Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/7hTCk6I75_paDXISQtaJSZk_yuE.roa
File:                     7hTCk6I75_paDXISQtaJSZk_yuE.roa (raw, json)
Hash identifier:          n2EyP13Pn+ZQmNFFVsGqhEK7YsRZFu8rrRyGk7J2rls=
Subject key identifier:   EE:14:C2:93:A2:3B:E7:FA:5A:0D:72:12:42:D6:89:49:99:3F:CA:E1
Certificate issuer:       /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial:       0183196B46802435087FC5BC5BF597ABDD7B
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/7hTCk6I75_paDXISQtaJSZk_yuE.roa
Signing time:             Wed 07 Sep 2022 19:26:44 +0000
ROA not before:           Wed 07 Sep 2022 19:26:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        93.185.144.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:19:6b:46:80:24:35:08:7f:c5:bc:5b:f5:97:ab:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
        Validity
            Not Before: Sep  7 19:26:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee14c293a23be7fa5a0d721242d68949993fcae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:47:0d:31:2a:6e:52:f0:fd:b9:47:b0:34:
                    64:a3:d0:eb:a4:18:fa:24:ed:2d:f6:68:01:1e:59:
                    06:44:86:9e:af:bc:2c:63:3e:09:f0:a3:b3:d3:e4:
                    52:0d:e0:d5:e6:fb:96:bf:6f:7c:78:08:8b:9f:de:
                    ca:81:68:c8:8f:0a:50:70:d2:77:b6:9f:30:68:1b:
                    5f:55:3d:ec:2d:0c:22:3c:8f:33:c6:92:98:ea:c9:
                    10:ab:d4:90:80:ae:22:f1:fe:62:f6:a4:8b:fe:3f:
                    2c:80:21:40:e5:86:0e:81:1d:31:11:b4:fc:2d:44:
                    c3:f9:f3:6a:68:58:6a:b4:b4:fa:6b:f9:ba:41:82:
                    98:ae:88:4b:94:a4:4f:b2:7f:63:bc:66:7c:eb:8a:
                    46:e2:ce:c1:40:f0:6f:2c:f2:c1:11:97:7f:a5:d9:
                    40:95:08:a4:72:a8:0a:2d:1a:47:b9:dd:07:69:6a:
                    34:13:57:a9:5c:44:9f:e8:c2:43:ac:52:8f:32:d2:
                    40:d7:e3:6b:3a:cd:3e:db:81:7d:51:4c:34:93:64:
                    ba:38:30:45:1c:cd:d4:49:3d:d6:21:bc:16:45:2f:
                    58:6b:33:46:52:b1:5c:35:04:2a:29:09:f1:19:ef:
                    a0:28:dd:9a:72:92:5a:29:e5:e3:60:f9:c2:27:73:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:14:C2:93:A2:3B:E7:FA:5A:0D:72:12:42:D6:89:49:99:3F:CA:E1
            X509v3 Authority Key Identifier:
                keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/7hTCk6I75_paDXISQtaJSZk_yuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.185.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:fe:d4:76:f4:4b:62:47:a1:53:cb:5c:e1:92:e4:94:ca:ab:
         8c:1b:f6:e2:cd:ff:28:06:13:6e:4a:4a:b2:12:a8:58:2b:9a:
         e9:01:ef:54:43:a9:e0:17:6d:09:0a:4d:62:e0:44:c0:1b:3b:
         fb:a4:9d:c7:0a:d6:73:92:ef:64:66:92:fa:db:db:24:a3:37:
         3a:b8:26:c2:f1:fa:dc:01:22:0d:c0:36:b1:31:85:3e:67:d1:
         e9:1f:f1:84:5a:11:18:5e:7d:35:52:95:66:17:aa:1e:cc:b1:
         95:f5:37:11:88:f0:cc:e0:2a:a6:7c:11:9b:dd:e6:9c:e8:13:
         4c:c0:c5:00:92:d9:e7:37:f0:68:eb:46:5a:19:d9:e9:d4:e8:
         19:37:06:f4:b3:43:85:62:2f:22:24:39:93:1b:29:22:e7:0d:
         77:37:a6:e4:23:f7:3b:69:84:a6:86:35:1a:61:6e:95:08:3f:
         96:4d:86:3d:ae:af:d3:55:c1:b9:f4:9f:ad:f1:94:c3:68:9a:
         53:06:1a:b4:e6:67:65:13:2b:af:b9:9a:7e:d2:3b:26:94:09:
         e8:0c:01:56:c0:98:fa:80:7a:47:d4:d2:f8:c7:b4:70:23:cf:
         dc:3a:56:1f:31:af:f5:39:e5:cc:4f:d5:59:55:38:47:e1:95:
         51:e6:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----