Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/1-uNmS2IkyZS3gYBSB48HEnXZId8.roa
File:                     1-uNmS2IkyZS3gYBSB48HEnXZId8.roa (raw, json)
Hash identifier:          UpOfqh5g6Hq4XSJjawU+dcZG6iLuBAEHhXlN3peipc8=
Subject key identifier:   FA:E3:66:4B:62:24:C9:94:B7:81:80:52:07:8F:07:12:75:D9:21:DF
Certificate issuer:       /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial:       17AD191F
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/1-uNmS2IkyZS3gYBSB48HEnXZId8.roa
Signing time:             Sat 01 Jan 2022 15:06:21 +0000
ROA not before:           Sat 01 Jan 2022 15:06:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44329
IP address blocks:        194.50.28.0/24 maxlen: 24
                          2001:67c:ac::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397220127 (0x17ad191f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
        Validity
            Not Before: Jan  1 15:06:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fae3664b6224c994b7818052078f071275d921df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:20:1f:0a:ed:d5:d1:dd:24:3a:5c:7b:2d:
                    f7:ee:f3:a3:bb:7e:a1:fd:f3:55:53:bf:d8:9e:d2:
                    34:d4:02:1c:db:96:0b:cf:33:6a:c2:94:d8:87:63:
                    f3:c0:0a:86:a9:c2:43:e0:86:44:cc:97:c5:53:da:
                    86:14:11:9b:78:2e:f0:60:e6:05:4f:05:12:78:83:
                    f3:17:e4:ed:10:e2:ad:44:96:93:a3:a3:9b:29:ec:
                    d2:66:69:ab:f7:0a:01:9d:2c:28:97:38:d4:0a:af:
                    1c:4c:40:c3:09:b3:06:5c:47:30:03:77:41:ee:00:
                    cc:34:38:17:21:87:4c:96:05:84:75:8b:35:b0:c4:
                    5c:10:de:44:d6:8a:f3:65:c4:ac:49:53:47:f4:aa:
                    4c:12:42:1b:a1:b9:07:74:67:44:71:55:22:f9:e5:
                    31:0a:e4:45:5f:fe:b8:6c:49:9d:b0:26:7f:d5:07:
                    fd:26:9c:f6:3c:57:e8:f8:f4:c6:df:2a:30:24:81:
                    19:bd:2a:20:94:15:f2:26:0e:7c:13:3c:be:d9:d6:
                    29:4e:a1:c9:e4:7d:98:74:ea:25:a0:54:de:97:bf:
                    b8:36:e0:e2:1f:68:5b:21:e3:b2:56:a4:77:c2:3e:
                    31:a3:dc:d5:74:7c:a9:e5:ee:d9:d9:08:fc:b2:a9:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E3:66:4B:62:24:C9:94:B7:81:80:52:07:8F:07:12:75:D9:21:DF
            X509v3 Authority Key Identifier:
                keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/1-uNmS2IkyZS3gYBSB48HEnXZId8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.28.0/24
                IPv6:
                  2001:67c:ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:84:29:e9:52:00:64:e3:5d:7f:61:60:94:68:f7:df:ab:1e:
         e8:be:77:c8:0d:62:9a:cd:ef:6f:35:6c:5f:f0:4c:8d:a6:57:
         31:b5:db:1f:a4:17:c9:72:2b:0d:4a:4f:5d:2f:e2:2e:11:81:
         ed:e8:84:20:40:5d:f0:01:85:57:e3:69:cc:fa:42:61:73:b4:
         d9:88:bc:79:cb:b3:9f:05:ea:e4:a4:1f:66:1f:1a:09:cc:86:
         49:14:3d:ce:84:44:21:fd:81:55:9b:9f:0d:c4:b7:4b:ce:3e:
         82:82:9e:31:89:bb:c9:95:b1:d7:97:d2:58:fc:a3:63:2b:50:
         c3:36:0e:4b:5d:1f:a4:01:1d:21:b2:bb:bf:ef:af:11:cc:b6:
         88:d3:f5:e6:7c:1d:ff:cc:0a:d3:03:20:8a:ad:6c:11:f4:93:
         9d:09:74:43:be:b0:ce:e7:19:fd:da:4a:69:f8:54:32:5c:a4:
         39:e1:8e:ca:4c:de:3b:db:4d:a1:c9:a8:6f:f2:b3:10:69:5f:
         6f:14:aa:4d:35:cd:4d:2e:be:e1:2f:33:cf:3c:62:f3:bc:5e:
         9f:54:42:47:8c:04:38:6b:9c:9f:c9:20:f8:e2:63:72:bf:be:
         6b:a9:7a:58:12:e3:45:e8:78:ef:3d:2a:91:04:58:68:18:32:
         fe:fa:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----