Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/vNbE02Agz2GpMtYVUHyMPoUmqIU.roa
File:                     vNbE02Agz2GpMtYVUHyMPoUmqIU.roa (raw, json)
Hash identifier:          K6q92ojqkpIM6+XNgpkLgwD1XRieXDBgk0RXkEOKhdI=
Subject key identifier:   BC:D6:C4:D3:60:20:CF:61:A9:32:D6:15:50:7C:8C:3E:85:26:A8:85
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       01831C5DA8FC831F8E028CA5DEDDB404152F
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/vNbE02Agz2GpMtYVUHyMPoUmqIU.roa
Signing time:             Thu 08 Sep 2022 09:10:43 +0000
ROA not before:           Thu 08 Sep 2022 09:10:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209659
IP address blocks:        94.142.251.0/24 maxlen: 24
                          2a12:5bc1::/48 maxlen: 48
                          2a12:5bc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1c:5d:a8:fc:83:1f:8e:02:8c:a5:de:dd:b4:04:15:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Sep  8 09:10:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcd6c4d36020cf61a932d615507c8c3e8526a885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:00:ad:80:fe:eb:ca:86:e7:40:cc:e6:e1:
                    f7:d3:ea:ba:64:fc:ec:dc:cf:24:0c:a0:aa:42:bf:
                    9a:02:fb:58:16:63:e5:35:3c:35:4e:26:5f:a0:1e:
                    16:15:f5:f2:96:a6:f8:d9:1f:73:a6:86:05:c4:77:
                    02:60:e8:cb:f7:7a:9a:ef:bf:76:5f:30:c3:8a:14:
                    08:72:6e:15:ab:c7:02:07:90:08:94:62:d4:44:f8:
                    24:f2:f9:d5:96:b3:26:82:f3:2d:52:03:6f:9f:66:
                    89:5a:a7:b2:d9:e8:2a:59:2f:c3:e8:35:2d:7d:36:
                    e8:e7:03:e1:2e:22:3a:c4:83:ac:9e:6f:85:25:08:
                    bf:65:23:82:4e:6b:57:bd:b1:17:b1:21:35:93:dd:
                    a4:8c:9d:a7:83:1b:44:37:c9:70:e7:08:f1:a2:8c:
                    c1:c5:7a:a5:88:c6:88:e7:e8:d1:9a:d4:45:32:62:
                    19:46:84:d9:14:9c:a7:50:7d:81:f3:2a:d3:6d:c5:
                    47:7e:3d:ab:15:ea:ad:36:25:05:94:21:ee:0c:92:
                    71:94:bd:62:8a:0e:de:b4:70:82:83:e5:1f:af:79:
                    cb:80:d0:04:ab:6e:6f:d5:e7:c3:fa:ad:6b:7c:6e:
                    c9:1a:36:3a:cb:22:23:6e:71:38:8b:96:83:e7:f2:
                    99:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:C4:D3:60:20:CF:61:A9:32:D6:15:50:7C:8C:3E:85:26:A8:85
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/vNbE02Agz2GpMtYVUHyMPoUmqIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.251.0/24
                IPv6:
                  2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:63:59:1b:8e:5a:53:fb:77:51:59:5b:87:39:98:68:31:
         3c:bc:41:65:12:18:fd:71:42:64:0b:51:d4:a5:8f:d5:57:5f:
         af:12:22:cd:f8:4b:76:38:fa:e2:7f:7e:18:1c:ea:f3:33:8c:
         d6:dd:67:f8:fb:06:14:5c:00:88:5b:34:27:eb:00:5c:00:f1:
         31:eb:f4:83:28:0e:68:d3:d2:8e:b7:ce:6c:6b:31:10:ce:88:
         6a:5c:5f:7d:49:f4:07:ea:46:7b:7a:cc:03:80:ce:ab:d4:e6:
         27:23:1e:9e:4d:6f:a8:e5:d5:da:0c:d3:92:92:22:2a:8b:81:
         d9:10:2a:35:76:56:3d:0c:15:07:c8:f4:75:73:f2:3e:fb:d5:
         e3:bf:35:5f:dd:be:f0:eb:9b:e9:7f:82:75:be:07:af:78:49:
         e4:8f:da:43:3b:57:69:31:fe:04:26:48:1e:a7:fe:33:82:54:
         73:4f:5c:d1:38:ed:31:ac:55:d0:4c:95:bd:8a:ad:c5:75:47:
         ed:00:ac:2c:4c:40:95:05:ed:c3:19:9b:81:fc:c0:39:b4:78:
         a7:92:19:98:5c:63:93:a3:ff:fc:8d:88:06:5d:d9:96:60:a0:
         92:de:15:ab:33:4a:de:c5:75:03:95:48:9f:d4:7a:b5:74:43:
         78:bd:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----