Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/xes5NjVGOXqZYSxPXdXe-EGdULw.roa
File:                     xes5NjVGOXqZYSxPXdXe-EGdULw.roa (raw, json)
Hash identifier:          /BIY0eSLXf8sRRE+15F5/g7cXwbsQhzkqNZjHBWCDmg=
Subject key identifier:   C5:EB:39:36:35:46:39:7A:99:61:2C:4F:5D:D5:DE:F8:41:9D:50:BC
Certificate issuer:       /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial:       084DCA45
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/xes5NjVGOXqZYSxPXdXe-EGdULw.roa
Signing time:             Sat 01 Jan 2022 13:06:41 +0000
ROA not before:           Sat 01 Jan 2022 13:06:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202667
IP address blocks:        212.87.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139315781 (0x84dca45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
        Validity
            Not Before: Jan  1 13:06:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c5eb39363546397a99612c4f5dd5def8419d50bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:f4:a2:39:0b:08:ef:67:1e:c4:eb:cc:8d:
                    8c:c5:f3:18:43:b8:6b:ef:49:a1:0a:2d:21:7c:9a:
                    d0:8c:a1:75:bc:5a:cc:a1:2a:93:ac:e3:9a:a7:78:
                    a5:ef:ab:43:f3:76:a3:e6:c1:bb:9c:f6:9b:48:60:
                    ae:0b:96:34:1e:4c:54:ac:3a:93:69:15:01:42:07:
                    8f:34:0b:61:b2:e9:4c:8a:9d:a2:91:9a:4a:29:e1:
                    3a:5f:a5:3d:7f:cb:4c:d5:3b:a5:a0:af:88:2a:69:
                    f3:02:7d:55:03:72:ea:be:e6:88:5e:82:6c:af:1e:
                    e5:bd:c3:83:65:ea:26:5b:ea:04:d6:8a:8a:ad:e3:
                    83:e5:9a:48:c9:81:39:61:2a:c1:4c:39:66:45:b5:
                    d4:98:bd:28:e1:d1:80:de:44:ff:9e:c1:96:bc:0a:
                    d6:a8:1d:ba:24:ef:4a:d8:5d:02:91:59:7a:31:69:
                    25:5c:a7:f5:d5:73:38:5d:12:b4:6c:ac:74:58:1f:
                    59:26:ea:1c:87:36:83:97:0a:58:97:c5:e8:d2:7e:
                    12:8b:2e:17:b4:00:bb:ba:93:aa:47:f4:e3:39:c5:
                    98:50:e8:43:8f:bd:49:9a:8d:58:2c:f9:3d:d4:ab:
                    c1:0f:76:7a:bd:98:17:26:3a:a6:34:d6:22:68:88:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:39:36:35:46:39:7A:99:61:2C:4F:5D:D5:DE:F8:41:9D:50:BC
            X509v3 Authority Key Identifier:
                keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/xes5NjVGOXqZYSxPXdXe-EGdULw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.87.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:8a:f5:68:c1:e4:9e:6e:ed:56:72:7c:40:d0:49:60:81:
         3a:ac:c5:fe:3f:81:cd:a1:28:da:17:b2:6e:72:17:f6:f5:8c:
         f1:ff:63:4c:4f:da:f9:70:18:40:ed:3e:a0:d0:83:85:4c:2b:
         a3:85:28:f8:6d:0c:c4:33:45:e2:5c:d3:e6:16:c6:ff:c3:27:
         d8:ea:2f:a1:78:0d:7a:34:0e:cf:d7:bf:47:60:65:a7:3f:15:
         52:b2:2c:3d:2a:a8:0f:2e:c6:16:54:7e:bb:d9:07:8a:c8:60:
         54:97:bf:40:e4:de:c0:cb:83:75:0b:16:b4:ff:dd:f6:17:6d:
         fb:e3:90:86:05:ca:01:8e:54:c2:24:4c:19:29:15:c6:27:32:
         76:91:82:f8:73:70:12:a7:17:f6:a0:45:6d:30:f8:45:c3:67:
         8d:44:9e:05:d5:52:8e:62:79:13:fb:e5:18:e6:0e:7e:ed:d5:
         cf:a4:10:d0:4f:f2:49:90:a0:0d:82:c2:96:29:92:dc:0e:cb:
         4a:52:e6:51:69:24:4e:ce:9c:ab:3c:4e:a9:fd:9a:66:53:ba:
         b8:7e:44:bc:9e:e8:62:70:65:74:d3:2f:4f:06:7e:af:12:4b:
         9a:a1:99:ed:94:2e:bb:da:9f:ea:2b:88:21:ad:2d:aa:e0:f4:
         4d:aa:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----