Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/m8z1XUqHFDADtCW_gf2WHyEXoQI.roa
File:                     m8z1XUqHFDADtCW_gf2WHyEXoQI.roa (raw, json)
Hash identifier:          W9Di/L4gYWA9drCaGcfkX1RIH0uk3uOwLCPM/Zsix1s=
Subject key identifier:   9B:CC:F5:5D:4A:87:14:30:03:B4:25:BF:81:FD:96:1F:21:17:A1:02
Certificate issuer:       /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial:       088E3BDA
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/m8z1XUqHFDADtCW_gf2WHyEXoQI.roa
Signing time:             Sat 01 Jan 2022 04:59:15 +0000
ROA not before:           Sat 01 Jan 2022 04:59:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212754
IP address blocks:        193.19.248.0/22 maxlen: 24
                          2a0a:2302::/32 maxlen: 32
                          2a0a:2300::/31 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143539162 (0x88e3bda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
        Validity
            Not Before: Jan  1 04:59:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9bccf55d4a87143003b425bf81fd961f2117a102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:b2:c8:d8:34:15:14:ef:bf:72:12:f7:14:
                    ec:ca:86:3b:93:44:a0:0a:d0:1b:e6:93:9c:b5:b9:
                    18:79:3f:51:03:85:4d:09:a7:98:e1:26:e6:7d:cf:
                    a1:b5:64:a9:cf:93:8d:71:39:7b:57:5f:9b:fa:fc:
                    98:5d:07:50:3c:b4:36:8a:42:df:e9:0d:84:ea:2a:
                    cf:8f:4a:01:2a:71:23:60:0c:a5:75:d2:e9:d4:c8:
                    19:40:57:a5:8b:fd:15:41:7e:7f:2b:37:09:6f:18:
                    36:b0:57:61:54:40:7e:a6:f7:15:b4:00:5d:91:e5:
                    c0:cf:07:4a:cb:bd:8b:1e:59:cd:8b:be:69:d8:cd:
                    b7:3f:a5:4f:79:52:7e:c4:06:2a:db:58:b1:d0:6f:
                    ea:f5:bf:61:17:0c:26:11:bb:ac:eb:9d:de:e2:9a:
                    61:73:e9:b4:bf:e3:7e:7e:20:a8:0c:64:98:9b:d2:
                    7e:ca:c8:53:21:ca:73:05:c2:38:e0:5c:f8:09:80:
                    b7:60:7b:38:ae:a8:53:cc:80:1b:c5:4b:95:88:6b:
                    2a:3e:f9:a0:0b:09:cc:de:de:5c:b8:29:2d:57:3f:
                    e2:5f:48:89:29:9d:48:e9:64:e9:94:e3:bb:c0:93:
                    69:84:87:03:0e:8c:18:9b:1e:b5:83:bf:10:a0:b6:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CC:F5:5D:4A:87:14:30:03:B4:25:BF:81:FD:96:1F:21:17:A1:02
            X509v3 Authority Key Identifier:
                keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/m8z1XUqHFDADtCW_gf2WHyEXoQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.248.0/22
                IPv6:
                  2a0a:2300::-2a0a:2302:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:f3:0e:a0:1f:23:59:17:f4:1f:7d:f5:d8:8c:d9:9a:b6:
         85:bd:8b:bc:0f:50:e0:d6:e2:dc:12:ac:c4:90:68:91:83:4d:
         09:54:eb:60:fa:50:ab:d6:29:07:38:6e:18:32:da:f4:84:1f:
         be:b3:4a:17:70:b4:15:3e:09:49:e1:87:f8:10:d1:4d:65:ab:
         28:07:60:c9:1a:a1:17:c7:60:3b:ff:95:76:2e:59:9a:8d:df:
         a0:83:b9:95:1d:b3:75:18:20:08:0a:50:10:45:7d:6d:92:5f:
         bd:6c:bd:97:d0:b0:64:dc:3f:e2:dd:50:06:a4:90:e6:8c:94:
         06:40:37:9d:3d:53:62:a9:1f:d6:85:08:c9:28:c9:2b:b5:28:
         cf:37:5c:50:fa:5d:1a:de:e8:2f:28:2f:d5:ec:7b:7b:ae:5f:
         39:99:c1:e6:5c:61:43:8f:d3:8d:54:d1:7a:83:02:64:a4:ec:
         6a:c1:51:4d:f0:40:6f:1d:7a:3f:ab:01:fb:68:4b:79:4a:d6:
         c3:47:4e:91:5d:e1:01:b3:01:bc:f8:fb:14:4c:f5:8c:40:25:
         e2:95:be:6e:95:59:07:04:36:05:22:2d:8e:04:9e:b7:35:06:
         b9:63:4c:e1:32:c7:0c:84:f8:38:6a:fb:e3:e5:c8:8f:57:ed:
         fa:ac:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----