Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/lLp7RdZw0O_z5aBxAxm27136i7A.roa
File:                     lLp7RdZw0O_z5aBxAxm27136i7A.roa (raw, json)
Hash identifier:          5LaeijYwXXVmvDnsoCwMsVhoYDKYrNWCfauxsv9XbWo=
Subject key identifier:   94:BA:7B:45:D6:70:D0:EF:F3:E5:A0:71:03:19:B6:EF:5D:FA:8B:B0
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       01835EC2870B790BD1B366E41A0132EDA1BB
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/lLp7RdZw0O_z5aBxAxm27136i7A.roa
Signing time:             Wed 21 Sep 2022 06:35:50 +0000
ROA not before:           Wed 21 Sep 2022 06:35:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35616
IP address blocks:        193.23.29.0/24 maxlen: 24
                          2a04:9ac1::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5e:c2:87:0b:79:0b:d1:b3:66:e4:1a:01:32:ed:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Sep 21 06:35:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94ba7b45d670d0eff3e5a0710319b6ef5dfa8bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:31:f9:91:1f:80:58:89:fd:22:92:fe:cf:
                    40:c4:7d:ca:4a:24:ad:68:6f:0e:8b:b4:30:99:51:
                    e1:b5:f7:3c:df:e8:fa:d4:4a:24:85:12:a2:d1:f6:
                    f3:a8:11:18:b2:04:d0:40:84:0f:07:31:49:b8:e9:
                    6a:a6:f1:5e:0d:aa:ae:99:dd:5d:65:f3:32:f7:6f:
                    09:ab:17:0a:93:08:60:22:f3:ec:c6:52:a6:5a:f8:
                    27:a9:90:74:16:95:bf:8a:b3:20:47:9e:c1:62:97:
                    18:22:70:8d:64:c8:f7:ff:d8:71:60:4d:33:33:1b:
                    46:fd:ef:87:3a:f7:8f:ed:a9:16:eb:69:0f:3e:0f:
                    8b:02:6e:85:d2:2d:f5:18:35:2d:7c:c0:52:78:2b:
                    ac:27:34:98:78:48:b2:de:bf:c1:6a:be:82:5e:3b:
                    d5:2d:99:f3:1c:e2:e7:84:2c:52:97:ee:f5:6c:d7:
                    07:ac:5c:f8:64:cd:d8:be:0e:0a:8c:53:50:de:bc:
                    83:f4:92:8d:fc:fe:0f:b9:d8:18:32:dd:2f:4a:0d:
                    9a:b5:eb:bd:1d:01:62:29:17:2f:b1:36:9b:51:80:
                    2c:c2:b5:ed:09:e2:d3:c6:cd:64:cb:70:61:6e:26:
                    c5:e2:fa:78:e2:6e:6b:6b:7d:73:31:61:09:ba:c6:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:7B:45:D6:70:D0:EF:F3:E5:A0:71:03:19:B6:EF:5D:FA:8B:B0
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/lLp7RdZw0O_z5aBxAxm27136i7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.29.0/24
                IPv6:
                  2a04:9ac1::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:40:32:fc:25:eb:a2:f2:1e:3a:17:0d:7c:5e:af:67:44:d7:
         2c:ca:93:a6:1e:cd:fa:9f:33:e5:29:26:7d:a9:27:ee:6c:ec:
         c6:32:e2:e9:4f:b1:1c:39:3c:0b:61:2e:4d:90:29:99:8c:48:
         2b:83:18:3f:db:87:92:dc:ad:2d:a9:97:03:83:df:75:ee:82:
         39:4c:95:3b:fb:d4:07:ca:ad:77:39:c6:63:20:bb:73:40:66:
         42:18:de:cf:36:b0:8c:d5:3c:4c:6c:fc:67:c0:a9:3c:f7:ac:
         20:5a:81:94:82:36:a5:94:82:28:2d:f6:3c:01:53:ad:53:c5:
         ea:1d:ab:02:e0:00:1a:4d:3d:89:86:0a:91:00:ea:fa:ba:89:
         66:c2:c1:e5:70:c0:c7:9c:08:ad:ce:d5:10:e8:f8:e8:35:8c:
         69:9c:a6:7a:e3:45:f9:63:8e:48:55:72:e3:22:1e:82:50:a8:
         1c:e9:e4:09:69:dc:f7:99:5e:bb:05:6e:2c:fd:ba:04:87:2e:
         f8:9d:ee:ee:9c:c4:c2:75:47:58:fc:86:7e:7b:33:3f:16:e9:
         68:65:b9:17:1b:19:ec:3a:01:aa:f1:4b:cd:c7:b6:ee:0d:e0:
         f2:3d:46:66:e8:56:82:ee:83:1b:f0:62:ba:01:aa:ef:60:82:
         3f:ee:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----