Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/WYRt-G4YT7cOzwg1TqHFciaEtFI.roa
File:                     WYRt-G4YT7cOzwg1TqHFciaEtFI.roa (raw, json)
Hash identifier:          MVB+Vw7G0dryZlcti2hXtzUGe7fZVYplrXrribC90D4=
Subject key identifier:   59:84:6D:F8:6E:18:4F:B7:0E:CF:08:35:4E:A1:C5:72:26:84:B4:52
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       03849647
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/WYRt-G4YT7cOzwg1TqHFciaEtFI.roa
Signing time:             Sat 01 Jan 2022 09:04:31 +0000
ROA not before:           Sat 01 Jan 2022 09:04:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25304
IP address blocks:        193.254.230.0/23 maxlen: 23
                          2001:678:ecc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59020871 (0x3849647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: Jan  1 09:04:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59846df86e184fb70ecf08354ea1c5722684b452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:22:68:83:b5:29:62:66:8e:c9:c9:cc:75:
                    ff:47:a2:d6:ad:69:6b:7b:3b:72:64:48:1a:e6:76:
                    10:a8:74:c9:43:93:e5:ed:47:e9:bc:18:eb:48:04:
                    e9:26:2d:fd:7a:2b:67:9f:51:7b:74:99:ce:54:7b:
                    82:0a:7c:44:cc:26:b3:22:61:27:b1:c5:bc:7c:32:
                    57:72:22:51:ba:d0:9d:35:24:23:44:c5:da:6e:2a:
                    61:3d:8d:21:c1:d5:97:e7:b9:6e:1f:26:19:d5:e5:
                    f7:45:19:18:a5:4e:22:d2:ed:54:e6:91:c5:bd:c5:
                    99:73:64:f8:3a:e2:c5:77:f8:20:8d:2b:14:c9:57:
                    39:c8:e1:59:6c:55:bc:7e:8e:29:d8:8a:e5:53:4b:
                    ea:81:25:c3:ba:3d:f7:ab:29:04:33:01:37:02:75:
                    2e:24:bb:55:e7:1a:df:ab:28:40:6c:2d:95:c2:c9:
                    08:13:8e:8f:47:8e:61:9f:fa:d5:b5:7b:81:62:1c:
                    65:fc:39:c8:6f:48:b7:c3:2f:e1:7e:58:bf:43:c9:
                    73:64:f9:30:70:aa:40:56:2f:60:2d:30:71:5a:e4:
                    38:39:03:41:5d:68:39:50:c4:71:f2:64:3c:40:7f:
                    d7:a1:b5:63:e5:05:eb:37:23:0e:65:34:c5:7b:bd:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:84:6D:F8:6E:18:4F:B7:0E:CF:08:35:4E:A1:C5:72:26:84:B4:52
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/WYRt-G4YT7cOzwg1TqHFciaEtFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.254.230.0/23
                IPv6:
                  2001:678:ecc::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:64:a4:75:88:01:fa:2c:9d:ce:bb:81:d7:12:b4:ed:e9:
         8e:59:b4:da:e4:8d:04:36:1a:fa:a3:52:b1:73:4a:5a:d0:eb:
         7d:72:fa:df:7e:39:8a:e7:b6:e3:23:6f:44:27:b0:34:08:7b:
         19:9c:09:1b:b8:14:58:cb:4d:0b:9a:d2:e3:2a:1a:33:2e:58:
         ca:f8:7f:9e:12:2a:81:79:6e:22:31:f3:11:77:0f:66:5e:0e:
         42:c5:61:b3:17:96:15:f5:b1:51:ed:ca:95:f5:6c:66:0d:7a:
         7f:53:e7:8f:af:40:fe:ed:dd:c7:0e:1b:4b:81:12:0b:67:1a:
         d4:55:a1:77:dd:3c:bd:32:79:d3:26:62:3a:f9:9b:2b:ea:00:
         9d:18:87:af:8d:21:22:88:d3:6d:73:7e:10:c7:57:ab:11:79:
         d1:fe:b6:41:c1:d5:d9:22:0f:b3:e9:39:7e:4e:60:df:9f:96:
         cc:4e:e2:e7:a5:40:99:c4:18:21:b8:53:dc:fb:0f:ac:ed:60:
         6a:d6:54:05:68:b0:2f:b9:fb:e1:ac:29:8a:18:a3:c4:02:7e:
         be:50:6c:cb:4d:59:69:cf:df:2a:00:ad:54:3f:d3:d3:f3:ce:
         d3:8d:3e:bf:d0:ae:cb:1d:d1:c5:60:7d:72:ed:a0:b3:8b:8a:
         5c:8b:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----