Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/FCtNygyPvrEjAWwD753P5WL8orE.roa
File:                     FCtNygyPvrEjAWwD753P5WL8orE.roa (raw, json)
Hash identifier:          5R1ix3C7bKBuKZtk9pQi1anWPSfLDcMLscEG8VvyXZg=
Subject key identifier:   14:2B:4D:CA:0C:8F:BE:B1:23:01:6C:03:EF:9D:CF:E5:62:FC:A2:B1
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       366C9F53
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/FCtNygyPvrEjAWwD753P5WL8orE.roa
Signing time:             Mon 21 Feb 2022 18:57:51 +0000
ROA not before:           Mon 21 Feb 2022 18:57:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43339
IP address blocks:        91.194.218.0/24 maxlen: 24
                          2001:7f8:61::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913088339 (0x366c9f53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Feb 21 18:57:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=142b4dca0c8fbeb123016c03ef9dcfe562fca2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:fc:55:5a:c3:25:13:59:90:7b:8d:f1:37:
                    75:d0:99:c4:c2:52:b5:92:6f:a7:d0:c1:75:b7:b3:
                    c2:ef:12:66:e1:b0:84:54:bf:29:83:7c:cf:94:51:
                    8f:85:1f:ae:4b:44:85:f2:a8:e9:b9:48:54:c0:71:
                    1f:4f:3c:6b:94:e8:e6:ff:c1:8c:51:59:af:d8:18:
                    46:8e:e5:54:92:07:04:00:42:08:ac:a2:d4:ba:0c:
                    85:0d:cf:e3:03:9a:c0:13:93:c5:c3:b4:f7:5d:33:
                    73:10:9c:d3:3e:94:b1:ec:a9:ed:08:17:7c:cc:5e:
                    8c:c1:43:2f:70:15:d5:54:90:a2:74:69:3e:dc:82:
                    08:c5:a1:8e:24:4f:ef:4a:c0:0b:cf:bc:db:13:d7:
                    91:a5:80:2b:e3:41:52:d3:04:81:19:33:3a:83:b4:
                    8c:b9:53:0f:c6:28:72:0a:6f:20:c9:4d:9b:f8:66:
                    94:1d:72:40:96:09:8b:f7:fc:67:89:5e:89:a9:e7:
                    f8:d9:a4:d9:5d:0f:c5:57:02:95:9e:3b:a6:d6:9e:
                    71:b9:82:bf:5e:35:14:7d:26:42:21:3b:53:70:ef:
                    10:f4:9f:7e:c3:f0:6d:9e:78:e8:81:e6:10:84:95:
                    ca:74:d8:c0:75:54:bc:54:aa:59:b0:9e:19:78:bf:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:4D:CA:0C:8F:BE:B1:23:01:6C:03:EF:9D:CF:E5:62:FC:A2:B1
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/FCtNygyPvrEjAWwD753P5WL8orE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.218.0/24
                IPv6:
                  2001:7f8:61::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:17:3b:8b:e8:63:f9:d4:85:d0:19:88:6d:94:46:4e:6c:eb:
         e6:e0:75:f2:86:88:2b:93:15:19:e4:8a:aa:69:d3:a7:41:5e:
         68:1c:18:40:6e:a9:40:75:a2:31:06:7b:3f:c5:b0:f7:cd:9d:
         c6:bc:e0:1e:97:da:7c:f1:6e:02:9b:50:b3:3e:ab:92:c1:70:
         67:cd:f7:8f:08:8e:d4:62:ea:5f:41:64:4e:32:34:9f:53:fe:
         77:59:ed:c3:0c:49:c4:6f:89:8b:ec:2f:f5:12:f8:81:a6:63:
         86:f0:63:2a:58:5d:55:fd:2f:5d:ba:c1:56:36:c2:10:9b:a2:
         62:df:cd:1d:82:1f:17:bd:57:45:fc:0b:6d:1c:f0:df:f9:2b:
         66:e1:95:08:a5:68:14:0a:7a:a3:89:48:1a:fc:c9:69:9a:f3:
         d2:6c:89:37:f3:59:b1:30:f8:9f:16:c5:5d:a5:8f:f6:92:be:
         c1:01:2b:e0:60:62:44:85:19:fa:ef:19:98:ae:17:12:a3:e9:
         87:e5:df:cc:a6:ad:d1:c4:92:79:04:e8:84:69:ed:dd:39:f9:
         f9:f0:8d:e3:20:a8:f2:43:9c:c0:32:47:d8:51:22:1b:e0:ec:
         ae:f7:fa:82:bc:e9:22:b1:df:6a:23:ba:f7:a4:29:e5:b2:21:
         1b:11:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----