Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/MfQbYGBMSdCpgWxclZN4aJUCibs.roa
File:                     MfQbYGBMSdCpgWxclZN4aJUCibs.roa (raw, json)
Hash identifier:          lYwlvmgvtxph1ncS8hPpVaJ5GHXc/jgWyHVeDmFLDFc=
Subject key identifier:   31:F4:1B:60:60:4C:49:D0:A9:81:6C:5C:95:93:78:68:95:02:89:BB
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       20A7CBC9
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/MfQbYGBMSdCpgWxclZN4aJUCibs.roa
Signing time:             Tue 11 Jan 2022 09:50:26 +0000
ROA not before:           Tue 11 Jan 2022 09:50:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1881
IP address blocks:        143.118.0.0/16 maxlen: 16
                          2001:1400::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547867593 (0x20a7cbc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Jan 11 09:50:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31f41b60604c49d0a9816c5c95937868950289bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:dc:df:85:b6:f2:e7:0a:4b:9f:8e:77:25:
                    21:94:82:b8:f3:9e:ab:d4:90:73:e9:0c:d9:33:e2:
                    44:f4:b4:03:51:d0:c7:f4:df:15:10:5c:f8:2a:df:
                    a5:8e:95:e5:bd:b5:64:d3:2d:f4:e2:0f:13:e3:65:
                    06:30:eb:4a:19:e6:01:5d:91:9c:87:2b:94:83:a1:
                    21:d1:51:1e:d8:8c:0f:23:38:a9:16:4e:a3:34:b2:
                    ec:c4:8a:91:72:f6:08:34:72:17:aa:17:09:13:dd:
                    96:55:d4:d3:7c:40:6d:30:79:5c:ae:a2:71:ab:d2:
                    bc:79:c0:e1:e5:f4:1d:40:0f:84:db:5c:97:5e:95:
                    ec:bf:00:89:5a:02:07:6e:dd:df:ab:68:b9:6e:b5:
                    17:07:51:54:a1:28:47:5b:a4:2f:69:85:56:e4:a6:
                    7d:00:28:c9:18:51:fa:54:60:af:d5:9b:bf:35:7d:
                    8c:be:f1:0a:62:d1:e9:05:f1:73:df:fd:65:61:62:
                    4c:ff:0a:bd:b0:f1:c2:fd:4e:54:3c:4a:8c:2e:df:
                    e8:28:09:49:cf:9a:49:93:61:4c:ef:e2:47:5f:de:
                    63:e3:0a:4d:34:54:84:03:29:49:42:0a:17:ab:6d:
                    e1:d9:6f:b3:28:b7:38:f7:62:bf:54:13:6e:59:b7:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:1B:60:60:4C:49:D0:A9:81:6C:5C:95:93:78:68:95:02:89:BB
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/MfQbYGBMSdCpgWxclZN4aJUCibs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.118.0.0/16
                IPv6:
                  2001:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:fe:dd:fb:b1:68:cc:d6:f9:66:07:d4:85:20:00:ab:84:
         f5:6c:55:55:ba:52:a6:df:6a:b5:5b:99:b1:9c:8a:45:1b:5a:
         c1:d7:3e:ab:48:9b:2d:25:67:07:87:34:fd:e8:1e:96:78:d4:
         d3:18:14:04:b0:d0:59:f8:ea:03:e5:ab:10:d7:97:42:15:7a:
         23:1c:02:37:96:f6:d7:e9:d2:75:9a:fd:bc:df:07:87:90:60:
         ef:99:46:1d:6f:69:9c:0d:61:a9:68:f0:46:44:bd:27:09:43:
         d4:54:e6:96:d6:7f:61:2a:8b:94:57:a6:63:20:78:21:9e:53:
         43:9e:74:d4:4f:4a:09:00:83:bc:4f:98:b4:ff:1f:23:a6:41:
         cc:8d:a5:58:cf:9c:70:ef:9b:1c:92:3b:8c:b6:ca:e4:e1:18:
         d8:21:6d:14:c0:2b:5c:ec:3d:f9:26:9c:f3:82:43:ee:6a:5e:
         91:ce:40:b3:6c:61:6b:93:cb:0f:f8:2b:26:58:46:7c:42:70:
         ef:ce:7f:9a:e8:98:35:68:bc:7d:3e:64:65:3b:b0:84:5a:a1:
         1a:dc:bb:8d:f4:e2:20:e3:33:e1:a8:f9:75:4f:e7:54:bd:e8:
         0a:64:31:50:04:85:2b:75:84:88:89:5e:bc:02:1f:91:3b:b4:
         5e:0b:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----