Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/qWdiY68Waoi8ycHo3TUJmRTqyXc.roa
File:                     qWdiY68Waoi8ycHo3TUJmRTqyXc.roa (raw, json)
Hash identifier:          SpHKjNj2ZjtZAYfg2PP0Bi4Sd9tEAkKAXeDMpxyyA3E=
Subject key identifier:   A9:67:62:63:AF:16:6A:88:BC:C9:C1:E8:DD:35:09:99:14:EA:C9:77
Certificate issuer:       /CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
Certificate serial:       091E8FC8
Authority key identifier: 65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/qWdiY68Waoi8ycHo3TUJmRTqyXc.roa
Signing time:             Sat 01 Jan 2022 01:53:58 +0000
ROA not before:           Sat 01 Jan 2022 01:53:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24904
IP address blocks:        194.38.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152997832 (0x91e8fc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
        Validity
            Not Before: Jan  1 01:53:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9676263af166a88bcc9c1e8dd35099914eac977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:ac:78:e2:4a:85:f4:27:b5:fb:97:30:a1:
                    86:f3:44:0c:0f:06:b9:1f:27:71:67:8b:a7:fe:53:
                    44:f0:be:38:a4:7a:42:57:18:0f:01:f7:31:c9:8c:
                    74:2f:d9:ae:df:14:a9:35:d9:92:69:18:16:56:f0:
                    dd:e3:95:7a:d1:d6:23:7c:cd:15:3f:7f:29:1b:ec:
                    d4:fb:22:04:dc:db:1f:f2:74:02:f0:19:b6:9c:02:
                    11:e2:1c:c3:ab:a3:f8:a3:08:5a:f1:73:79:2c:20:
                    07:8e:0a:b8:27:61:e1:1b:65:b1:9b:cf:ff:07:7a:
                    9c:3f:02:8a:4e:5d:64:c1:04:df:af:e7:83:45:cd:
                    02:17:6e:e5:8f:e8:6a:9d:ad:59:76:52:3c:c7:39:
                    cf:c6:8f:4c:6b:33:21:cb:e0:90:38:8c:66:79:39:
                    f3:51:ed:ce:cd:fb:93:e5:c8:68:5f:3f:7d:d6:af:
                    64:4e:58:75:7d:63:8c:18:5f:8f:f1:bc:6c:b3:04:
                    1a:1f:37:14:e8:1c:9f:f6:35:d5:d1:59:bf:b4:e9:
                    6a:81:1c:40:d6:bf:5b:fb:94:58:b2:65:95:40:34:
                    0c:a5:ce:67:62:85:ec:c5:9f:37:7a:5c:94:3c:3c:
                    f8:99:40:fb:ab:11:39:5b:b6:7f:58:9d:f9:45:d6:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:67:62:63:AF:16:6A:88:BC:C9:C1:E8:DD:35:09:99:14:EA:C9:77
            X509v3 Authority Key Identifier:
                keyid:65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/qWdiY68Waoi8ycHo3TUJmRTqyXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.38.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:ff:e2:e1:35:f1:77:0d:31:a2:d0:31:f8:34:a6:d6:ea:
         b7:e9:a4:08:44:29:86:15:1d:c0:d2:61:fb:90:6a:14:69:f7:
         dd:be:96:f0:b8:f0:b1:68:47:5c:a9:e4:37:90:55:11:e0:5b:
         c8:3a:5f:fe:65:34:74:16:0a:5c:54:60:fc:9c:59:2d:9a:f6:
         66:07:f0:01:8d:6e:56:ae:5a:36:0f:2c:63:23:3f:57:64:6a:
         70:77:17:2e:3c:33:33:3a:6d:b7:82:f4:30:a3:4e:9a:b9:1c:
         32:2c:3b:dc:02:87:3d:f0:d1:51:eb:40:89:07:a0:48:bf:28:
         84:27:05:c7:57:9a:b2:e3:90:2d:20:2b:b6:ae:3d:d7:30:fd:
         ef:3e:81:69:79:c5:3d:ca:53:16:6e:5a:4b:b8:9b:69:64:9a:
         d0:85:93:71:2a:25:6a:22:5d:d0:ad:53:94:fa:54:0d:99:00:
         82:f1:52:6e:0c:e8:81:e7:33:dd:81:0f:1f:83:97:3c:49:06:
         ea:6f:3c:09:99:55:d3:dc:ed:cf:74:56:b6:83:6e:03:d3:a6:
         6f:18:a4:94:a6:66:76:23:9c:37:86:95:3c:f2:72:1e:cf:01:
         a0:49:a2:3d:23:1e:0f:6f:bb:29:9f:52:91:15:7c:7f:64:ec:
         50:1c:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----