Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/1-5SW80jDzXhjayPmtDFaIac3omE.roa
File:                     1-5SW80jDzXhjayPmtDFaIac3omE.roa (raw, json)
Hash identifier:          DtyCCynsjaoUpR+tZDEYs5irKavrQ1xmP57naiqsPEk=
Subject key identifier:   FB:94:96:F3:48:C3:CD:78:63:6B:23:E6:B4:31:5A:21:A7:37:A2:61
Certificate issuer:       /CN=dd4bdcd28c8735098199aec093ca897c077d7c90
Certificate serial:       059DCABD
Authority key identifier: DD:4B:DC:D2:8C:87:35:09:81:99:AE:C0:93:CA:89:7C:07:7D:7C:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/1-5SW80jDzXhjayPmtDFaIac3omE.roa
Signing time:             Sat 01 Jan 2022 12:54:58 +0000
ROA not before:           Sat 01 Jan 2022 12:54:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206858
IP address blocks:        193.228.143.0/24 maxlen: 24
                          2a10:11c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94227133 (0x59dcabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4bdcd28c8735098199aec093ca897c077d7c90
        Validity
            Not Before: Jan  1 12:54:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb9496f348c3cd78636b23e6b4315a21a737a261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:00:ae:3d:33:2e:e9:7c:55:65:44:c1:96:
                    a9:d8:3f:ab:7f:ae:4a:56:b4:0d:cd:e3:04:77:86:
                    77:f2:b3:8e:1b:86:49:27:46:38:93:2c:eb:11:19:
                    ca:ed:57:59:05:0b:01:e1:27:07:39:75:41:73:cd:
                    a4:b3:db:26:e1:5a:a4:6f:62:ef:10:bc:63:26:ad:
                    98:02:5d:6f:3e:73:b4:ec:98:1d:05:72:13:2b:24:
                    ab:87:ad:d8:08:47:80:88:f6:ce:b3:ba:0a:1f:54:
                    5d:fa:56:ae:6d:83:97:05:94:40:a0:ee:7a:f9:65:
                    aa:73:2c:02:91:03:29:90:0f:62:83:06:64:2e:bf:
                    9f:20:eb:ba:f6:77:3f:f8:fc:7a:83:42:66:02:96:
                    d4:49:2a:7a:fe:d0:06:01:70:27:65:1d:e4:e3:c9:
                    19:c6:31:9c:0e:54:4b:3c:7c:ed:7d:51:9d:70:f5:
                    06:62:b2:e3:44:c2:c7:c6:d1:26:be:86:ad:eb:f1:
                    34:64:53:58:17:71:ec:ca:55:30:d3:92:ba:a0:ea:
                    10:6d:ac:d0:1a:a9:d4:60:20:25:c1:d4:63:76:af:
                    e0:de:6f:16:89:75:5f:2e:c8:dc:00:a0:b4:03:a3:
                    9a:b6:53:ee:1e:cc:67:5e:d9:b7:8f:3c:2f:50:e8:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:96:F3:48:C3:CD:78:63:6B:23:E6:B4:31:5A:21:A7:37:A2:61
            X509v3 Authority Key Identifier:
                keyid:DD:4B:DC:D2:8C:87:35:09:81:99:AE:C0:93:CA:89:7C:07:7D:7C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/1-5SW80jDzXhjayPmtDFaIac3omE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1701f-d755-4d02-93e6-0acfff6189bd/1/3Uvc0oyHNQmBma7Ak8qJfAd9fJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.143.0/24
                IPv6:
                  2a10:11c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:fa:1e:d0:c3:d1:09:82:1a:53:5f:6d:e9:84:86:4a:ba:48:
         61:26:52:69:a2:9a:15:03:86:67:d6:bf:ad:65:f1:b6:d0:34:
         0d:5d:af:ec:5f:40:f0:76:e4:03:31:4d:33:64:84:52:4b:e3:
         be:17:f2:3f:6d:86:55:e8:22:74:86:d9:24:ad:66:9a:ba:50:
         0f:20:eb:de:71:b8:3f:57:1e:ea:86:6d:4d:3e:d6:1f:94:91:
         07:71:e7:d0:e7:db:20:7f:8e:b4:3f:d8:59:0c:05:73:ca:ae:
         a6:c0:87:33:08:52:7f:91:e4:a3:7a:a5:bb:bf:a4:3b:76:06:
         c2:c9:59:32:7c:6a:f8:e8:3b:89:4a:40:d8:9f:a9:ce:cb:13:
         11:ad:eb:f4:cf:9f:4c:cb:87:ed:2e:5b:e4:f9:29:c6:1c:17:
         1a:b5:4c:fa:59:fe:c6:c8:b5:48:89:e4:b1:c6:26:56:10:c0:
         3f:8f:32:ca:16:71:19:7a:2e:46:8e:84:41:9b:13:33:6c:4e:
         c3:41:2c:02:f5:ef:08:1c:36:0a:75:3e:a7:0b:86:d2:9f:4c:
         9d:99:3c:ea:f9:51:c6:0b:0d:6e:9c:16:b2:64:8f:be:32:04:
         73:4b:62:b8:93:4d:43:9a:59:3c:96:cd:fe:01:23:2e:9a:25:
         18:b5:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----