Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/JLkizAFEiwRp1IuaKXfgrSgfkDo.roa
File:                     JLkizAFEiwRp1IuaKXfgrSgfkDo.roa (raw, json)
Hash identifier:          MizZ3kdG/4MqGHrcY6Sz4p0FM8kTEQQVhC67NpWmDz4=
Subject key identifier:   24:B9:22:CC:01:44:8B:04:69:D4:8B:9A:29:77:E0:AD:28:1F:90:3A
Certificate issuer:       /CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Certificate serial:       01825EF09E7C618EB0E0A692CA2F9853CD98
Authority key identifier: FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/JLkizAFEiwRp1IuaKXfgrSgfkDo.roa
Signing time:             Tue 02 Aug 2022 14:23:23 +0000
ROA not before:           Tue 02 Aug 2022 14:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     37594
IP address blocks:        31.134.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5e:f0:9e:7c:61:8e:b0:e0:a6:92:ca:2f:98:53:cd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
        Validity
            Not Before: Aug  2 14:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24b922cc01448b0469d48b9a2977e0ad281f903a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:27:6f:25:de:c9:e5:b0:f8:f2:b0:82:49:
                    cb:ac:63:86:00:de:0a:4d:33:e5:64:72:91:2e:3f:
                    7e:10:78:a9:a8:00:00:72:7e:ef:02:dc:69:5c:0c:
                    32:df:0e:68:8b:d8:6f:a3:a1:ca:cb:16:38:9c:ef:
                    04:b3:40:e2:ca:a2:c4:f7:69:25:52:f3:24:1c:c4:
                    79:06:aa:9e:f5:83:87:b6:04:26:c4:0b:33:56:7c:
                    cc:2b:b1:6b:8a:b5:f0:bc:c2:32:b8:d7:e3:f3:10:
                    21:8a:59:c1:0f:1f:57:b5:8f:b1:35:e5:91:c7:4b:
                    86:c5:a6:8d:93:3b:4f:32:69:f1:e5:30:96:c3:ba:
                    db:43:f1:aa:cf:46:c5:f6:e7:00:35:8c:a5:3b:7b:
                    b3:f1:5a:f4:ab:07:e4:d9:ab:67:f5:5a:5d:94:46:
                    72:11:d3:4a:8d:87:51:14:53:96:60:28:7c:fd:fe:
                    5d:84:d1:df:d7:ad:90:ca:46:3f:ab:07:7d:ac:b1:
                    9b:16:65:b1:e6:07:c5:d1:b5:39:c7:40:a0:87:50:
                    64:89:7b:eb:52:aa:74:78:0b:f6:08:30:5a:01:c1:
                    c5:2a:ca:72:c2:36:9f:da:44:35:6d:6c:69:70:c0:
                    d3:b8:17:5f:44:a5:6b:fd:27:c1:c8:4e:d0:c1:80:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B9:22:CC:01:44:8B:04:69:D4:8B:9A:29:77:E0:AD:28:1F:90:3A
            X509v3 Authority Key Identifier:
                keyid:FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/JLkizAFEiwRp1IuaKXfgrSgfkDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.134.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:c9:91:7e:b0:6d:54:1a:0e:f9:46:07:51:38:b1:0f:cc:
         85:bc:a3:ef:93:c2:db:7f:32:21:79:d2:d6:68:e5:33:d6:ea:
         e6:a7:9d:18:8d:70:4f:29:e7:2e:66:2a:6d:32:fe:40:74:5c:
         4d:16:a9:6f:6d:af:3c:3f:a9:af:cb:19:73:1d:69:5f:c4:c4:
         09:14:c8:12:4f:f8:3a:1d:df:8b:cd:07:a3:78:a0:81:ea:c2:
         37:51:e7:11:96:84:28:ff:8d:67:d8:25:bb:7d:22:23:fe:89:
         8e:a2:83:df:e1:54:ca:23:34:89:9c:bc:9e:66:b4:9f:ea:65:
         6a:94:7a:d9:48:f1:6a:c2:b9:7f:59:94:9a:f3:4b:2b:0a:ee:
         00:45:8e:68:d9:4f:4c:4b:2d:50:e8:c8:2b:5d:a5:e6:67:b5:
         62:8f:f8:75:67:24:fb:6e:41:f8:8a:25:47:9f:22:2a:75:5e:
         cf:cb:4f:60:b2:6a:81:57:d5:66:6a:ed:f8:bc:ff:93:8d:a7:
         d3:ec:25:e0:ff:4a:62:0a:c1:07:01:9e:5d:3a:80:ff:a4:84:
         26:39:17:26:f8:75:c0:39:64:23:ec:24:1a:ab:eb:4e:a1:35:
         c9:df:44:a6:e1:d9:84:ec:a5:9e:12:2b:a2:35:52:ef:85:b2:
         f6:a8:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----