Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EwigyAQ8HON9h6piOLBvKLScl2U.roa
File:                     EwigyAQ8HON9h6piOLBvKLScl2U.roa (raw, json)
Hash identifier:          awVAUhuiSuERWc275VQGD4pnCCY2HFHBDkVuvvR+XoQ=
Subject key identifier:   13:08:A0:C8:04:3C:1C:E3:7D:87:AA:62:38:B0:6F:28:B4:9C:97:65
Certificate issuer:       /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial:       0184A8A992DF2E4CB98B688C571D1A9BE5EA
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EwigyAQ8HON9h6piOLBvKLScl2U.roa
Signing time:             Thu 24 Nov 2022 08:03:16 +0000
ROA not before:           Thu 24 Nov 2022 08:03:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        194.15.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a8:a9:92:df:2e:4c:b9:8b:68:8c:57:1d:1a:9b:e5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
        Validity
            Not Before: Nov 24 08:03:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1308a0c8043c1ce37d87aa6238b06f28b49c9765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:b2:38:b4:59:32:95:cc:7e:5e:8f:24:df:
                    35:79:9b:c7:8a:ff:df:11:87:df:5e:c8:cf:6e:b1:
                    64:37:fd:b0:c9:a9:b7:be:fc:3a:1c:14:1c:5c:7a:
                    46:68:e5:37:ee:94:95:17:ea:8b:69:88:28:62:8c:
                    4a:f9:83:f8:58:1f:6d:b5:57:9f:36:ec:d5:da:4d:
                    6f:6b:13:5b:c3:15:d3:e1:2e:90:08:8c:32:ce:e6:
                    0c:53:85:eb:d0:ea:76:d6:08:14:8e:9a:6a:bb:4e:
                    1b:0e:07:2b:75:a8:4e:01:eb:da:b1:da:f7:2b:2a:
                    36:ba:e6:d3:e6:64:fe:a0:a4:ee:fa:58:c9:f0:74:
                    e5:44:40:15:f3:89:80:95:dc:09:1b:27:55:8a:45:
                    bd:bb:02:3c:79:50:00:8c:9a:41:67:a6:9c:40:28:
                    c4:58:c4:ff:5d:9b:a7:27:25:e3:88:29:ab:0f:0f:
                    09:19:91:28:00:bd:1c:03:c6:9a:30:e5:66:13:06:
                    57:e0:86:b7:9c:a4:89:23:3a:8b:76:2f:21:74:cc:
                    3c:8a:eb:98:1b:7b:06:07:ba:53:90:4a:7c:5c:53:
                    b0:e3:3c:58:ee:b9:7f:ce:fd:d6:ca:f7:a9:d4:8d:
                    53:24:6f:74:dc:87:b7:21:76:8c:22:0a:b2:0d:70:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:A0:C8:04:3C:1C:E3:7D:87:AA:62:38:B0:6F:28:B4:9C:97:65
            X509v3 Authority Key Identifier:
                keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EwigyAQ8HON9h6piOLBvKLScl2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:e4:ee:da:f5:f7:1e:18:4b:78:d1:da:c8:db:3d:e2:4d:
         0a:fe:f6:e8:c7:10:4d:c4:03:ac:15:c4:a6:28:b8:d7:b0:7b:
         01:d2:64:c4:21:ed:d6:39:f7:f6:d6:dd:a8:02:c1:ea:9f:00:
         38:d5:92:95:0f:64:4f:c2:c0:46:37:d9:0c:3e:29:cd:f0:c7:
         5b:71:38:55:a9:cd:af:ee:cd:4b:ea:24:be:2b:c8:64:0f:c4:
         04:98:6f:e7:f3:f0:3b:54:31:22:86:ec:bb:0f:b3:71:f2:b2:
         44:86:0f:62:16:82:b4:c5:8d:80:e5:4c:8f:96:f2:aa:7d:27:
         60:60:6b:06:ee:16:a0:d1:ee:17:a3:c2:4f:47:d7:81:5e:7e:
         8c:5e:12:8c:e6:21:f6:83:08:3b:21:e1:26:4b:a5:02:55:a2:
         2c:06:65:9a:5c:61:f9:e3:e4:70:3c:35:d9:b0:c9:5f:06:31:
         74:ce:59:86:4d:42:12:2d:ac:cf:41:5f:0f:e8:c2:5d:cf:2c:
         7d:c3:db:ee:15:ea:46:70:02:4f:cf:34:b3:89:d5:42:76:e7:
         3a:88:68:34:5b:c9:62:26:a3:e3:fa:5a:54:19:c9:7a:18:ed:
         72:08:18:06:4a:f2:7e:53:9c:01:8c:d2:82:b3:9f:b1:b3:af:
         a3:3c:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----