Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/TJuhu2xu8aLyK3VeaqxxR13lq-w.roa
File:                     TJuhu2xu8aLyK3VeaqxxR13lq-w.roa (raw, json)
Hash identifier:          lWqDEY57yPqrox1Y350+n5/28c+2sK6Tnxj/Jv5T7vw=
Subject key identifier:   4C:9B:A1:BB:6C:6E:F1:A2:F2:2B:75:5E:6A:AC:71:47:5D:E5:AB:EC
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       37F421E6
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/TJuhu2xu8aLyK3VeaqxxR13lq-w.roa
Signing time:             Sat 01 Jan 2022 06:52:52 +0000
ROA not before:           Sat 01 Jan 2022 06:52:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57187
IP address blocks:        94.207.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938746342 (0x37f421e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Jan  1 06:52:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c9ba1bb6c6ef1a2f22b755e6aac71475de5abec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:fb:f1:5f:10:fb:7d:41:29:db:71:72:af:
                    7c:6d:6b:5a:00:c6:0b:8e:95:08:8e:d2:2e:9f:f7:
                    ff:28:3f:32:f3:b6:d8:0f:2e:16:ba:8f:09:d2:f6:
                    7e:6c:e7:72:9f:27:e3:fd:23:bc:fd:35:af:3d:91:
                    b5:57:61:78:15:28:13:05:8c:0e:13:b3:06:3b:67:
                    96:ec:16:9e:47:c6:ff:34:28:30:0c:0c:2f:d3:35:
                    f4:dc:01:4f:56:3d:b0:ab:6c:8d:6e:e2:2c:66:55:
                    c2:70:a2:dc:d5:2a:1f:63:d0:55:53:2f:27:6f:90:
                    25:a1:30:7e:ca:7b:df:dc:28:6e:e8:0f:7b:2b:ec:
                    70:0b:80:4e:3a:0e:c8:bb:03:91:81:4b:e4:b8:67:
                    f3:87:ea:d7:ba:e0:73:3b:3b:cb:03:ca:f3:72:bf:
                    e5:33:cf:fb:78:4f:68:12:8c:58:0d:cb:8b:4a:e0:
                    64:8c:54:8d:8a:af:6e:a7:6c:8b:c1:2b:13:12:db:
                    93:65:ce:df:d2:4e:9c:82:71:85:41:00:8e:96:81:
                    2b:1f:73:c5:37:39:dc:4b:29:e9:6a:40:ad:ef:2c:
                    19:af:ae:a1:fc:9e:a2:e1:5d:9b:ad:9a:72:46:d4:
                    63:0d:37:9f:b4:fe:b7:92:f3:8c:01:df:a6:2f:41:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:A1:BB:6C:6E:F1:A2:F2:2B:75:5E:6A:AC:71:47:5D:E5:AB:EC
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/TJuhu2xu8aLyK3VeaqxxR13lq-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.207.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:77:8d:1b:64:03:b6:f5:82:bf:04:5a:b0:94:0c:47:af:73:
         ab:a4:c1:d7:18:26:a7:a2:f9:47:12:bc:98:0c:24:e7:71:7e:
         8c:25:0f:d5:29:d9:88:d9:2c:e9:91:5c:95:d4:5e:a2:17:6e:
         46:d9:1d:8d:84:80:bd:32:99:1c:b0:35:b6:df:52:84:57:5c:
         49:59:05:07:f0:10:0d:99:30:14:fe:cf:a4:6c:7b:ee:c8:f8:
         00:a2:9c:6e:c8:62:f8:ab:0d:6e:d1:d1:87:88:64:d4:5b:81:
         dc:4a:3f:5d:33:17:71:73:2b:51:fa:1e:88:31:6c:39:b8:22:
         59:98:03:dc:ee:5b:da:c3:25:98:fe:81:c0:cc:ba:8c:5c:a2:
         13:1f:7b:95:d4:99:d7:50:24:e5:87:37:5e:6c:31:64:e2:f6:
         20:e5:50:36:3e:43:b2:47:89:4a:81:0b:7c:eb:02:f9:0d:b2:
         a6:35:1f:1a:98:9e:e5:c1:f1:4e:63:5b:de:e6:eb:c3:25:39:
         fa:84:83:a9:70:63:91:e2:db:66:ce:bc:17:e8:03:11:af:50:
         c3:33:b5:c4:9f:76:57:5e:0a:9b:19:9c:8b:b7:2a:3f:59:4f:
         e0:a6:44:4a:80:46:26:7a:78:61:e1:5d:a2:6c:d1:60:68:a3:
         a2:5e:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----