Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/km1tGdL4lXgEPdBv6nFobfpFjFk.roa
File:                     km1tGdL4lXgEPdBv6nFobfpFjFk.roa (raw, json)
Hash identifier:          OgyPdQ2JmtZTeAho2o4vNpOUosNoilrHXTsaWAcr0YQ=
Subject key identifier:   92:6D:6D:19:D2:F8:95:78:04:3D:D0:6F:EA:71:68:6D:FA:45:8C:59
Certificate issuer:       /CN=e927fdc63d310d3d231b4a7553ae4e4158025e9f
Certificate serial:       01843E4941D43051BC8410458C53A4AFD54B
Authority key identifier: E9:27:FD:C6:3D:31:0D:3D:23:1B:4A:75:53:AE:4E:41:58:02:5E:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Sf9xj0xDT0jG0p1U65OQVgCXp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/km1tGdL4lXgEPdBv6nFobfpFjFk.roa
Signing time:             Thu 03 Nov 2022 16:18:19 +0000
ROA not before:           Thu 03 Nov 2022 16:18:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59745
IP address blocks:        195.20.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3e:49:41:d4:30:51:bc:84:10:45:8c:53:a4:af:d5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e927fdc63d310d3d231b4a7553ae4e4158025e9f
        Validity
            Not Before: Nov  3 16:18:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=926d6d19d2f89578043dd06fea71686dfa458c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:75:17:ff:23:31:3f:7f:ab:85:83:53:f2:
                    f8:51:9c:dd:bb:b7:c0:75:5f:d4:73:16:3e:ca:f7:
                    3f:12:87:17:e8:33:f7:43:07:fb:0d:08:38:75:6e:
                    91:76:c8:3f:68:12:ae:74:2b:8c:c1:1b:33:b1:93:
                    1b:1e:c4:a2:ff:90:40:af:16:69:11:56:b5:44:b7:
                    f6:ea:3e:d1:63:c6:13:48:9c:aa:da:78:4a:26:86:
                    eb:eb:f2:88:95:4c:fc:13:11:1a:b3:d8:f1:6e:f1:
                    c0:de:c9:6d:63:a2:6f:3c:99:5f:6a:0d:90:80:8e:
                    44:f6:9e:45:a4:02:ec:43:bc:96:0f:2d:cb:95:3c:
                    35:4a:b7:42:f9:d5:b8:6f:5e:e3:11:4a:67:ca:49:
                    bf:a2:de:2d:9a:8a:b9:d2:f5:e0:47:1d:ea:2a:1a:
                    4a:ed:c4:3e:fe:89:2d:4b:f8:ab:70:2c:66:b5:a3:
                    c8:54:63:15:96:5a:05:74:a1:7f:dc:ca:1d:b8:70:
                    b5:8a:44:d2:bf:9c:cf:30:13:92:6e:ce:18:8c:11:
                    94:f6:4f:5b:26:69:2d:fd:07:49:04:55:62:11:54:
                    82:4d:39:f2:e8:8a:65:9b:81:d3:de:41:39:61:b9:
                    89:95:e7:5c:3a:3e:3d:e3:39:f2:e6:1b:c2:eb:19:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:6D:19:D2:F8:95:78:04:3D:D0:6F:EA:71:68:6D:FA:45:8C:59
            X509v3 Authority Key Identifier:
                keyid:E9:27:FD:C6:3D:31:0D:3D:23:1B:4A:75:53:AE:4E:41:58:02:5E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf9xj0xDT0jG0p1U65OQVgCXp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/km1tGdL4lXgEPdBv6nFobfpFjFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a11ef-764f-4283-81ff-05acfacac844/1/6Sf9xj0xDT0jG0p1U65OQVgCXp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:4f:0f:1c:46:ba:87:5a:42:ed:d6:e1:34:f2:35:18:13:
         28:95:b1:33:6e:ff:80:fe:90:f4:c3:e6:12:7e:14:70:fc:5a:
         44:09:bf:b3:8f:81:be:3c:05:7e:8e:7c:cc:8d:74:8c:61:8d:
         29:7c:c5:82:f9:60:52:d2:63:8b:78:fc:6a:de:1e:21:f4:66:
         fd:9f:0b:3b:a7:c0:68:ad:be:36:d0:a6:01:0c:ec:75:64:37:
         e8:d5:66:c9:99:40:36:33:1d:2a:15:33:4b:cc:a8:8c:af:b3:
         3d:54:6c:f2:7e:f6:6f:03:bb:d4:c6:84:18:14:53:be:5b:98:
         66:51:6c:44:c0:fc:a0:60:6f:1d:cd:d0:f3:5f:39:23:17:5b:
         80:c1:94:af:90:e3:b5:9c:da:26:c4:0c:32:61:64:f2:43:42:
         d9:88:55:12:73:70:99:c5:e9:a9:af:4d:48:fd:b3:2a:f4:8a:
         0e:e1:46:9b:9e:35:90:67:a1:de:70:c4:a0:a9:de:a9:7a:ba:
         60:7a:c7:d6:ea:47:9b:bb:8f:d9:5a:5a:12:4f:8f:c7:e2:52:
         bc:d6:18:48:00:1d:2f:66:05:89:4b:01:79:7a:d4:23:6f:a4:
         3e:eb:b9:74:1b:74:36:7b:58:78:8f:eb:ff:0e:67:aa:df:e0:
         a8:d8:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----