Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/rWY301C4Gd12DmM1Bheka6igyx4.roa
File:                     rWY301C4Gd12DmM1Bheka6igyx4.roa (raw, json)
Hash identifier:          arLn34tTR12674Mp827KyMKiON96BLk1C/Fvcf91HqY=
Subject key identifier:   AD:66:37:D3:50:B8:19:DD:76:0E:63:35:06:17:A4:6B:A8:A0:CB:1E
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       25237109
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/rWY301C4Gd12DmM1Bheka6igyx4.roa
Signing time:             Sat 01 Jan 2022 10:01:53 +0000
ROA not before:           Sat 01 Jan 2022 10:01:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204915
IP address blocks:        153.92.0.0/24 maxlen: 24
                          2a02:4780:bad::/48 maxlen: 48
                          2a02:4780:dead::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623079689 (0x25237109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Jan  1 10:01:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad6637d350b819dd760e63350617a46ba8a0cb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4a:db:43:de:39:35:98:b9:64:32:c7:80:f1:
                    39:26:a2:81:35:ef:cf:91:6e:34:46:ca:9b:9f:5f:
                    35:34:7c:8d:d5:6b:1f:8f:f3:5b:e0:65:53:fb:5e:
                    0b:b3:a0:2f:bc:e5:f1:a4:4b:2e:a2:16:f4:4e:52:
                    03:bf:2c:92:5f:66:e0:31:58:bc:5f:6c:ba:74:f0:
                    54:c1:ec:0c:9f:6d:06:08:03:e2:24:d0:1d:8c:ff:
                    11:65:ff:01:52:1d:e9:ef:99:0e:c9:5f:99:e8:e2:
                    eb:45:23:ab:da:ce:79:fe:47:01:5c:09:e9:52:f4:
                    e9:1c:e4:e2:a5:19:5d:98:cf:04:8f:13:e4:8a:ab:
                    17:6b:65:4e:ed:a6:53:75:90:c5:a5:c0:07:36:55:
                    84:38:fd:05:12:bf:3a:78:74:3d:da:b9:0c:ab:4d:
                    fc:e3:63:1e:0a:b3:1b:bb:20:3e:89:fc:65:af:13:
                    10:00:79:b0:d3:50:42:fe:de:f4:51:03:3d:e1:32:
                    b9:b7:df:88:5a:52:18:1b:3a:27:34:cd:b3:b1:7c:
                    0c:a1:83:7e:c8:4a:4f:85:f1:33:ff:57:4a:9e:ca:
                    e9:23:05:f5:a0:79:93:9e:2e:76:5b:0f:a2:6f:e9:
                    7e:10:04:f9:54:81:ee:94:6e:db:88:ac:05:6c:b3:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:66:37:D3:50:B8:19:DD:76:0E:63:35:06:17:A4:6B:A8:A0:CB:1E
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/rWY301C4Gd12DmM1Bheka6igyx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.92.0.0/24
                IPv6:
                  2a02:4780:bad::/48
                  2a02:4780:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:76:78:2d:2a:22:be:aa:6b:d7:32:2f:0f:3c:1f:56:95:c0:
         b8:64:6f:ba:6b:79:14:d5:5b:33:9e:78:f1:7c:2d:44:d2:68:
         18:28:c4:e1:33:4d:31:16:66:3d:e4:7c:a6:78:83:da:6b:88:
         60:07:1d:b5:e3:80:89:d6:c8:fa:41:da:74:0d:e0:d3:40:2b:
         7f:a7:17:44:ab:b2:68:72:13:f8:f7:fa:08:97:57:b2:26:6a:
         28:82:03:c5:8b:b5:26:44:29:98:2a:f2:a8:12:41:31:e3:7b:
         12:5d:ae:fc:24:67:f3:1d:b8:29:b6:8c:7a:76:3c:7b:3b:df:
         f8:bf:8b:4a:a4:2e:cc:5c:12:b2:87:ac:0e:7c:35:7f:50:9b:
         c6:f6:16:b6:4d:35:44:be:de:18:38:b6:38:cd:bc:15:66:b4:
         bd:e5:ff:af:ff:54:59:0d:52:77:43:97:1c:b9:84:98:4d:01:
         4c:9b:be:5d:8b:cd:6e:08:f7:f9:02:f9:83:e8:6b:b4:51:0a:
         23:14:3a:46:b5:33:15:46:9b:8f:44:fb:19:60:9f:91:d3:25:
         d2:e1:e6:46:97:4a:b1:b5:65:0b:47:bd:8d:46:50:81:f8:85:
         e5:06:c7:ea:80:72:6e:35:de:70:b8:84:0f:1d:7d:78:49:a9:
         ba:6d:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----