Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FZWsD_Wp2_ZdWgp4zvh50WkjCBg.roa
File:                     FZWsD_Wp2_ZdWgp4zvh50WkjCBg.roa (raw, json)
Hash identifier:          8bTEgP/iOCgR3iuoKzEdLEPjm9OXxxJSXXa0U7d+OBs=
Subject key identifier:   15:95:AC:0F:F5:A9:DB:F6:5D:5A:0A:78:CE:F8:79:D1:69:23:08:18
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0181EEA1339C040CAFE6AD41307F58A7C528
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FZWsD_Wp2_ZdWgp4zvh50WkjCBg.roa
Signing time:             Mon 11 Jul 2022 18:59:10 +0000
ROA not before:           Mon 11 Jul 2022 18:59:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34800
IP address blocks:        194.50.99.0/24 maxlen: 24
                          2001:7f8:e7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ee:a1:33:9c:04:0c:af:e6:ad:41:30:7f:58:a7:c5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 11 18:59:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1595ac0ff5a9dbf65d5a0a78cef879d169230818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:18:38:cc:40:9c:a1:5d:dc:72:3b:3c:a5:
                    34:f4:b6:c0:9f:08:0c:e6:73:ea:89:2b:01:05:12:
                    41:be:89:c9:be:71:be:b8:7d:3c:81:c1:3f:3e:db:
                    21:7f:91:39:3a:e8:cf:23:2c:f9:3d:92:70:0a:20:
                    0f:58:f2:d6:d7:8a:e5:cc:37:d3:16:5d:55:5b:0b:
                    eb:65:85:07:e1:4c:c5:1d:4d:0b:f8:0d:a8:24:ac:
                    e5:a2:cf:04:66:bf:4e:f4:f2:b1:8f:6d:2f:15:16:
                    c1:87:d1:99:fb:c1:ec:bf:50:7c:c1:af:1f:9d:9a:
                    c3:84:c7:dd:83:ec:aa:c5:72:31:37:ba:bc:73:b0:
                    8e:13:23:cd:e6:d0:d7:12:5b:dc:e9:d4:36:92:44:
                    16:ba:a5:00:cc:ea:52:ed:e9:22:b7:36:97:da:e1:
                    88:03:06:bb:7b:2e:13:52:56:63:bb:72:f1:7a:34:
                    61:43:bf:63:f3:56:09:7e:ff:78:19:09:3c:92:52:
                    09:c4:86:4f:42:6b:91:64:fa:6b:5e:a5:65:17:ea:
                    e2:8c:c7:09:ff:a9:ec:19:60:a2:12:b9:f9:43:62:
                    90:38:e9:78:a5:fc:a1:5b:c2:f0:41:cb:b4:10:20:
                    aa:b8:66:29:7d:da:0a:1d:6c:1d:90:47:9b:b6:ce:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:95:AC:0F:F5:A9:DB:F6:5D:5A:0A:78:CE:F8:79:D1:69:23:08:18
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FZWsD_Wp2_ZdWgp4zvh50WkjCBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.99.0/24
                IPv6:
                  2001:7f8:e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:33:d1:cd:d1:87:f2:84:65:ce:7e:a6:29:2a:a5:15:91:3d:
         71:7e:e0:af:ab:59:81:62:ab:4c:37:f5:b9:06:c7:5c:be:d6:
         65:60:d5:71:05:ae:63:2c:65:e8:61:28:42:84:2a:63:d4:86:
         6d:b9:2d:61:ef:2f:66:73:ba:6c:d3:2d:87:af:95:57:50:50:
         8e:1b:57:ad:e2:4c:86:56:74:e1:90:69:3e:fe:bc:9d:e7:d1:
         c5:2f:57:09:1f:c7:04:26:3a:e4:d7:e3:25:6d:b1:d9:3b:f1:
         0b:bf:17:bd:af:2a:77:de:b4:c8:25:ad:ff:a2:87:78:e3:c6:
         2d:4f:18:8f:52:8e:a8:00:7d:87:7c:81:76:50:72:14:37:71:
         a8:ca:48:22:40:8e:ef:66:a1:1b:bf:1c:11:20:6a:79:2b:dd:
         0e:f0:f3:b9:77:75:01:05:d0:f7:2b:90:a9:14:1a:5e:76:09:
         d2:4d:14:e0:18:d2:e0:3a:74:f8:13:f6:22:a1:2e:9d:51:46:
         53:87:c7:18:fe:18:50:12:07:cd:da:05:b1:fa:44:bf:6f:f0:
         11:81:cf:a1:ef:9f:21:a1:d8:ee:1a:cd:37:72:3c:25:d2:45:
         ed:b2:83:40:1d:a7:d7:3c:9c:50:46:0c:f7:92:36:2e:d6:f2:
         fb:0c:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----