Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/VR6U8npK00pUItx7d5AUeKk1SIQ.roa
File:                     VR6U8npK00pUItx7d5AUeKk1SIQ.roa (raw, json)
Hash identifier:          UpAa0mxledHGBjLqUz9nKRZ/bwEGTOfWnJ64K2b+h3Q=
Subject key identifier:   55:1E:94:F2:7A:4A:D3:4A:54:22:DC:7B:77:90:14:78:A9:35:48:84
Certificate issuer:       /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial:       34FE36DB
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/VR6U8npK00pUItx7d5AUeKk1SIQ.roa
Signing time:             Sat 01 Jan 2022 05:57:47 +0000
ROA not before:           Sat 01 Jan 2022 05:57:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201965
IP address blocks:        93.175.159.0/24 maxlen: 24
                          2001:67c:2d7c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889075419 (0x34fe36db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
        Validity
            Not Before: Jan  1 05:57:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=551e94f27a4ad34a5422dc7b77901478a9354884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:c8:5a:ad:0d:12:0a:c1:81:7c:02:68:61:
                    e6:6f:ee:e5:cf:86:f3:0f:b7:b4:3b:0a:6c:1b:79:
                    14:7c:13:66:d7:39:47:81:e6:49:bb:e1:82:c3:cb:
                    99:a7:9b:a5:53:a7:77:8d:7e:b6:8d:28:6d:8e:c1:
                    66:c2:f8:53:ca:21:37:38:26:fb:4b:9e:96:3d:a1:
                    35:da:2c:c2:83:68:e0:38:46:00:3a:ca:78:af:9c:
                    85:66:3a:9e:32:be:b7:9c:60:3d:2f:23:c4:be:a8:
                    9d:0a:65:c0:02:3c:9c:91:ea:fa:e3:17:10:8f:bf:
                    5b:db:f5:09:c9:66:a2:b4:aa:3b:23:b2:f8:13:33:
                    23:3f:bb:8a:81:73:a5:a7:18:a0:67:93:a6:d0:1c:
                    15:c5:ee:e6:65:1b:90:e1:ba:1d:ba:93:87:2f:e4:
                    60:6d:06:4d:6f:8a:4c:c3:52:04:db:41:d1:67:f9:
                    8d:37:85:64:f9:05:82:01:c8:16:e8:cb:57:cd:0f:
                    9e:b4:b0:e3:02:74:3b:20:71:56:bf:6d:e4:3c:29:
                    5a:a0:f3:9b:1e:f2:4a:c0:c9:22:c0:cd:00:2a:71:
                    cc:70:f8:ab:1b:a1:5a:d4:8b:4c:0a:2f:0d:ab:9a:
                    10:ff:39:f2:63:2f:50:c6:37:e4:fa:eb:98:f3:f0:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:94:F2:7A:4A:D3:4A:54:22:DC:7B:77:90:14:78:A9:35:48:84
            X509v3 Authority Key Identifier:
                keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/VR6U8npK00pUItx7d5AUeKk1SIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.175.159.0/24
                IPv6:
                  2001:67c:2d7c::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:75:2f:1d:cc:b5:0e:f4:bc:09:bc:17:90:fd:2e:32:22:
         28:c5:d6:93:ab:dd:75:5f:bd:34:a6:75:bd:41:f9:3e:90:36:
         27:8e:2d:52:f2:c3:43:4b:48:7a:a8:a5:3b:86:a4:ae:1b:a8:
         dd:bb:2d:17:08:8a:8f:6d:c5:ac:d6:b0:9e:2c:6c:28:2f:26:
         e7:97:a4:87:e4:68:6a:68:f1:fa:4c:ed:3e:6c:11:11:c8:c8:
         ed:37:80:c0:81:32:d7:2f:00:e7:d7:4a:3c:df:fe:ea:37:6a:
         a0:d2:93:ff:74:1c:2d:ef:c8:2d:98:40:4e:83:fc:46:ce:2e:
         5d:49:b5:b0:29:59:a2:ed:f2:df:ae:ef:f5:92:22:ed:9e:20:
         12:2f:ea:f8:94:95:ab:05:da:a8:bd:4c:f8:f5:13:bd:4f:c4:
         1c:6c:05:01:8d:c9:1e:7e:ae:57:1c:c6:14:23:6e:8d:45:7f:
         63:f1:b5:17:22:28:33:e7:bc:67:66:b0:07:53:55:f9:9f:50:
         02:a9:ce:ee:11:d7:7f:04:20:00:9c:9b:a6:81:c7:3f:0c:63:
         4d:9b:da:c0:e9:3a:c5:ae:0d:7c:37:de:10:34:f2:fa:ad:cc:
         c2:63:e5:42:59:12:25:6a:4c:ac:f9:cd:d4:66:48:d2:56:28:
         c1:ff:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----