Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/aSTtxyHzc8LxDz1krk5-5bZNkac.roa
File:                     aSTtxyHzc8LxDz1krk5-5bZNkac.roa (raw, json)
Hash identifier:          qe14F+Czbzb91dZVgGPkznsVn8t7ZkmJ5SagQ5Gnbtk=
Subject key identifier:   69:24:ED:C7:21:F3:73:C2:F1:0F:3D:64:AE:4E:7E:E5:B6:4D:91:A7
Certificate issuer:       /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial:       0B903125
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/aSTtxyHzc8LxDz1krk5-5bZNkac.roa
Signing time:             Sat 01 Jan 2022 08:56:19 +0000
ROA not before:           Sat 01 Jan 2022 08:56:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42947
IP address blocks:        213.181.78.0/23 maxlen: 23
                          176.57.98.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193999141 (0xb903125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
        Validity
            Not Before: Jan  1 08:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6924edc721f373c2f10f3d64ae4e7ee5b64d91a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:03:8d:c2:64:9f:2d:25:da:db:32:6a:cf:
                    27:6c:7e:ff:ad:f5:b3:ee:44:45:65:88:af:ba:83:
                    de:8e:89:b5:32:f8:20:55:73:94:3c:68:e0:79:14:
                    1f:cd:88:4a:23:12:d0:f6:07:70:5d:7b:2b:fc:57:
                    d9:60:c9:2d:d5:4a:d4:52:ba:9f:3a:a9:df:2f:a0:
                    a4:e3:4f:52:6c:bb:2a:db:e8:66:4f:38:31:61:a7:
                    38:20:aa:08:3f:29:61:87:c6:94:8b:7d:f4:66:2f:
                    43:6d:d9:81:02:5a:64:47:8c:70:f5:8e:80:05:54:
                    81:85:c3:0f:f3:cf:24:2e:23:15:a0:85:a8:a1:5b:
                    3c:54:84:ef:8b:fe:7b:72:7a:2a:d4:49:93:7e:09:
                    73:cd:2d:0f:9a:a8:c8:2a:fe:b6:6f:69:86:b2:01:
                    26:d0:82:e1:5d:8b:31:5e:f2:a1:1e:94:c2:2f:72:
                    5e:ba:31:04:f5:ea:c3:91:dc:78:5a:28:0d:19:11:
                    54:0f:9c:df:9b:7b:39:d7:fd:eb:73:18:50:82:54:
                    bf:5c:7b:f3:fb:d8:16:b7:95:e4:f4:b3:bf:b5:1c:
                    cc:cf:ee:42:07:7e:ce:57:5c:b7:a6:33:b4:38:3a:
                    d4:e0:31:83:1b:e0:dd:c4:5b:4b:39:6a:d5:d7:99:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:ED:C7:21:F3:73:C2:F1:0F:3D:64:AE:4E:7E:E5:B6:4D:91:A7
            X509v3 Authority Key Identifier:
                keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/aSTtxyHzc8LxDz1krk5-5bZNkac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.98.0/23
                  213.181.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:77:fc:aa:e6:8f:3f:3a:d9:b3:a3:64:3c:82:44:5f:03:5d:
         a3:3a:a2:de:27:91:06:7c:ba:e0:bf:d5:94:73:a9:3d:5a:3e:
         76:1a:c3:fb:93:93:4e:3b:f7:45:7b:03:51:00:92:69:06:dd:
         10:cc:2f:da:58:ed:67:66:68:74:82:ee:58:f1:97:08:94:fe:
         b9:a0:f2:6e:6d:04:07:42:85:1b:cc:8c:1e:30:46:a6:3e:33:
         36:f2:3d:dc:86:1f:ed:85:fe:ce:82:68:b7:83:dd:e9:39:98:
         d5:cc:74:88:d8:98:ec:0e:2b:1b:5d:24:9c:31:1a:2e:2e:8b:
         fa:03:aa:8a:5f:6f:41:8a:cd:d9:8b:c5:a3:06:28:31:5d:bd:
         d2:91:96:e2:15:0a:4d:e7:13:66:84:d7:12:8f:45:6b:59:42:
         0e:8d:14:bc:49:1d:39:59:a8:a1:91:b5:e4:35:3d:ea:05:04:
         83:d8:18:6a:b6:ee:9c:5f:dc:ce:e5:e1:23:fc:b8:1d:7a:e8:
         8a:36:8e:cc:3c:ca:df:87:65:47:0e:c7:0f:7e:b8:a8:cc:f8:
         91:9b:9a:81:fa:ab:12:32:bf:3a:67:b2:1a:c5:5b:03:f3:cb:
         73:26:8e:fe:02:46:63:bf:95:6c:34:66:48:40:a0:45:65:5f:
         c2:92:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----