Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/X6XS1JnkW-II-wejaqcCVm3sK5o.roa
File:                     X6XS1JnkW-II-wejaqcCVm3sK5o.roa (raw, json)
Hash identifier:          r3RHssN6ABrqV1rqg72AN4VlotRC7vrJkmngVHdoBaw=
Subject key identifier:   5F:A5:D2:D4:99:E4:5B:E2:08:FB:07:A3:6A:A7:02:56:6D:EC:2B:9A
Certificate issuer:       /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial:       03C76D3B
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/X6XS1JnkW-II-wejaqcCVm3sK5o.roa
Signing time:             Sat 01 Jan 2022 07:59:24 +0000
ROA not before:           Sat 01 Jan 2022 07:59:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31192
IP address blocks:        193.26.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63401275 (0x3c76d3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
        Validity
            Not Before: Jan  1 07:59:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fa5d2d499e45be208fb07a36aa702566dec2b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:78:b4:df:bf:80:7c:b3:6e:b6:5a:4e:dd:
                    76:90:9a:60:e8:85:d2:67:3a:22:66:fc:9c:c7:76:
                    fe:49:a4:a5:73:cd:c0:f0:b1:0d:f4:49:bf:f9:e6:
                    08:5f:df:53:88:6b:c5:8b:06:2e:0c:7b:7f:64:db:
                    30:00:98:da:d4:3d:06:18:3b:a8:66:8f:0d:25:63:
                    d9:54:49:45:a9:11:29:30:0b:41:a3:fb:d6:9b:76:
                    53:fb:5f:4d:7b:6d:94:38:b6:b4:31:ca:01:88:bf:
                    1a:3d:d3:40:a1:e1:96:71:a6:12:0b:75:95:2b:eb:
                    e6:8d:68:62:d9:66:b0:bd:63:43:09:f1:64:ea:01:
                    eb:b2:2e:2b:c9:52:b9:09:a3:33:29:85:77:73:14:
                    d6:5b:9b:4d:a9:c8:4a:b8:e1:11:ab:7b:68:7a:65:
                    50:23:a5:69:fb:52:93:47:8a:e9:0b:27:c0:e7:19:
                    68:38:2c:5d:a9:fc:02:f9:ea:2c:9e:59:2c:15:d0:
                    d3:2b:d2:56:a8:3e:13:49:30:fc:5a:8b:f1:5f:6c:
                    9f:31:2b:bd:c6:72:a7:2a:11:b3:83:43:a1:31:75:
                    5e:89:6b:15:7d:74:0b:50:f9:32:1c:67:4c:cb:db:
                    e6:c9:ef:d2:43:51:1f:13:d2:f8:24:26:55:15:b9:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A5:D2:D4:99:E4:5B:E2:08:FB:07:A3:6A:A7:02:56:6D:EC:2B:9A
            X509v3 Authority Key Identifier:
                keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/X6XS1JnkW-II-wejaqcCVm3sK5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:84:79:4c:a2:67:d1:fb:75:38:a0:bc:cb:36:c9:aa:16:
         ca:f7:4b:e9:63:34:b1:80:3c:25:2d:bb:43:1b:da:04:d5:b5:
         06:32:8b:1f:b2:4a:8f:19:ec:fe:c6:92:24:76:50:74:26:c6:
         32:12:cd:7a:14:10:9b:d6:8b:bb:c6:c3:b7:9d:2f:95:f4:6f:
         d7:53:0a:c5:83:45:fc:fb:90:87:f8:c4:53:8a:8a:d4:50:04:
         d9:1b:b5:fe:e8:14:82:16:d6:3b:5d:f2:1d:45:25:8f:b1:5c:
         18:7a:bb:25:45:70:ae:1e:79:ab:98:77:cc:b0:37:f1:5a:3e:
         b3:d7:45:ee:e4:90:9b:58:f4:bb:1e:5b:d0:35:6d:2a:55:12:
         49:61:26:c8:bc:6b:fc:b0:1c:d5:ff:34:f5:e1:1e:a3:1e:c9:
         91:42:33:4d:fc:d3:95:4e:81:e0:8c:b4:a0:a2:c2:68:ee:a6:
         90:72:f9:84:04:bb:5b:ff:b1:06:c6:b1:e1:f3:aa:3a:4e:73:
         e8:2e:8b:e5:c2:44:04:88:39:c5:ee:0a:c3:0f:f0:a0:b1:cc:
         40:e6:c1:8e:2f:f1:bf:83:7b:2a:e9:e6:ec:e6:01:52:28:39:
         1b:51:a7:3f:e7:51:62:25:ec:75:c0:9d:f5:23:2f:3a:7e:f9:
         7a:15:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----