Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/01G6Y58UJbHufrSOX-RPEDc99GE.roa
File:                     01G6Y58UJbHufrSOX-RPEDc99GE.roa (raw, json)
Hash identifier:          Q6nLnFHHkEkvRjduWzW+0Hyb+4RYEN1p5Ip6XbcxowY=
Subject key identifier:   D3:51:BA:63:9F:14:25:B1:EE:7E:B4:8E:5F:E4:4F:10:37:3D:F4:61
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       05E1E156
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/01G6Y58UJbHufrSOX-RPEDc99GE.roa
Signing time:             Sat 01 Jan 2022 11:03:00 +0000
ROA not before:           Sat 01 Jan 2022 11:03:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49846
IP address blocks:        93.191.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98689366 (0x5e1e156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  1 11:03:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d351ba639f1425b1ee7eb48e5fe44f10373df461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:be:db:7b:2f:71:d8:17:f9:66:96:58:12:9d:
                    fa:b1:f0:16:a4:b6:45:d0:30:8e:73:fd:67:52:a9:
                    c5:18:3e:52:db:db:1f:c4:6c:e4:cd:52:0d:55:1f:
                    b1:0c:1a:4f:61:7b:f3:58:16:60:6d:23:83:22:3a:
                    c7:39:d7:a2:7c:f0:dd:cd:82:78:95:a5:d8:c0:b6:
                    3d:33:49:05:97:e2:a4:1b:12:c1:c2:5f:13:02:08:
                    75:41:1a:39:04:67:f9:41:6b:8f:88:e5:02:cb:75:
                    b6:90:42:72:00:92:9e:b4:fd:c3:64:b6:00:02:0e:
                    db:77:af:48:da:da:11:d0:dd:2c:3b:b4:e7:9f:f1:
                    ff:47:b5:d0:0d:b8:2e:88:8d:03:c8:6e:78:b7:a4:
                    43:e8:fa:bc:1f:c6:c2:32:f0:8e:e1:6c:db:0e:9c:
                    a7:46:82:e2:3d:39:c0:64:b3:c6:e5:97:5f:72:37:
                    3e:96:40:be:8a:04:be:16:07:27:f3:1f:17:03:88:
                    bb:2b:18:34:4b:47:a7:88:73:e8:b7:25:cf:12:cd:
                    4b:21:1a:d0:d0:49:f1:78:5a:dd:83:21:cf:f4:36:
                    53:82:80:ad:e4:f8:9f:8c:b7:f7:fb:60:5a:51:fd:
                    5d:2e:43:a9:e2:fc:33:2d:33:86:d3:54:a0:fe:46:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:51:BA:63:9F:14:25:B1:EE:7E:B4:8E:5F:E4:4F:10:37:3D:F4:61
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/01G6Y58UJbHufrSOX-RPEDc99GE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ec:e0:66:5b:3e:38:a1:df:75:57:c7:35:44:06:5f:b5:f6:
         c3:ea:a5:44:40:1b:08:aa:a3:b6:77:a9:7b:8d:72:df:88:1f:
         63:7f:7b:18:e9:52:99:bc:e4:82:70:c1:9b:39:64:da:22:66:
         4b:b0:8a:be:d9:2a:c9:d4:41:64:54:ac:8f:82:91:2a:ba:1b:
         67:fa:2c:2f:2e:0a:7a:56:10:c2:07:a9:23:e0:1d:6f:25:65:
         e3:53:63:7c:56:ed:9d:b6:c0:a9:15:eb:d8:96:11:50:92:86:
         d1:53:11:fa:79:03:d9:5b:16:3f:ca:f4:e3:56:db:b7:81:6f:
         0b:75:9a:14:01:7e:b1:6b:d0:39:75:64:8f:7f:f0:e6:db:0e:
         f9:b1:c6:b3:f4:7e:b7:34:bb:26:98:c9:e5:5a:1d:0d:59:c3:
         2c:1c:88:1d:ab:c3:d3:76:95:d1:5c:44:13:ed:81:d6:fc:32:
         93:5c:22:f8:4f:d0:24:06:28:39:5e:c3:8c:e6:ef:62:7e:be:
         a9:58:fa:3f:b3:56:b4:59:d1:e9:ac:0a:d1:fa:2d:55:d7:0d:
         9b:75:e9:bd:3a:94:e8:82:2f:7e:95:92:6a:5f:60:34:0f:11:
         6e:1f:78:6f:7f:3a:30:30:82:39:6a:f0:a9:ab:cb:38:03:fb:
         7b:29:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----