Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/GYN1tgg_vluatMqBIJuUSIox8-E.roa
File:                     GYN1tgg_vluatMqBIJuUSIox8-E.roa (raw, json)
Hash identifier:          hS6PnCByMDqTriKEiAibXU4BnXStLiDcvQILVRITVpM=
Subject key identifier:   19:83:75:B6:08:3F:BE:5B:9A:B4:CA:81:20:9B:94:48:8A:31:F3:E1
Certificate issuer:       /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial:       018321EB79313D5D58394DEBAEDE5FFEF2A1
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/GYN1tgg_vluatMqBIJuUSIox8-E.roa
Signing time:             Fri 09 Sep 2022 11:03:43 +0000
ROA not before:           Fri 09 Sep 2022 11:03:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        194.15.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:21:eb:79:31:3d:5d:58:39:4d:eb:ae:de:5f:fe:f2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
        Validity
            Not Before: Sep  9 11:03:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=198375b6083fbe5b9ab4ca81209b94488a31f3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:d6:9d:39:e8:76:b9:60:11:87:f1:2d:2a:
                    37:20:67:0a:4f:fd:66:9b:85:68:3d:bf:b1:2d:66:
                    4d:69:64:d0:f0:77:93:24:f4:e4:de:e8:1e:17:fd:
                    b0:f7:0b:a8:3a:f0:44:79:f2:26:ef:98:c4:f9:a5:
                    b2:23:48:ae:7e:76:37:67:75:b6:4b:e6:ae:03:28:
                    96:ec:5b:13:b7:13:96:a6:18:c3:06:0a:b1:38:a6:
                    33:3f:98:7f:81:97:14:12:42:7d:70:b1:45:b5:35:
                    d7:8a:89:3c:62:c1:0b:d1:50:29:1c:d9:75:1f:9f:
                    ca:31:90:ca:2e:e2:8e:e7:1a:b7:53:61:79:90:c4:
                    ec:e7:c5:aa:a3:4d:65:0f:75:ce:ad:20:8c:85:3f:
                    5d:fd:66:a2:dc:c2:f5:59:dd:f7:66:ff:7f:f4:0b:
                    3c:aa:7a:e4:e1:d1:33:39:67:00:f4:4a:bd:56:3d:
                    b3:69:39:d4:18:f3:24:d6:0c:7e:64:fc:b4:8a:ac:
                    82:8b:8b:13:fd:b7:7f:85:49:c9:dd:d3:29:d1:c8:
                    96:04:3b:41:5a:97:a6:7a:a7:f1:e2:73:6b:ce:8f:
                    43:2a:6b:74:04:23:f0:9f:9b:f3:e2:d4:ec:05:98:
                    c8:d6:67:2d:2f:4e:5a:41:13:1e:17:a4:4d:87:9e:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:83:75:B6:08:3F:BE:5B:9A:B4:CA:81:20:9B:94:48:8A:31:F3:E1
            X509v3 Authority Key Identifier:
                keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/GYN1tgg_vluatMqBIJuUSIox8-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c3:83:70:4a:a1:9b:5d:47:81:b3:15:a6:f1:10:f9:1b:39:
         7f:31:ef:8d:3c:a0:4d:bb:ac:04:84:2f:f2:af:c2:12:5e:5a:
         ee:24:94:8f:fd:a6:a1:cc:bd:a4:50:6b:78:68:ea:db:c7:f8:
         48:d7:a5:0c:0d:9d:f9:76:53:7f:19:30:71:ee:72:84:15:57:
         d3:1f:38:5b:1a:c4:ae:bc:88:ae:36:49:ab:26:f9:ae:8f:13:
         ef:5f:84:fe:cf:d3:f8:98:e4:34:e1:87:bd:49:56:26:1e:89:
         65:d0:47:36:c3:2d:99:0f:80:6c:7c:75:e9:39:31:69:31:28:
         ae:89:00:b4:53:4a:1f:5d:82:33:81:c3:ae:0a:f4:15:3d:80:
         33:f2:05:c7:27:ad:92:36:61:60:ea:34:6e:46:d6:fb:44:7f:
         93:14:d3:f9:5a:db:3b:2e:a8:99:b7:e1:c4:c1:5d:5d:3a:6f:
         6b:84:a9:52:e4:7b:6d:59:68:a0:e9:ac:01:a4:aa:d5:21:5f:
         9b:a3:3a:d0:6f:e2:b1:91:1c:56:f0:6f:d8:82:88:bb:8e:80:
         31:db:08:28:ac:d6:6c:4d:8e:3e:79:08:ed:91:de:e7:0b:df:
         9e:03:92:18:20:01:82:be:aa:9b:f2:ce:6f:04:2b:58:35:00:
         12:8b:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----