Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/buTm__Azr03_lEdg6Fo8CORRG8Y.roa
File:                     buTm__Azr03_lEdg6Fo8CORRG8Y.roa (raw, json)
Hash identifier:          Ix+v31kQFUtfC3iBke39Xrd00iTqIA5AyrgYmA8aAuM=
Subject key identifier:   6E:E4:E6:FF:F0:33:AF:4D:FF:94:47:60:E8:5A:3C:08:E4:51:1B:C6
Certificate issuer:       /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial:       018291D6AFDDB2239582E50521416C635806
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/buTm__Azr03_lEdg6Fo8CORRG8Y.roa
Signing time:             Fri 12 Aug 2022 11:35:42 +0000
ROA not before:           Fri 12 Aug 2022 11:35:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        93.114.60.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:91:d6:af:dd:b2:23:95:82:e5:05:21:41:6c:63:58:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
        Validity
            Not Before: Aug 12 11:35:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ee4e6fff033af4dff944760e85a3c08e4511bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c7:2d:90:25:62:99:5d:23:5b:1b:ca:9c:bd:
                    7a:32:e5:e4:ab:fe:7b:ba:a9:d5:ed:83:62:12:9e:
                    81:b2:73:96:b0:56:13:fa:1d:24:ca:bf:e9:b5:ad:
                    13:1b:c9:23:ba:00:3f:0c:28:be:b6:8c:69:bb:69:
                    eb:76:b4:29:af:ad:21:7f:84:07:25:4f:60:e8:9f:
                    91:d7:63:45:2f:1d:13:40:db:bf:de:a5:3e:b7:f9:
                    f8:21:45:82:42:4a:9b:02:8f:49:70:d4:79:d2:47:
                    ec:07:d6:91:8b:b1:7e:20:7b:f7:32:08:89:af:ea:
                    24:a4:b8:aa:24:20:2c:6c:92:17:5a:59:ac:98:d0:
                    2d:13:4a:d8:af:64:f1:01:e8:4a:f5:8e:b3:f7:d9:
                    06:c2:8c:74:b0:6c:27:30:7e:bc:fd:26:d8:50:b5:
                    ca:21:2d:b8:28:df:3c:04:13:b8:6c:2a:9d:40:a0:
                    8a:57:b2:b3:59:19:de:2a:22:5b:b7:41:51:be:7b:
                    ef:e8:12:84:26:20:74:eb:3a:51:a4:e4:3a:a0:6c:
                    4a:36:4e:f2:f8:7c:a5:23:4a:b0:a8:fa:1d:f1:87:
                    3b:88:cc:c6:b0:48:7a:04:48:d8:b2:cd:dd:56:da:
                    0b:aa:e9:5f:f3:15:59:70:08:a0:06:3a:cf:95:8a:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E4:E6:FF:F0:33:AF:4D:FF:94:47:60:E8:5A:3C:08:E4:51:1B:C6
            X509v3 Authority Key Identifier:
                keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/buTm__Azr03_lEdg6Fo8CORRG8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:89:cc:6c:b2:2d:79:77:40:3a:58:3c:fb:30:a1:9d:75:0e:
         98:39:c6:fb:28:3c:e6:b1:fc:53:78:3d:78:43:4a:f5:99:ea:
         bc:66:54:e9:a4:cd:fe:d5:80:dd:e2:d2:bd:2d:8a:e6:0c:d4:
         43:ca:24:08:ef:b9:e2:85:f9:8d:b7:f7:2a:4c:d8:ac:de:34:
         69:50:e1:c1:a8:06:c7:e2:8b:c7:5a:a1:43:3f:3e:46:b4:91:
         cb:15:45:98:e9:c3:02:84:18:0a:5f:18:a1:6d:92:b5:1a:16:
         72:7c:6b:79:c3:fb:1b:56:60:4f:ef:d2:c8:df:55:08:f8:00:
         3c:60:f7:0d:92:d0:39:cf:5e:39:8d:c4:b9:ed:6d:6f:a2:cb:
         7e:2f:1e:e0:89:73:ef:dc:c1:76:af:f4:e8:15:cb:9f:25:e0:
         69:21:a3:6f:29:d0:02:30:4c:06:46:f1:ec:f7:4f:d4:c4:f4:
         e7:65:18:61:7e:2e:43:27:46:d9:df:9d:0e:b0:75:19:c8:82:
         ba:ac:c9:12:0a:9e:ee:8d:ff:7e:09:11:b1:c7:d0:ff:eb:b2:
         dd:81:ac:f4:d5:af:cf:ac:ec:fa:c8:3d:98:96:c8:01:e5:f9:
         9b:d7:8c:9d:e2:b2:1e:5f:64:ee:c3:05:c3:9c:a5:13:d4:7a:
         66:62:0b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----