Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/rBsH3rSR0mxx5XMBd0E6z0uYyHI.roa
File:                     rBsH3rSR0mxx5XMBd0E6z0uYyHI.roa (raw, json)
Hash identifier:          GxfCfc5Dyj5PwIK/sqjtEUoElwCv/mZOhNrnB4TuXBU=
Subject key identifier:   AC:1B:07:DE:B4:91:D2:6C:71:E5:73:01:77:41:3A:CF:4B:98:C8:72
Certificate issuer:       /CN=23f87aa18dda6a5d48af80390b2827808cfef285
Certificate serial:       1BB616
Authority key identifier: 23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/rBsH3rSR0mxx5XMBd0E6z0uYyHI.roa
Signing time:             Fri 18 Feb 2022 08:18:33 +0000
ROA not before:           Fri 18 Feb 2022 08:18:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210546
IP address blocks:        31.24.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816086 (0x1bb616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f87aa18dda6a5d48af80390b2827808cfef285
        Validity
            Not Before: Feb 18 08:18:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ac1b07deb491d26c71e5730177413acf4b98c872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:cd:c3:c9:a4:7a:2d:c9:31:0c:61:2b:c7:
                    a2:de:7e:ab:78:53:73:d7:98:fb:d2:f3:f0:74:a0:
                    bb:92:d4:b7:b6:71:47:61:06:89:54:ce:04:e9:62:
                    9e:6f:7f:a9:d6:1d:06:b8:fe:36:8c:0d:7c:c1:e1:
                    02:06:b4:34:5c:75:97:8a:61:b8:71:fe:b7:04:99:
                    dc:32:26:5b:c8:1c:c7:cb:e2:a5:4a:91:70:c3:3b:
                    68:de:68:99:04:a5:d5:da:d5:97:4f:7d:6c:7f:53:
                    f7:63:66:b4:a6:b2:07:e1:4d:92:75:50:80:75:2a:
                    42:e8:81:9d:1c:e8:98:70:1d:e2:b8:e3:7b:08:c9:
                    83:a2:ff:64:b4:8d:91:f8:04:53:95:e0:d7:e1:11:
                    b6:62:5e:fb:cf:35:28:4b:9c:5f:77:20:5e:f5:14:
                    22:99:61:62:26:40:6e:e4:e9:ce:f8:15:da:55:c3:
                    4e:d3:e8:f7:79:4c:84:09:d6:7c:02:a9:50:ab:9d:
                    08:e1:02:b8:10:93:de:c4:ec:c0:e0:e9:00:3d:a6:
                    dc:f6:f7:26:75:10:9c:66:2e:08:f6:75:ab:11:dd:
                    e4:5d:a7:33:04:c4:9e:5b:f6:9e:ed:b7:76:57:20:
                    03:6f:2d:88:9e:0f:97:8e:d7:17:02:67:63:b1:83:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1B:07:DE:B4:91:D2:6C:71:E5:73:01:77:41:3A:CF:4B:98:C8:72
            X509v3 Authority Key Identifier:
                keyid:23:F8:7A:A1:8D:DA:6A:5D:48:AF:80:39:0B:28:27:80:8C:FE:F2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_h6oY3aal1Ir4A5CygngIz-8oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/rBsH3rSR0mxx5XMBd0E6z0uYyHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c185f6-6274-49da-b2ef-6000cb2d5990/1/I_h6oY3aal1Ir4A5CygngIz-8oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:3f:2a:a9:11:d8:64:2b:a3:3d:d8:68:fc:09:49:2a:4d:
         8a:a1:9d:27:9a:0b:f5:b4:ba:5a:4e:eb:88:a2:91:04:d5:63:
         a1:e3:4a:22:51:4d:ee:d1:98:e5:f7:ab:58:4b:50:3b:6d:26:
         9a:5a:98:fa:16:45:d7:95:6c:d5:d2:4d:27:82:80:73:3a:c3:
         7d:8f:78:23:7c:cd:db:09:ed:b4:cb:7f:99:d3:75:27:a5:4d:
         a0:aa:1c:7d:a6:88:f9:7a:f4:65:59:16:0d:30:bc:f0:57:cd:
         79:36:fa:3a:01:2c:dc:43:54:2f:a9:db:62:3c:88:40:6d:66:
         8d:d3:39:cd:7c:90:96:17:2a:27:59:fe:06:8f:4e:23:7f:d7:
         4a:37:d9:07:b3:12:6f:f6:78:fd:9a:f4:e6:8e:2d:5b:a9:78:
         5f:3a:69:60:ec:ba:7d:2a:83:02:0d:67:38:1f:db:88:3b:12:
         4f:d0:84:5d:eb:2a:08:ba:8f:07:ce:33:5f:41:52:3b:fc:68:
         af:66:c8:0d:21:4e:b0:5c:7b:43:05:6d:8f:3a:da:13:f4:b9:
         04:c5:b9:b4:56:4c:99:74:e3:9c:9a:41:aa:55:9e:c2:a5:ae:
         87:bb:b3:b3:c0:76:ee:cc:8f:3e:64:5a:36:a3:b3:a3:48:d7:
         8b:9e:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----