Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/qjkbPDSeSn7zHCcBBno_n8iR5-w.roa
File:                     qjkbPDSeSn7zHCcBBno_n8iR5-w.roa (raw, json)
Hash identifier:          S+pKTfBNzp35J7dIcvm3LeJLnjW0BV8LzPW4McncE/k=
Subject key identifier:   AA:39:1B:3C:34:9E:4A:7E:F3:1C:27:01:06:7A:3F:9F:C8:91:E7:EC
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       0588FDFD
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/qjkbPDSeSn7zHCcBBno_n8iR5-w.roa
Signing time:             Sat 01 Jan 2022 08:52:50 +0000
ROA not before:           Sat 01 Jan 2022 08:52:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30766
IP address blocks:        178.132.68.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92863997 (0x588fdfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Jan  1 08:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa391b3c349e4a7ef31c2701067a3f9fc891e7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:b5:2e:5a:03:6b:7b:28:fb:d6:ae:36:b5:
                    5a:d7:f1:fe:40:d2:53:6b:df:86:a2:73:0f:3a:99:
                    c0:b1:7c:37:27:dd:0e:2e:39:68:e0:cc:43:d0:fd:
                    01:02:3a:02:89:bb:e9:f5:28:34:09:7a:2c:da:16:
                    d1:0c:cd:d7:80:e0:55:8a:d5:3e:66:63:1e:b0:76:
                    85:18:ca:26:e3:18:c9:b7:51:7a:a9:a1:7b:5e:a9:
                    ee:9f:1a:ed:e0:81:65:10:f8:a2:c6:10:31:57:75:
                    ce:5f:e5:5e:0f:41:3f:2a:30:f3:42:93:9d:37:78:
                    56:1c:fb:27:69:c1:55:23:51:a1:5d:0c:1d:3e:35:
                    f4:2e:13:52:23:0f:17:47:32:72:3a:ef:9d:47:d5:
                    20:a8:b0:71:a3:e2:a1:e9:a0:65:7b:a7:ca:03:67:
                    11:3f:8c:40:6d:22:20:05:03:e2:a8:3c:8d:d8:ff:
                    a0:6b:9a:ed:16:33:f7:65:c0:cb:da:d9:14:73:b8:
                    86:b8:f7:d7:b7:35:8f:2f:ca:90:52:ee:76:e6:64:
                    ce:71:89:54:a9:d6:ba:23:d3:34:6c:25:48:73:45:
                    65:f2:b9:20:b8:b6:5b:bb:a0:d2:2a:a0:f7:d3:da:
                    75:ee:de:23:d4:35:35:96:41:6c:19:b3:96:e5:cd:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:1B:3C:34:9E:4A:7E:F3:1C:27:01:06:7A:3F:9F:C8:91:E7:EC
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/qjkbPDSeSn7zHCcBBno_n8iR5-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.132.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:49:0f:bf:59:9e:f6:b3:82:a5:8c:76:bf:54:ca:98:cf:
         79:77:e1:5c:26:c0:29:97:1b:66:eb:6f:dd:c5:de:57:fb:8e:
         43:04:60:aa:86:60:32:eb:6a:ab:35:db:c9:ae:08:6a:a7:0a:
         a0:b2:2a:1a:b0:ba:52:d0:2c:e6:d8:3e:3b:83:3a:42:d9:8f:
         e4:a8:30:4d:ac:5c:91:3a:6a:2a:10:38:98:42:66:14:67:3d:
         1b:11:98:c0:9a:19:79:0b:a6:65:80:c3:38:82:05:59:29:47:
         ca:bc:59:59:6b:b4:bc:4d:cf:83:3b:8f:f2:15:ba:72:4c:57:
         e2:da:61:7a:5c:7d:c4:31:d8:59:b8:87:75:31:e7:4d:e4:51:
         ee:dd:62:c7:00:75:51:48:b7:61:25:6c:ce:58:67:a4:f8:a3:
         13:f9:67:55:df:bb:93:a6:9e:9d:d8:d9:80:28:1e:42:63:24:
         12:17:0d:23:b9:22:e1:60:3f:0e:9c:8a:e7:9d:30:72:98:05:
         01:cc:97:36:85:44:1f:96:06:21:5f:45:6c:95:24:c2:bf:4e:
         0b:f1:44:bc:41:94:68:aa:a6:7e:d3:9f:39:28:f2:15:66:9c:
         ee:cc:54:9d:7b:2b:8f:08:66:d1:12:33:07:ef:15:d6:ba:43:
         48:7b:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----