Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/9RRB845qfjZdjFVDEy-Xf3BaWvg.roa
File:                     9RRB845qfjZdjFVDEy-Xf3BaWvg.roa (raw, json)
Hash identifier:          GinkR5KHwFiv6/xF91+dvpvLenqwlFgo9wwPsdR85Ts=
Subject key identifier:   F5:14:41:F3:8E:6A:7E:36:5D:8C:55:43:13:2F:97:7F:70:5A:5A:F8
Certificate issuer:       /CN=0d5c1d712d05562491a4a278a84b9cda35539432
Certificate serial:       0183A6F176AEB7085C0F9D43AD0A9396859E
Authority key identifier: 0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/9RRB845qfjZdjFVDEy-Xf3BaWvg.roa
Signing time:             Wed 05 Oct 2022 06:59:45 +0000
ROA not before:           Wed 05 Oct 2022 06:59:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49037
IP address blocks:        178.212.139.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a6:f1:76:ae:b7:08:5c:0f:9d:43:ad:0a:93:96:85:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5c1d712d05562491a4a278a84b9cda35539432
        Validity
            Not Before: Oct  5 06:59:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f51441f38e6a7e365d8c5543132f977f705a5af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:6d:ef:ff:46:2e:a0:99:43:3c:70:5f:7d:
                    3a:d9:21:f3:c0:ab:ea:29:d5:a1:19:0b:fd:31:ee:
                    e3:8e:3e:5d:d7:3e:98:e3:dd:db:2f:e7:c5:4e:48:
                    37:af:83:01:1c:ef:79:1b:95:b1:d4:c8:f3:60:cd:
                    65:cd:74:56:59:f4:62:5d:b0:c8:ca:54:8c:4d:3a:
                    c1:e5:9b:8a:a9:99:ba:2e:a2:27:f0:e0:58:de:0e:
                    5b:09:26:ba:f7:97:d1:0a:09:52:fb:10:3c:ae:e6:
                    80:8d:a2:93:4f:5a:55:fb:1b:ff:51:ca:e3:39:dc:
                    17:72:4a:6b:88:7f:5b:31:14:bd:2e:57:bf:75:f0:
                    82:a0:a6:59:ae:d2:9b:9a:1d:32:88:bb:7f:21:3c:
                    a2:52:68:82:51:79:39:56:85:63:16:47:cd:3e:e9:
                    19:90:14:97:d8:78:35:4b:d0:d8:40:75:4c:13:6f:
                    f2:d9:9e:bb:cc:4b:2f:e6:d4:6c:83:7b:5c:19:9c:
                    cb:2e:57:67:b6:97:55:73:af:e9:d5:45:d2:4e:94:
                    30:61:ec:c0:a9:4e:39:96:17:18:04:8d:a5:14:31:
                    d7:21:1f:60:35:1b:f7:41:2b:7e:c0:5b:4e:72:40:
                    30:fc:6f:16:ea:2d:b8:71:9b:d3:ba:3c:19:e9:c1:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:41:F3:8E:6A:7E:36:5D:8C:55:43:13:2F:97:7F:70:5A:5A:F8
            X509v3 Authority Key Identifier:
                keyid:0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/9RRB845qfjZdjFVDEy-Xf3BaWvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:54:4f:d4:92:ea:1f:8a:01:b0:ab:39:7b:76:3d:24:7c:0b:
         5f:03:62:41:e9:04:a4:ed:b7:54:b9:72:aa:e4:cb:a2:fd:18:
         a0:b4:e2:f6:c0:ff:65:94:89:31:fe:a5:96:b6:72:1b:f4:b4:
         32:f9:fb:8b:f7:48:3c:76:47:4b:a7:9b:b7:50:1d:8a:2d:ac:
         e8:b3:35:d4:99:09:bd:c4:97:45:59:49:8d:b2:4b:77:8b:e3:
         c4:6c:4d:74:9e:f9:ba:33:49:56:1a:27:81:5c:18:51:bf:3d:
         e8:04:24:95:e7:90:87:04:99:f6:8b:61:ec:d0:f9:44:87:d5:
         f1:ff:49:87:bd:27:36:1c:13:fe:2f:b7:c8:b4:1d:42:35:f2:
         09:a5:24:28:f2:f2:3f:ee:75:8d:b6:28:f1:91:ab:bd:a5:bd:
         f2:93:5c:72:8b:05:71:92:bb:fb:77:5e:70:4b:dd:04:78:78:
         8c:02:d1:ea:1d:3c:40:ea:34:63:1f:ab:09:0a:bc:7c:da:a0:
         84:84:c7:9d:db:69:9d:2c:7a:79:22:c9:97:cc:1b:72:16:63:
         e1:c5:58:f6:aa:f8:85:e5:92:04:ae:6b:df:a8:c1:6b:e0:84:
         05:ab:11:a4:0e:ba:0b:5a:38:01:2c:3a:0b:62:6f:c9:ec:2d:
         01:4c:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----