Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1-hOlawFYBxGT7RJ26l2xaE78DQw.roa
File:                     1-hOlawFYBxGT7RJ26l2xaE78DQw.roa (raw, json)
Hash identifier:          1aj9tlIJbvEaZsa53u0bOloVhI/wvrPO21XSJoreyIw=
Subject key identifier:   FA:13:A5:6B:01:58:07:11:93:ED:12:76:EA:5D:B1:68:4E:FC:0D:0C
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       0B03F8AA
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1-hOlawFYBxGT7RJ26l2xaE78DQw.roa
Signing time:             Sat 05 Feb 2022 08:08:38 +0000
ROA not before:           Sat 05 Feb 2022 08:08:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5543
IP address blocks:        193.22.6.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184809642 (0xb03f8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Feb  5 08:08:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa13a56b0158071193ed1276ea5db1684efc0d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:db:4b:49:e3:9f:4a:35:87:d1:64:65:7b:
                    8a:e1:66:cd:1b:cf:e5:a1:0d:68:c2:e2:2f:cb:82:
                    a9:08:cb:0d:1f:ff:b9:ee:d6:63:09:ff:b0:30:25:
                    20:e3:cb:a1:42:b1:a7:be:35:b6:cc:39:fb:4a:70:
                    f1:ab:f7:bf:e5:41:d7:18:44:ac:ee:c2:ef:a6:bb:
                    06:d5:19:7b:67:a5:ab:4f:cf:71:6b:90:88:ba:d1:
                    6a:f8:e3:a0:c6:c6:d6:50:27:6a:6f:b2:de:9f:d9:
                    d4:50:0a:ed:cc:12:8f:aa:21:37:ca:76:2c:44:40:
                    54:75:1c:5b:fe:35:86:40:e3:3b:62:71:38:9e:90:
                    cf:2f:e1:7b:4f:2f:5c:0b:67:ad:cc:ee:bd:e4:df:
                    e4:48:e7:88:b3:5b:30:a5:78:82:eb:85:ca:da:25:
                    94:ae:08:59:47:48:d8:43:1c:65:96:2f:5b:15:2a:
                    f4:d0:03:41:93:bd:f0:85:75:94:c9:a9:53:cc:b6:
                    a6:a6:9b:48:c6:e7:ec:00:fd:82:1a:dd:d0:eb:e4:
                    88:2c:b0:3b:e9:49:9e:70:6e:3d:4b:71:10:8b:95:
                    15:b2:cb:c1:8c:75:ae:18:19:8a:58:37:f3:d0:29:
                    73:22:63:62:31:f4:c9:05:be:a2:6a:9e:cb:13:95:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:A5:6B:01:58:07:11:93:ED:12:76:EA:5D:B1:68:4E:FC:0D:0C
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1-hOlawFYBxGT7RJ26l2xaE78DQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ce:85:21:04:b1:37:2d:48:bf:90:a5:da:07:09:60:a4:1e:
         81:4b:9f:4a:72:bc:7c:18:5f:06:00:26:ed:dc:ab:da:b8:ba:
         90:da:87:03:8a:b8:72:80:d0:b8:de:7d:2a:75:38:2d:48:da:
         04:fd:49:f6:03:78:82:87:81:1f:2c:07:d7:b2:58:90:9b:c8:
         d6:7b:ef:b0:da:3e:b8:10:1e:91:90:28:f1:75:34:e9:d0:17:
         1a:75:c5:3b:d7:c1:b5:b4:5c:8a:f2:e4:98:5d:3e:77:db:a0:
         67:72:87:00:d5:2f:36:63:f3:99:82:de:a0:e7:6b:21:c6:2e:
         57:f8:97:93:f6:b8:2f:87:5b:56:fb:1b:cb:d3:2e:a8:2c:fc:
         1d:3a:99:07:18:d6:1a:28:8b:a9:8c:c5:65:4b:e5:95:01:9f:
         ad:c5:10:c3:ca:8b:32:2f:ad:4e:41:8a:1e:f2:29:87:fd:14:
         1f:82:93:e1:c4:e4:3f:8a:fe:94:83:17:7b:be:c2:cf:65:00:
         58:28:19:3c:5a:7e:ea:8d:60:10:11:ad:56:44:9d:3d:d8:d0:
         ed:72:a5:2f:11:fb:eb:f9:d3:7b:3e:35:21:13:16:28:fd:ef:
         82:61:9f:26:9d:a8:b8:78:fe:38:93:8f:72:c3:74:87:15:e1:
         68:6a:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----