Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sADl1JkAV6JZTpqmX2fFWY3Jwy8.roa
File:                     sADl1JkAV6JZTpqmX2fFWY3Jwy8.roa (raw, json)
Hash identifier:          wdCOdUOmFYNG5HHzX8prpERcc7MBQmQgMxqqj0VfNoU=
Subject key identifier:   B0:00:E5:D4:99:00:57:A2:59:4E:9A:A6:5F:67:C5:59:8D:C9:C3:2F
Certificate issuer:       /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial:       0B5EA8F8
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sADl1JkAV6JZTpqmX2fFWY3Jwy8.roa
Signing time:             Sat 01 Jan 2022 10:56:19 +0000
ROA not before:           Sat 01 Jan 2022 10:56:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31027
IP address blocks:        194.50.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190753016 (0xb5ea8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
        Validity
            Not Before: Jan  1 10:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b000e5d4990057a2594e9aa65f67c5598dc9c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:79:6d:e4:03:89:d8:24:8c:ef:11:3d:a1:
                    b6:1b:f0:8d:0f:79:78:a2:7b:22:6c:66:79:ac:ab:
                    b9:1d:bf:9f:e8:b1:60:52:70:81:d1:dc:8a:94:d2:
                    a0:9a:3f:0c:3d:21:73:81:cb:29:3e:df:dd:42:95:
                    03:aa:05:57:bc:db:d4:98:19:33:dd:68:89:d4:cc:
                    47:ad:30:ba:5e:0d:aa:b8:67:16:8e:3c:7a:e8:8e:
                    72:21:df:0d:cb:5a:6e:39:b5:4b:45:f5:3f:f3:9c:
                    48:2f:01:4d:1e:0d:77:72:ba:da:a8:62:63:2a:54:
                    5f:d5:81:2b:e9:bf:8a:47:68:14:1c:ed:22:8c:15:
                    c9:6d:dc:62:ba:68:85:a0:24:05:2e:73:6a:c2:e8:
                    3e:c3:e7:dc:36:6b:44:a8:63:ce:0a:b0:20:2c:66:
                    0e:d2:92:e6:55:ac:dd:df:9c:0f:fe:ee:9e:c4:fc:
                    9d:70:26:25:57:76:b4:1c:25:42:c6:69:de:1e:d9:
                    68:c2:15:fd:b5:00:d9:45:d6:e1:3f:1c:f5:5c:16:
                    bc:09:21:b1:55:19:c1:1f:e2:a4:1c:c2:22:7c:7a:
                    17:b2:3a:b1:45:96:c3:a4:f3:d4:ae:97:12:79:84:
                    b7:99:69:bc:f6:53:dc:9b:62:39:5c:c3:dc:22:f2:
                    e9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:00:E5:D4:99:00:57:A2:59:4E:9A:A6:5F:67:C5:59:8D:C9:C3:2F
            X509v3 Authority Key Identifier:
                keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sADl1JkAV6JZTpqmX2fFWY3Jwy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:49:ed:7b:5e:27:61:a3:fd:2f:75:c9:2b:ca:a4:92:08:86:
         42:f5:ce:b0:cf:ce:ec:46:e1:e9:12:60:dc:0d:2d:0c:8d:a5:
         52:34:e1:d8:b0:42:29:4d:2a:12:ab:58:d8:2a:fd:83:6f:46:
         29:40:6a:d8:46:90:f3:6e:9a:88:19:8d:a3:77:38:43:eb:b1:
         06:41:0c:10:fd:1c:3b:e8:91:b6:32:c3:6f:74:1c:3f:25:d0:
         3c:5a:86:11:a8:e5:f1:1d:4a:e0:ef:0d:99:e7:d6:26:5b:06:
         fa:3c:fa:5c:d3:06:d0:00:7f:a9:43:5d:a6:76:92:14:cb:17:
         2d:3c:84:70:bf:86:1b:cd:2f:0c:71:b9:b0:c6:72:44:fd:05:
         32:c8:19:c8:ae:23:06:89:42:92:09:99:d7:71:b2:d5:a6:24:
         84:c5:83:38:65:0f:06:75:b5:7a:05:1f:3d:c9:b1:94:3b:b1:
         48:c9:43:ac:77:53:88:49:6f:bf:40:61:41:a9:4d:52:01:6e:
         0c:11:6a:a3:0c:e5:92:08:b2:b4:7f:01:ee:cd:1f:0a:2e:10:
         b1:ab:67:a8:4f:01:f3:c2:f7:71:da:46:0f:e4:a2:ee:da:26:
         a6:21:62:d0:ed:e3:60:08:e9:de:ec:56:3c:fe:f4:d7:be:f3:
         5d:f8:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----