Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/bT-elTsqTF9lNj6gtigss5RfSLM.roa
File:                     bT-elTsqTF9lNj6gtigss5RfSLM.roa (raw, json)
Hash identifier:          N/MPsL3phjwdRvIN4FOYA3sQ3mm5MLuEvrdkOQrGoSg=
Subject key identifier:   6D:3F:9E:95:3B:2A:4C:5F:65:36:3E:A0:B6:28:2C:B3:94:5F:48:B3
Certificate issuer:       /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial:       02537C
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/bT-elTsqTF9lNj6gtigss5RfSLM.roa
Signing time:             Thu 28 Apr 2022 12:54:41 +0000
ROA not before:           Thu 28 Apr 2022 12:54:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47230
IP address blocks:        195.216.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152444 (0x2537c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
        Validity
            Not Before: Apr 28 12:54:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d3f9e953b2a4c5f65363ea0b6282cb3945f48b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:4d:c1:70:10:90:b4:04:bf:d1:55:ca:fe:
                    06:f5:6f:28:96:0e:52:ae:91:59:d2:4f:1e:a9:28:
                    13:36:de:c1:7c:59:d4:f5:b0:a0:01:75:59:6a:eb:
                    33:b1:0c:0d:5d:af:41:6d:c2:77:cc:b1:22:97:0d:
                    39:04:e3:21:b6:b1:b1:b3:c5:ec:0e:e6:f0:19:fd:
                    eb:ed:41:26:24:ae:c5:c9:7b:02:38:2f:68:5d:d8:
                    53:53:62:c0:a9:b9:b2:b6:15:f6:39:3d:af:41:6c:
                    dc:2f:26:8f:41:0a:f7:2e:d1:5f:ff:c7:96:f0:c6:
                    6b:7e:0c:d6:3b:2b:4d:a1:64:bd:1e:8c:a6:cf:e3:
                    98:26:33:9d:d8:b9:2a:5d:fb:63:0d:41:22:c9:81:
                    37:85:5b:08:74:99:0a:ee:fc:d6:51:0c:c7:da:3b:
                    ec:ad:40:ac:55:d9:84:cc:8c:e4:a2:21:da:fd:b3:
                    76:f7:5f:e1:d5:3d:74:52:54:6e:5e:48:a2:4c:9e:
                    7b:ee:c5:4b:0e:d5:3f:c9:65:4f:4d:bd:66:79:58:
                    4b:32:0f:c9:6d:69:23:fd:5a:1b:08:a7:08:c8:8a:
                    dd:ef:10:eb:53:c4:4c:38:8e:37:c2:39:ec:15:b4:
                    76:16:ff:fb:72:73:1d:ff:87:52:2a:d1:82:6a:b9:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3F:9E:95:3B:2A:4C:5F:65:36:3E:A0:B6:28:2C:B3:94:5F:48:B3
            X509v3 Authority Key Identifier:
                keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/bT-elTsqTF9lNj6gtigss5RfSLM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:27:6c:58:49:ec:85:d0:46:d1:5e:e2:70:74:4d:21:06:1a:
         c3:8c:39:7c:9e:24:58:54:6a:23:8e:20:ac:bf:35:fd:6d:ec:
         c9:5f:74:3b:d0:63:b8:3b:d4:42:2d:58:5a:1f:4c:4f:aa:59:
         e0:6c:0a:ed:5d:15:89:cc:86:5f:1c:f3:9b:62:e0:d2:18:ea:
         51:e7:69:c8:36:46:f3:0d:6d:1e:3c:bd:f7:3e:4c:01:eb:42:
         13:94:69:11:45:94:40:ea:8c:39:b7:a9:2e:c7:25:35:2d:f6:
         cc:26:5e:63:98:c1:1b:5f:b5:ae:81:20:48:d6:18:89:2f:95:
         09:e6:f4:55:dc:82:37:c0:30:d2:72:98:ba:fe:ed:4d:5e:19:
         ed:07:00:3d:98:f5:ee:2f:23:d7:87:47:f5:71:e8:c3:58:eb:
         3a:f8:52:bc:91:d9:39:0e:2c:57:cc:20:38:45:4f:5d:76:58:
         ab:b7:85:5f:e8:52:a8:0b:da:66:bb:89:6f:2a:1c:db:8a:42:
         3c:5f:f6:4f:64:0d:25:bb:65:35:5a:e1:62:b0:36:96:2f:8e:
         aa:51:f6:28:09:b9:72:aa:9b:af:2b:37:82:41:f9:59:ad:e3:
         e0:5d:c0:04:b1:da:9f:5f:74:20:96:f9:7e:b4:74:4c:88:38:
         72:3c:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----