Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/RCgfTSJvbK90X_EDCi8ytpPbUgw.roa
File:                     RCgfTSJvbK90X_EDCi8ytpPbUgw.roa (raw, json)
Hash identifier:          vwItOPwill8Ni6V8nOoEdlHPcqViGVN2bgJmdLEEx7k=
Subject key identifier:   44:28:1F:4D:22:6F:6C:AF:74:5F:F1:03:0A:2F:32:B6:93:DB:52:0C
Certificate issuer:       /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial:       09DEA747
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/RCgfTSJvbK90X_EDCi8ytpPbUgw.roa
Signing time:             Sat 01 Jan 2022 10:59:28 +0000
ROA not before:           Sat 01 Jan 2022 10:59:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     786
IP address blocks:        157.190.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165586759 (0x9dea747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
        Validity
            Not Before: Jan  1 10:59:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44281f4d226f6caf745ff1030a2f32b693db520c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:eb:69:f2:41:dc:96:be:bf:89:d9:0a:7c:
                    a4:00:df:43:2b:ce:c1:40:39:18:ba:19:36:5b:a4:
                    75:7e:8b:00:cb:80:37:c4:bc:3f:28:d2:a1:e4:ea:
                    22:54:58:87:79:90:43:04:77:78:a8:ed:79:78:47:
                    a9:82:43:5b:78:f3:11:de:f4:47:93:3f:4a:88:31:
                    f9:46:5d:1e:9a:71:fd:37:f1:c3:5c:dd:7e:77:76:
                    7e:8a:fe:3f:eb:02:6f:28:d0:77:da:e8:3a:5b:31:
                    bd:37:1b:ed:10:ce:0f:3d:af:47:0e:8b:f9:b4:94:
                    fa:d3:d8:3b:5e:64:eb:49:54:16:e1:ea:30:e5:39:
                    e8:4c:59:ab:e3:3c:da:09:8d:71:4a:b9:04:14:a1:
                    9d:9d:61:d6:69:32:75:00:f4:5e:4b:d3:58:e4:fe:
                    17:67:ce:bc:d3:d8:bc:f4:58:9e:7a:c9:af:69:26:
                    26:d7:c1:29:94:6e:a7:c4:c5:0e:df:4f:a9:09:a4:
                    06:4f:4d:8e:9c:22:d6:99:77:45:63:20:fb:e2:20:
                    de:ec:f7:e9:18:04:ff:5d:d6:09:b4:fd:1c:8a:00:
                    f2:cc:cd:79:88:8b:c6:bc:55:82:90:63:94:3b:10:
                    52:e1:81:ee:d6:b9:f0:81:26:13:3a:21:70:62:b6:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:28:1F:4D:22:6F:6C:AF:74:5F:F1:03:0A:2F:32:B6:93:DB:52:0C
            X509v3 Authority Key Identifier:
                keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/RCgfTSJvbK90X_EDCi8ytpPbUgw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:6e:42:35:b4:7a:00:85:27:dc:82:b8:f5:48:3a:fc:b5:
         35:6a:cb:b0:2a:2f:ed:fb:f9:ed:9f:8b:6c:df:37:4a:95:db:
         97:d4:2f:92:e3:f8:92:1c:83:6c:12:37:a7:d5:75:e6:7c:20:
         5c:a0:da:15:d1:ac:08:70:bc:bc:5b:3a:90:a2:f7:14:7c:ec:
         19:66:75:24:55:97:bb:55:a4:9f:6d:1b:c0:f7:d3:79:ea:1f:
         ea:80:d2:d0:18:c7:90:d9:22:c3:94:f4:e9:18:a1:5e:17:44:
         80:a1:97:9f:f3:5a:fc:30:b0:5d:4f:0e:d7:6d:1b:ca:86:96:
         9a:82:60:37:21:c1:de:f3:0b:9e:09:16:06:e4:c7:aa:f0:a7:
         3c:94:70:ed:af:e3:d9:2c:56:ee:33:c2:19:fb:cd:25:3f:c7:
         d8:2f:20:a7:47:cb:71:98:67:71:c0:0d:bd:9a:e1:94:ff:b1:
         37:99:06:6a:5b:8c:2b:81:c7:c5:2c:58:92:b2:3c:69:6c:f3:
         b6:d7:e2:80:0e:15:ac:1b:6e:8a:0d:70:27:89:d8:5b:d8:50:
         d9:81:34:93:2f:e8:e6:e1:df:f7:a5:7d:5d:e2:65:0a:c9:e0:
         97:9c:1d:07:75:de:1c:6a:ba:4a:76:a5:dc:87:bb:41:7f:c7:
         91:c8:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----