Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lKT2PIwU0CJKAsupnpueP6lBmiI.roa
File:                     lKT2PIwU0CJKAsupnpueP6lBmiI.roa (raw, json)
Hash identifier:          fKuzsRqXCFdX6F7+X4TNTzE7516tGZVPMfni4Ip9FZw=
Subject key identifier:   94:A4:F6:3C:8C:14:D0:22:4A:02:CB:A9:9E:9B:9E:3F:A9:41:9A:22
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       0B50D677
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lKT2PIwU0CJKAsupnpueP6lBmiI.roa
Signing time:             Thu 31 Mar 2022 11:22:37 +0000
ROA not before:           Thu 31 Mar 2022 11:22:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49624
IP address blocks:        188.93.170.0/23 maxlen: 23
                          2001:7f8:4c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189847159 (0xb50d677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Mar 31 11:22:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94a4f63c8c14d0224a02cba99e9b9e3fa9419a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:63:aa:20:05:5d:85:14:e5:d1:b8:61:f9:
                    2e:ca:b0:a9:4f:28:8e:4d:52:ae:ee:31:19:49:e3:
                    43:ce:63:8e:c8:67:32:12:39:53:37:83:02:1d:d2:
                    42:b2:f1:e2:84:07:32:c2:53:cf:b3:cf:b8:42:12:
                    27:49:db:23:bc:65:27:a7:aa:31:a1:4c:78:9a:0a:
                    95:34:34:6c:62:67:fe:b9:fb:a6:ad:b3:6f:8f:6e:
                    95:aa:6a:a5:48:d4:ec:1a:0b:c1:72:26:38:57:6d:
                    38:0a:4a:34:10:23:1a:ef:0a:87:a1:b8:ac:67:e2:
                    58:02:f0:dc:84:cd:df:64:19:23:a2:85:a1:df:1d:
                    61:e1:27:8e:59:75:fc:f1:45:d5:0c:06:64:5c:d1:
                    0c:17:94:1a:0e:dd:de:58:cf:f4:c8:92:bc:0b:ab:
                    35:3d:0c:b0:b1:27:b1:3a:c1:87:f4:c8:8b:c2:e2:
                    b6:67:f5:b5:ba:fb:fb:d3:d9:fc:7d:f0:e1:9d:a5:
                    79:4c:9c:c1:28:2a:f3:4f:f2:58:f4:26:81:3c:41:
                    f2:95:41:14:bc:90:68:e9:29:c8:76:62:b6:88:ee:
                    63:18:72:58:46:ab:5c:1d:76:8b:e6:f0:4a:c8:98:
                    18:6c:09:eb:47:e8:0a:99:fe:7f:97:bd:19:0d:a0:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A4:F6:3C:8C:14:D0:22:4A:02:CB:A9:9E:9B:9E:3F:A9:41:9A:22
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lKT2PIwU0CJKAsupnpueP6lBmiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.170.0/23
                IPv6:
                  2001:7f8:4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:24:19:5e:77:51:06:b7:be:09:3e:f2:44:15:41:56:57:41:
         9b:ab:c4:1c:3b:cf:09:72:90:cd:8b:ee:da:1f:e2:9a:29:5e:
         2d:73:4d:02:58:51:92:54:a4:d5:af:4a:4b:6f:c5:6f:d3:1f:
         c1:8a:f3:d6:1d:94:cf:5d:4f:ac:0a:b6:dc:fa:5c:bd:4d:b1:
         05:fa:57:6e:ee:bd:c3:7e:ac:43:41:4e:42:b7:0b:f7:96:d6:
         35:a7:4c:35:5e:70:19:92:60:08:72:4a:6b:08:81:1b:3e:46:
         0f:fd:41:ae:f2:a9:ac:f0:df:27:7d:52:a4:ee:13:e0:b2:fa:
         4e:97:39:7e:3e:d5:43:96:ab:bb:4e:a4:fc:3f:e3:a6:27:0a:
         c8:4b:b4:de:bd:73:ae:c0:49:90:1c:72:f4:2c:fc:75:a2:c9:
         ab:c7:5e:ee:37:a8:8a:f1:68:46:d7:03:11:3b:3e:76:71:21:
         02:dc:e9:38:e8:07:a1:fc:7b:64:d0:ec:d3:f8:57:9c:88:31:
         e0:d1:71:62:26:f7:73:b2:99:c2:03:56:3f:27:92:82:d8:a5:
         b6:27:ce:d4:de:ef:34:ea:42:61:67:d6:5a:74:27:50:dc:d9:
         da:95:7f:93:88:b1:0a:9e:15:fe:06:9a:74:23:fb:d5:b9:e2:
         7e:87:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----