Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1svvHfzgNRrD5Fy2l87e_BOPRG0.roa
File:                     1svvHfzgNRrD5Fy2l87e_BOPRG0.roa (raw, json)
Hash identifier:          4Hur6dUesSOiGQMeqQBfH5t+Nh3GnuaFkK/9ZjGHt0M=
Subject key identifier:   D6:CB:EF:1D:FC:E0:35:1A:C3:E4:5C:B6:97:CE:DE:FC:13:8F:44:6D
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       0183B80A630446CC280774314E3B8C7DA81A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1svvHfzgNRrD5Fy2l87e_BOPRG0.roa
Signing time:             Sat 08 Oct 2022 14:40:31 +0000
ROA not before:           Sat 08 Oct 2022 14:40:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50653
IP address blocks:        217.113.10.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b8:0a:63:04:46:cc:28:07:74:31:4e:3b:8c:7d:a8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Oct  8 14:40:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6cbef1dfce0351ac3e45cb697cedefc138f446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:7f:00:34:cd:4c:d0:5f:c8:c4:eb:95:1b:
                    0a:4d:65:5e:91:8a:ec:df:eb:cb:a9:4b:33:82:ce:
                    84:b2:0b:0e:3c:0f:27:9c:9d:b5:5f:af:e1:0a:3e:
                    8d:74:ef:84:2e:1f:c8:fc:40:d9:e3:f4:d3:9e:07:
                    e6:3a:ea:be:2f:17:d1:7c:64:21:69:01:01:82:59:
                    a0:25:85:18:96:4f:12:a3:e5:f6:f2:1a:8a:00:ec:
                    ff:6c:8f:42:2c:56:c1:d4:ce:b6:ad:02:7a:ff:08:
                    76:16:7a:b4:95:65:0c:e8:be:ba:cf:24:88:be:9c:
                    a8:2d:64:b0:2c:c8:b8:38:08:b6:68:e4:77:1d:97:
                    6e:fd:29:ee:b3:00:c5:11:51:73:38:eb:55:08:db:
                    d9:51:64:ea:f2:29:be:f4:67:59:2c:89:3e:06:81:
                    d6:32:aa:92:a7:59:3e:6d:e0:83:5b:67:ab:99:25:
                    2f:f8:68:ca:50:77:93:5b:85:d4:d6:df:db:e2:18:
                    20:a1:12:a9:7d:0e:04:21:9a:e8:14:ff:b9:de:2c:
                    f7:09:79:af:b2:b2:6d:07:1a:23:be:dc:08:05:5b:
                    fb:de:d5:5a:18:86:dd:04:82:23:0d:6b:5c:7a:f8:
                    af:a9:b9:65:24:be:fe:94:94:21:6b:eb:3d:3b:44:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:EF:1D:FC:E0:35:1A:C3:E4:5C:B6:97:CE:DE:FC:13:8F:44:6D
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1svvHfzgNRrD5Fy2l87e_BOPRG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:e8:fe:98:5f:9d:30:b1:44:4d:39:a1:ba:77:aa:16:f0:63:
         29:94:81:c9:fd:86:e0:9a:55:d1:58:84:1d:8a:7b:38:91:2e:
         9a:80:91:3e:3f:fc:32:2f:01:23:f8:46:49:9e:06:2a:f5:9c:
         8e:34:c7:9a:63:ea:53:53:39:07:52:e0:8d:85:73:f0:8a:b2:
         a9:40:f4:7c:f6:f6:72:33:7a:29:1f:6e:8a:e5:8f:2d:36:d6:
         e7:d9:77:4c:91:81:83:be:66:c7:4a:b4:d5:92:41:e3:01:18:
         51:13:a1:ba:70:6d:a1:a5:35:5f:a5:89:75:ba:f4:46:d2:b8:
         5f:10:a6:1e:ea:c9:8c:b8:54:49:96:27:fc:a4:bc:50:72:82:
         c0:86:ff:7d:f4:03:08:4d:87:ec:68:55:d1:b7:6e:ce:74:6a:
         e4:a7:b7:27:c1:3f:a3:e6:ff:03:a3:b1:1a:67:d6:f0:fa:85:
         b4:0f:3f:a3:bb:31:69:34:b2:b6:90:e4:3a:55:c1:5f:a9:58:
         cd:83:d6:92:80:9f:a1:9e:8b:32:54:2d:e1:06:e5:38:38:55:
         c0:4e:27:f6:7c:06:e4:d2:60:b7:d3:b8:05:b8:9f:b0:e8:f2:
         cb:ef:90:20:d0:fc:83:ee:3f:a2:0d:28:8f:b1:d7:90:5a:37:
         93:d6:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----