Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/9sNq-EB8tyytojJYN8cU0eKH1a8.roa
File:                     9sNq-EB8tyytojJYN8cU0eKH1a8.roa (raw, json)
Hash identifier:          9PxQggYq1+eX89nHm89Wo8CmMZXVX4YxkE5k0G0skro=
Subject key identifier:   F6:C3:6A:F8:40:7C:B7:2C:AD:A2:32:58:37:C7:14:D1:E2:87:D5:AF
Certificate issuer:       /CN=e7a2698960971cbabd0d1c0c920f7408d71649a3
Certificate serial:       CC7CA1
Authority key identifier: E7:A2:69:89:60:97:1C:BA:BD:0D:1C:0C:92:0F:74:08:D7:16:49:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56JpiWCXHLq9DRwMkg90CNcWSaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/9sNq-EB8tyytojJYN8cU0eKH1a8.roa
Signing time:             Sat 01 Jan 2022 08:54:11 +0000
ROA not before:           Sat 01 Jan 2022 08:54:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        194.104.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13401249 (0xcc7ca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a2698960971cbabd0d1c0c920f7408d71649a3
        Validity
            Not Before: Jan  1 08:54:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6c36af8407cb72cada2325837c714d1e287d5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:21:c4:4a:40:4c:b8:90:24:d0:9b:7a:59:
                    4d:e3:02:12:59:81:0e:56:85:68:40:5a:97:03:71:
                    21:e1:e0:67:f9:75:00:0a:80:ca:f0:1c:27:c2:56:
                    69:50:68:0a:e4:2f:d1:d0:85:15:65:f8:e8:03:cd:
                    a9:48:06:4b:93:34:2e:ea:ad:45:88:8e:22:7a:88:
                    2e:04:ba:77:e2:48:29:02:e1:77:a3:62:09:af:0e:
                    d5:1d:eb:79:a6:3a:25:0d:a1:1c:52:b1:6b:9f:77:
                    82:dc:95:62:27:5f:f6:85:73:01:be:19:70:3b:a3:
                    79:74:2d:66:ca:5f:55:f5:2a:d6:c1:fc:53:fc:0d:
                    16:f5:4b:ac:1b:9f:41:a7:3f:67:93:5d:8b:5c:c7:
                    4f:d7:67:d4:05:e4:1a:38:a4:2f:58:b5:77:51:6d:
                    a5:88:b3:a7:62:0f:f0:96:c8:09:60:e3:d1:0a:d7:
                    26:85:8e:b0:df:63:67:46:b8:20:f7:18:a2:71:af:
                    7b:92:56:18:4d:3d:81:c2:9b:1f:02:c3:68:2e:88:
                    6c:8f:9e:74:0d:59:8d:53:84:0b:f0:a7:b1:36:a5:
                    05:af:57:79:e3:d0:e1:f6:c7:12:ab:16:02:3e:6b:
                    3d:c8:59:fc:d6:c7:75:41:93:6d:88:db:34:26:a5:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:6A:F8:40:7C:B7:2C:AD:A2:32:58:37:C7:14:D1:E2:87:D5:AF
            X509v3 Authority Key Identifier:
                keyid:E7:A2:69:89:60:97:1C:BA:BD:0D:1C:0C:92:0F:74:08:D7:16:49:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56JpiWCXHLq9DRwMkg90CNcWSaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/9sNq-EB8tyytojJYN8cU0eKH1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4af0e9-a7c5-464e-b10e-168cca4a87cb/1/56JpiWCXHLq9DRwMkg90CNcWSaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:59:18:f9:c6:26:a1:9b:7a:47:65:e2:73:1d:1f:86:50:e6:
         0a:ab:30:01:25:b1:e1:1c:e3:a0:ba:e3:7b:3e:20:4a:81:3b:
         c6:47:8e:9f:94:50:c2:da:e7:05:ee:08:8c:fb:a0:9d:be:8e:
         f9:38:fe:d4:8f:7f:58:27:af:c1:e4:9f:4a:ce:cf:3a:20:46:
         6e:ee:7b:a3:40:97:f6:28:68:73:1b:e9:d8:1a:9e:ef:9d:40:
         63:da:02:85:e5:f4:89:29:f5:ed:98:7e:73:93:7a:e2:ae:10:
         d0:6e:6c:a7:d2:dd:6d:fd:1f:83:76:c2:9f:f7:37:fa:c5:b5:
         fd:37:22:53:8e:8d:3f:c1:13:9f:0b:84:30:4c:a3:a0:a2:ff:
         1e:39:54:f9:56:e9:46:14:42:30:36:8a:5d:a6:0e:5a:42:20:
         c8:90:4d:c1:ee:42:db:4f:5a:10:f8:bc:0c:d4:e5:d7:20:e0:
         cc:04:15:0c:f2:46:a8:a7:6f:b6:ee:ad:67:0a:73:0f:8a:b3:
         26:7c:a9:17:35:41:ff:4a:55:b0:44:e9:76:e1:4f:6b:5c:30:
         3f:47:f0:bf:58:14:60:26:6b:35:7c:2e:14:f4:20:f1:ab:ed:
         ec:da:72:d6:44:da:9a:8a:3a:4b:4f:1b:fd:3d:1a:9f:91:c4:
         78:d0:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----