Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/bpkZ79o8Pbn7Kg74SCwn8L8hcqw.roa
File:                     bpkZ79o8Pbn7Kg74SCwn8L8hcqw.roa (raw, json)
Hash identifier:          1glr7Ec2ZIKR0L07iTmy+OGJ/bxPRPoj7fgncP+ct88=
Subject key identifier:   6E:99:19:EF:DA:3C:3D:B9:FB:2A:0E:F8:48:2C:27:F0:BF:21:72:AC
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       028215F3
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/bpkZ79o8Pbn7Kg74SCwn8L8hcqw.roa
Signing time:             Sun 10 Apr 2022 15:15:51 +0000
ROA not before:           Sun 10 Apr 2022 15:15:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19120
IP address blocks:        31.223.200.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42079731 (0x28215f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Apr 10 15:15:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e9919efda3c3db9fb2a0ef8482c27f0bf2172ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:fd:04:bb:e7:99:4d:b9:76:c0:85:7e:61:
                    8b:28:1a:47:ed:79:99:7a:a7:29:d5:e9:5d:4b:65:
                    e8:ef:12:bb:85:69:a4:0e:c1:0e:d3:03:a3:a0:f2:
                    27:67:29:90:6e:80:30:41:5a:21:b8:b1:06:22:ac:
                    db:b2:fb:3b:2d:dc:a6:b1:0b:a9:0b:ee:f0:a5:3a:
                    25:73:fb:f9:cf:17:98:3f:f3:1f:96:90:ee:72:11:
                    2e:34:2b:89:25:a7:ac:8b:35:4e:75:b2:47:83:dc:
                    71:df:3b:9f:b4:33:4d:02:3b:3b:5f:c8:e8:56:50:
                    1d:8a:b8:6d:0c:9c:49:fe:a7:28:cd:64:bd:db:ea:
                    a2:e9:b8:5a:97:0f:f0:be:d2:47:b1:2d:ef:64:1d:
                    8f:45:cc:f0:1b:7f:27:3a:bd:96:e2:bf:e6:e4:24:
                    74:a3:69:cc:d9:7c:c6:d4:95:0d:00:17:51:a6:93:
                    5d:57:a0:90:10:2b:ad:1b:02:70:5c:21:70:2b:f6:
                    02:c6:22:e7:d3:1a:4b:78:3a:ca:f2:83:f7:88:27:
                    81:cc:d7:94:27:04:c9:b0:84:ca:45:2b:dd:13:f7:
                    fd:47:4b:d0:7e:62:ce:32:fa:9b:61:d1:19:81:11:
                    f0:08:6c:94:bf:00:64:cf:94:e7:3a:d6:d5:14:dd:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:19:EF:DA:3C:3D:B9:FB:2A:0E:F8:48:2C:27:F0:BF:21:72:AC
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/bpkZ79o8Pbn7Kg74SCwn8L8hcqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.223.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:30:d8:bc:6c:ce:91:71:91:01:26:ce:1a:e0:c7:0b:73:18:
         83:f6:8c:8c:53:91:73:71:36:96:ab:c6:d9:9c:39:22:5e:ba:
         fb:87:73:cd:7f:82:f5:11:74:e0:ef:ff:6d:41:a6:00:84:ab:
         88:d6:88:51:d3:9e:1c:de:6a:a2:71:d1:36:13:07:ec:ce:2a:
         a2:6e:b6:17:8b:2a:23:69:de:8a:29:51:c7:d8:3a:a1:b0:09:
         8d:aa:dd:ba:47:59:1e:66:27:78:7d:7d:8a:fe:fb:28:d5:46:
         29:0a:ba:24:46:ef:e9:6c:96:9c:d8:a1:e6:b6:53:6b:1a:4b:
         2f:9e:13:27:2a:ad:cb:68:36:d5:c1:b0:37:8e:80:3c:ef:94:
         c0:a2:ac:53:2b:b7:2d:8d:51:c7:c5:5d:b7:a1:66:7f:0d:c0:
         45:43:60:2e:72:1f:96:42:b1:82:68:41:ee:be:c5:1d:ce:d0:
         3f:62:ef:7b:9c:39:a4:21:a2:4f:f0:98:28:d2:e7:bc:76:24:
         26:87:c5:ba:86:f0:b6:ed:95:d1:ef:d3:b1:0b:02:b7:0e:8c:
         94:8e:74:53:41:b6:8c:04:63:eb:e3:d4:9a:2b:39:14:c3:26:
         82:46:df:1f:ac:a2:5b:b3:58:3b:a5:3d:f3:3d:4d:44:cf:9c:
         b0:96:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----