Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/nOu_zJmbO59dAsDrf9Li1g8218o.roa
File:                     nOu_zJmbO59dAsDrf9Li1g8218o.roa (raw, json)
Hash identifier:          xrhoj0A7QBUtrbiMLaj3ypML3IZH/rlAVgJUSrJ7EGs=
Subject key identifier:   9C:EB:BF:CC:99:9B:3B:9F:5D:02:C0:EB:7F:D2:E2:D6:0F:36:D7:CA
Certificate issuer:       /CN=d71ab9573edf87172cc4d61bdcf0480826f213cc
Certificate serial:       1A534A
Authority key identifier: D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/nOu_zJmbO59dAsDrf9Li1g8218o.roa
Signing time:             Sat 01 Jan 2022 02:58:08 +0000
ROA not before:           Sat 01 Jan 2022 02:58:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57271
IP address blocks:        178.212.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725258 (0x1a534a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d71ab9573edf87172cc4d61bdcf0480826f213cc
        Validity
            Not Before: Jan  1 02:58:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9cebbfcc999b3b9f5d02c0eb7fd2e2d60f36d7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:43:1a:a3:f1:c5:16:97:bf:95:f3:3a:a7:
                    cb:9b:6e:7c:b4:62:e9:10:37:b8:e0:f1:2f:cd:4e:
                    be:7e:bd:ef:04:d4:43:2e:c1:dd:32:c3:ad:01:7b:
                    a5:5b:c5:3d:d7:bc:9f:c6:f3:f6:e2:3a:68:f5:1a:
                    25:c4:4f:1b:b8:96:b5:0e:7e:96:ce:e4:f7:62:76:
                    0d:94:56:90:de:0c:70:ff:e7:8f:d6:2d:dd:00:2c:
                    70:18:87:36:b7:8e:3b:f7:d4:ae:16:43:22:aa:94:
                    e7:88:4b:67:08:37:ad:83:a7:07:0f:a8:24:15:ea:
                    4e:52:7b:81:b6:ef:c3:a7:7c:45:d2:18:a2:8e:11:
                    c6:cb:90:d4:b7:aa:b6:ae:38:86:ea:08:7b:91:88:
                    bc:d2:17:cd:82:58:11:df:a8:db:f6:a0:b1:0f:bc:
                    2e:75:7f:39:55:90:a1:83:32:15:65:da:4f:8e:e3:
                    b2:bc:97:91:08:ce:64:bb:03:d8:43:b4:4f:8f:89:
                    93:fc:9a:a8:a7:fc:fb:cd:c5:8a:2a:f6:79:c4:56:
                    46:53:c7:dd:9a:ec:6f:d0:bf:bd:72:1f:97:61:b2:
                    55:6f:e4:89:be:50:19:83:b1:59:f6:ea:16:ed:c6:
                    21:fb:df:8b:b2:17:1a:c1:df:88:55:f9:ae:c2:8a:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:BF:CC:99:9B:3B:9F:5D:02:C0:EB:7F:D2:E2:D6:0F:36:D7:CA
            X509v3 Authority Key Identifier:
                keyid:D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/nOu_zJmbO59dAsDrf9Li1g8218o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/1xq5Vz7fhxcsxNYb3PBICCbyE8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:92:e0:68:f1:34:f6:61:53:4f:d5:e6:6c:3d:4a:bb:06:7e:
         af:82:82:be:f1:37:2c:cc:c1:40:10:01:b2:09:07:c6:0b:91:
         3d:c1:cf:dd:2d:c5:ee:4f:3b:7b:1c:ea:ce:ea:ea:62:79:41:
         03:cb:3d:79:c8:67:1c:cd:a4:5d:29:7e:21:1b:ec:44:62:c1:
         87:33:54:f9:19:d0:43:85:20:1d:35:cb:7a:65:8e:f8:cd:33:
         72:ac:38:af:1c:5e:e6:35:64:93:09:9c:b0:a6:d1:e9:46:bf:
         6c:06:a4:15:ab:ab:ee:af:46:03:d4:0a:87:9c:0d:fa:67:4d:
         b0:33:f9:00:73:cd:e4:57:5b:2d:7a:64:83:8c:eb:b0:94:ea:
         5b:38:37:59:23:fd:8f:73:52:31:0d:0a:d9:f5:fb:68:38:a8:
         72:03:ab:6b:dd:ad:d9:91:6c:23:03:dc:87:67:07:17:f5:1d:
         46:a7:a0:76:e3:f1:2f:b9:6a:13:5c:21:f4:77:96:f4:35:39:
         33:73:1e:1d:f9:fd:db:99:7a:27:d3:93:bb:9a:a1:75:24:cc:
         7f:1c:94:ab:55:b3:0d:2e:73:64:d7:d7:27:92:5c:ba:80:e4:
         35:52:4c:90:9a:fa:18:9f:eb:a4:98:b8:e2:c3:d8:0c:06:32:
         8d:34:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----