Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-ueGP7XDgOeGeNJZ2YGNMVuOSkM.roa
File:                     1-ueGP7XDgOeGeNJZ2YGNMVuOSkM.roa (raw, json)
Hash identifier:          ruNvpXUm0g5B2n1Dp/IKi9DxVtF7QDSzK+iVjj3nhXo=
Subject key identifier:   FA:E7:86:3F:B5:C3:80:E7:86:78:D2:59:D9:81:8D:31:5B:8E:4A:43
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       051F0C82
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-ueGP7XDgOeGeNJZ2YGNMVuOSkM.roa
Signing time:             Wed 23 Feb 2022 16:18:26 +0000
ROA not before:           Wed 23 Feb 2022 16:18:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211507
IP address blocks:        87.251.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85920898 (0x51f0c82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Feb 23 16:18:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fae7863fb5c380e78678d259d9818d315b8e4a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:0e:1c:24:a4:05:45:02:26:6d:6c:27:62:
                    77:1a:39:5d:08:69:a5:43:37:59:cd:6c:e4:b8:19:
                    a9:7f:23:81:49:95:9f:22:fc:71:2c:8c:8b:7b:5d:
                    47:4d:42:2b:b7:23:c0:93:ea:ac:7f:f2:f3:04:1a:
                    23:16:4d:60:dc:0b:36:2d:b9:da:11:94:e2:52:2f:
                    f5:63:af:e5:9f:76:b6:ed:c5:3c:8c:12:2f:1b:19:
                    c5:78:01:35:f7:2e:8a:02:05:63:54:eb:90:e1:21:
                    9f:00:45:64:60:d1:2a:10:8a:d0:f5:d8:cb:eb:99:
                    98:78:dd:12:d2:71:fb:ec:2e:df:19:18:c6:84:3c:
                    2e:6a:97:6f:58:c4:a8:ed:7d:ab:46:47:6b:bc:74:
                    6a:f5:79:53:53:a7:7d:e7:de:ce:15:0a:93:c3:e5:
                    3a:c6:78:49:51:0b:f9:4b:bc:32:80:fa:85:e4:8a:
                    93:56:db:a6:1b:e6:a6:eb:e2:0f:79:b0:18:78:df:
                    60:37:6b:09:13:ac:f6:64:21:62:a1:aa:8c:c8:d2:
                    9d:1b:54:13:b6:3b:23:3a:ff:a2:f5:8d:45:35:1c:
                    97:a0:3e:e0:8d:61:01:e5:37:83:2f:2b:92:fe:1d:
                    ec:3d:28:1a:5c:c7:38:30:12:98:53:92:61:c3:71:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E7:86:3F:B5:C3:80:E7:86:78:D2:59:D9:81:8D:31:5B:8E:4A:43
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-ueGP7XDgOeGeNJZ2YGNMVuOSkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f9:9e:93:37:98:59:67:1c:1a:04:e4:7e:77:15:4b:e1:bf:
         4c:c2:a8:e6:0a:36:5d:cb:19:72:9c:5b:34:e0:4e:95:94:fa:
         14:7b:88:c4:2c:df:33:ef:23:a9:d1:ed:d3:90:3b:ab:5e:04:
         e5:b5:c7:26:b9:68:df:13:18:d3:c5:06:94:c4:27:87:2b:0b:
         a4:f8:2a:00:eb:c2:95:3f:ed:af:3c:eb:17:2b:af:18:28:0b:
         71:61:33:1b:db:3f:04:ed:d9:f0:30:a9:4b:89:c4:73:00:e3:
         83:49:fc:db:a5:87:92:4d:ae:aa:e2:a1:68:44:66:81:0a:93:
         ff:b4:49:25:99:6f:40:74:cc:e6:67:8d:e6:3a:6d:92:2d:a8:
         ef:9e:b7:fc:f9:a4:71:c5:6c:2c:20:f5:e3:1f:36:74:40:b6:
         9c:ea:e1:da:b9:fc:67:ce:50:cf:63:c4:7c:bd:d8:b4:24:65:
         ea:0e:f3:55:66:67:21:74:5c:5d:87:e5:45:16:2e:e5:88:5b:
         99:6d:53:3e:e1:6c:ed:86:03:60:25:e0:9b:10:02:ea:ff:e1:
         5d:d0:20:9f:a7:e4:2e:8a:53:13:9f:1f:c1:79:89:d0:16:85:
         9f:d3:f7:36:99:8b:bb:7e:3a:41:95:de:57:26:87:70:5b:2c:
         b5:d7:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----