:38:44:3f:99:a6:ea:a0:15:35:72:c4:59:
                    7d:06:ee:ef:77:dd:0a:19:72:9a:77:47:ad:4b:71:
                    94:1e:42:16:a4:b3:b3:63:52:53:b8:b2:a3:c2:ac:
                    1e:90:3e:ec:5a:da:d1:74:77:41:70:34:47:cd:53:
                    24:ac:dc:f6:2f:fd:63:d8:6b:e9:ad:31:30:28:06:
                    5a:97:f3:25:74:9c:51:83:ad:56:0b:2c:6a:e4:1e:
                    14:a7:b9:85:80:05:8b:c0:76:6c:c3:c8:eb:7f:bf:
                    46:47:2b:ba:ee:97:98:13:f7:2a:ec:b4:da:3f:4f:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B0:DA:D1:B1:5D:81:1F:48:6A:4A:F5:F8:47:66:F0:06:34:31:7D
            X509v3 Authority Key Identifier:
                keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/hrDa0bFdgR9Iakr1-Edm8AY0MX0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2384::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:ea:b7:b6:f3:38:1f:94:fe:ab:71:5d:ad:e0:a1:f8:b3:
         0c:0f:20:9b:15:9b:52:eb:d4:25:f8:01:73:00:59:9b:c2:55:
         97:5b:2a:07:dd:e7:c4:f6:77:0b:c8:3e:59:97:dc:ca:04:b9:
         6b:86:99:9b:8f:93:dd:5e:ed:44:7c:d1:40:52:cd:16:98:21:
         d2:6d:3e:fc:d4:06:51:ce:3d:84:b6:b5:b2:10:b0:0d:de:51:
         4c:0a:52:13:bf:61:a6:e0:c8:00:1e:af:73:a1:84:4b:2a:ee:
         9d:45:98:f1:8f:82:25:b7:48:c4:bc:4e:2f:13:bc:98:53:49:
         d4:b1:e6:c0:c4:8a:7f:36:d2:bd:fb:88:08:b9:c0:ee:60:22:
         b0:48:7d:53:ae:f4:75:05:ac:90:1c:25:18:5e:be:dd:e4:08:
         46:9f:8c:56:52:40:d7:d4:16:a6:72:d2:ec:b4:3a:98:b5:d7:
         4b:57:8c:e8:ed:05:b3:06:88:80:3b:96:bd:76:c7:86:4e:c4:
         fb:bd:24:0f:c4:57:ae:12:91:75:74:bf:a1:20:a6:3e:0c:bc:
         b7:05:2b:35:c0:a9:57:42:f0:a3:f5:0c:16:5f:12:a5:c4:b9:
         16:cd:d9:99:9c:66:89:26:03:d1:1a:5d:8d:de:01:af:6f:8f:
         59:84:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----