Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/KV0nhNtFGGKXcVke25VAgSR00ek.roa
File:                     KV0nhNtFGGKXcVke25VAgSR00ek.roa (raw, json)
Hash identifier:          XHD6ZG1tOxgOkFKpXA92iCVI6Z+t4bT5bZlNtEjKJ8w=
Subject key identifier:   29:5D:27:84:DB:45:18:62:97:71:59:1E:DB:95:40:81:24:74:D1:E9
Certificate issuer:       /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial:       CC48
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/KV0nhNtFGGKXcVke25VAgSR00ek.roa
Signing time:             Tue 15 Feb 2022 12:14:51 +0000
ROA not before:           Tue 15 Feb 2022 12:14:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201339
IP address blocks:        194.127.204.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52296 (0xcc48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
        Validity
            Not Before: Feb 15 12:14:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=295d2784db4518629771591edb9540812474d1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:83:e7:04:cb:28:b6:39:8a:96:c3:3a:2e:
                    f7:09:03:23:3a:76:e6:de:cd:4e:7b:b1:db:9f:01:
                    b7:2e:af:d6:08:0a:19:c2:ed:90:31:39:84:af:83:
                    e9:c9:b4:70:55:79:da:72:8b:b7:53:fd:7e:2f:b6:
                    2a:f1:12:e3:d7:31:a3:2d:34:30:97:94:ff:a1:92:
                    c9:21:61:5f:49:0f:a3:c1:37:ab:d5:71:20:69:25:
                    3a:b9:95:f4:46:4f:c5:ae:40:00:df:22:c4:00:16:
                    0d:3c:e0:a4:7c:eb:54:2b:fc:2d:df:8e:dd:b0:ff:
                    02:a9:71:13:1d:53:4c:53:77:ec:5b:de:04:26:ed:
                    2c:19:54:fd:8f:18:d3:cc:40:e9:65:23:1a:69:a3:
                    9a:64:66:fd:da:15:3b:59:45:38:8a:1b:00:69:8c:
                    c3:50:c3:a0:68:e6:e7:d7:b9:6d:b5:04:ba:f2:20:
                    73:ba:a8:4f:c9:91:8a:e7:9a:ec:1b:61:93:f6:5b:
                    f9:92:3a:27:43:1e:90:83:fe:35:00:ec:b2:cc:6d:
                    b1:eb:ca:ea:cc:40:e7:36:d2:63:96:5f:cd:f0:ed:
                    4c:2d:95:e4:3f:49:42:fa:95:c1:16:6e:77:d8:be:
                    8a:62:bf:16:be:49:02:5a:0d:50:1a:30:12:5e:cb:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:27:84:DB:45:18:62:97:71:59:1E:DB:95:40:81:24:74:D1:E9
            X509v3 Authority Key Identifier:
                keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/KV0nhNtFGGKXcVke25VAgSR00ek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:98:d0:e2:36:bf:7c:7f:83:88:91:9a:ad:98:2c:43:92:68:
         e8:77:2a:94:58:25:ad:70:e3:70:af:34:23:46:3b:e8:8a:ae:
         17:c8:ee:a1:5a:0c:47:ba:26:8d:0b:4f:b4:dc:8f:a7:78:75:
         93:86:8b:dc:07:23:0a:7d:0b:19:fb:aa:f9:42:c1:4f:89:ee:
         8e:65:b9:ff:b4:df:c9:10:70:b3:71:37:76:b1:61:ac:28:93:
         29:84:ff:24:d1:a3:96:b0:7a:f0:aa:6e:e1:62:15:43:86:98:
         1d:18:60:52:a1:79:ed:97:df:7c:33:10:0c:cb:8b:3f:ff:05:
         72:4a:bc:11:f2:fb:a1:8e:ad:fc:fe:32:80:69:9f:c8:e9:f4:
         88:6e:d8:12:6f:ee:39:1b:f4:a5:8e:04:a2:63:ac:f3:0c:fc:
         ec:70:cc:92:ea:2a:4b:4a:6b:e7:4c:fe:dd:80:ca:b9:f3:2c:
         14:36:fa:68:91:37:9a:b9:cd:79:7b:da:4e:cc:fc:45:93:b5:
         fe:31:0c:fc:39:71:56:d7:4f:5e:07:7d:7b:9a:67:0b:24:c7:
         42:65:5f:f4:8b:7a:41:c7:31:f0:15:a1:29:d8:1f:f2:36:d7:
         39:f8:5d:0a:8f:09:fc:ca:7d:2b:94:7d:a7:32:a3:ed:98:ec:
         5d:eb:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----