Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oW347mXEsy82msudnJnxQ-MieUE.roa
File:                     oW347mXEsy82msudnJnxQ-MieUE.roa (raw, json)
Hash identifier:          QeUTRaP/vdUmppx69GltBJNzl4e4fg1HuuSnUkcY59o=
Subject key identifier:   A1:6D:F8:EE:65:C4:B3:2F:36:9A:CB:9D:9C:99:F1:43:E3:22:79:41
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01853012A6FA94EC077DE544FDA4C755B764
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oW347mXEsy82msudnJnxQ-MieUE.roa
Signing time:             Tue 20 Dec 2022 15:06:46 +0000
ROA not before:           Tue 20 Dec 2022 15:06:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35619
IP address blocks:        193.58.239.0/24 maxlen: 24
                          2a10:ccc2::/36 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:30:12:a6:fa:94:ec:07:7d:e5:44:fd:a4:c7:55:b7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 20 15:06:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a16df8ee65c4b32f369acb9d9c99f143e3227941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:43:9f:88:ec:d6:cc:c0:60:96:0c:0c:ac:
                    96:2a:b8:b5:0d:ed:10:d7:60:02:80:3e:b8:f7:a0:
                    c9:00:7c:42:cf:4b:aa:11:ac:ae:0c:0e:db:08:bc:
                    f3:de:85:6a:f1:26:7c:e5:b8:37:a2:1f:20:f1:54:
                    63:3e:78:88:0c:41:50:f1:61:a2:03:fc:ea:c5:95:
                    59:79:9c:c6:7f:94:e7:78:91:49:1e:c4:fc:55:57:
                    1e:e6:66:ba:e3:34:5c:f3:bf:a9:f7:ea:d4:cb:cc:
                    80:16:39:8a:ac:00:6d:9e:16:aa:56:4e:2c:11:00:
                    f3:cb:12:ea:f6:da:ae:fa:dc:c2:00:cc:74:07:f7:
                    0c:fa:b7:97:8f:77:e4:fc:51:c1:93:47:01:b6:16:
                    42:58:9b:22:a1:99:c3:0c:64:75:49:69:fa:6d:cf:
                    ee:7e:06:cf:88:8c:30:82:7c:4e:f6:dc:e1:95:70:
                    30:4b:e9:04:fe:17:0b:4b:46:f7:e7:0c:26:d6:5e:
                    ae:55:93:40:16:bf:6f:2c:97:41:69:50:02:21:68:
                    01:13:8b:30:83:d9:0c:7f:8f:e8:4a:6c:b6:fc:34:
                    ce:94:28:84:10:8d:8e:82:f2:61:09:34:70:2c:2b:
                    a6:ee:d4:98:7a:6f:61:7d:6d:4c:1b:2e:2f:3a:ad:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6D:F8:EE:65:C4:B3:2F:36:9A:CB:9D:9C:99:F1:43:E3:22:79:41
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oW347mXEsy82msudnJnxQ-MieUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.239.0/24
                IPv6:
                  2a10:ccc2::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:9e:e1:32:0b:d9:38:0a:4f:dd:af:1e:c4:da:f9:69:96:
         9c:03:0d:02:f1:0e:d4:70:26:57:5f:15:0e:11:a6:e7:8e:89:
         6a:2d:c4:8c:ce:aa:f7:e2:65:7d:b4:f9:de:8c:d3:0c:cb:3f:
         85:c2:14:f5:b2:5d:ae:2e:07:0b:d0:6c:9e:c2:10:48:ff:33:
         d2:df:f2:85:e6:41:b1:4d:4d:90:9e:8f:20:f4:80:55:cb:cb:
         e7:47:56:af:51:82:d8:65:6d:8c:54:ff:27:89:8f:c7:9c:0d:
         00:f7:20:79:2a:38:ac:ff:78:26:ae:a2:ae:a1:23:64:f0:cb:
         44:4b:01:47:8d:f2:a8:71:b0:81:3b:cd:0e:03:21:4a:5c:8d:
         3a:ee:43:94:8c:ed:8c:5a:d2:f6:54:15:1d:7e:83:7a:d9:26:
         34:c7:b4:44:a0:85:64:d9:3a:10:52:98:aa:4d:32:18:74:b4:
         83:26:35:c8:27:bb:6b:ee:7d:77:86:38:e6:20:66:d1:ae:7f:
         46:48:04:cb:3a:f0:ed:43:f3:d4:48:3e:bd:4c:3d:a1:9b:e3:
         37:02:a9:c1:8f:72:2a:0c:c4:1b:da:d4:b1:40:08:db:7c:ea:
         64:ec:41:04:c0:85:90:79:91:47:dd:5a:57:7f:7a:c7:d8:43:
         37:d1:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----