Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/k7MczvcwzJnIwGX4GenXqhZ6Py8.roa
File:                     k7MczvcwzJnIwGX4GenXqhZ6Py8.roa (raw, json)
Hash identifier:          rRwSSNRX32ndqRuBrOVGseIzJpT+b7xELrJvfrhvjB0=
Subject key identifier:   93:B3:1C:CE:F7:30:CC:99:C8:C0:65:F8:19:E9:D7:AA:16:7A:3F:2F
Certificate issuer:       /CN=b8b82200a1332e9995437f9c647ea24b416198af
Certificate serial:       99DEA9
Authority key identifier: B8:B8:22:00:A1:33:2E:99:95:43:7F:9C:64:7E:A2:4B:41:61:98:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/k7MczvcwzJnIwGX4GenXqhZ6Py8.roa
Signing time:             Sat 01 Jan 2022 07:56:55 +0000
ROA not before:           Sat 01 Jan 2022 07:56:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        91.242.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10084009 (0x99dea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b82200a1332e9995437f9c647ea24b416198af
        Validity
            Not Before: Jan  1 07:56:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93b31ccef730cc99c8c065f819e9d7aa167a3f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:24:ef:c9:cf:82:01:a7:0e:f4:06:6b:a8:
                    2c:cd:e8:95:9d:3b:a4:16:22:1a:55:b3:02:48:b7:
                    7d:87:3a:f4:14:d1:0f:8e:ff:9d:a2:4c:e0:00:43:
                    ee:0e:da:2e:25:ed:6d:07:70:10:55:fa:63:3a:78:
                    3a:a2:13:e4:78:7c:99:f2:a4:97:78:13:f1:9c:33:
                    c6:ef:e2:66:b7:be:b9:31:2a:d2:61:8e:8e:75:0d:
                    d7:6d:ad:ac:bb:97:31:13:35:bf:66:6d:73:57:ac:
                    dd:b1:99:94:2f:bc:b3:a1:42:a6:2a:4b:59:9d:ba:
                    f7:9a:ad:5a:01:95:29:c3:c4:3b:0d:95:39:fc:6c:
                    f6:fe:ab:b0:90:29:2b:cf:4b:b8:a9:e2:c7:d1:37:
                    b1:48:91:10:f2:ff:e7:86:9c:d6:4b:4a:4d:a9:7e:
                    1d:5e:c4:13:60:56:6d:26:f7:3a:cc:00:56:65:7f:
                    5c:1f:28:80:9e:3c:38:16:b3:54:18:ba:40:12:a8:
                    62:6d:6f:1e:f9:4a:ca:c5:a2:3a:99:6d:7e:33:5d:
                    b1:73:79:c0:80:a4:48:d1:a5:58:5a:42:4d:11:d2:
                    ef:90:62:8f:34:2d:65:0b:f2:d4:96:c4:a8:03:29:
                    03:ef:68:e6:6f:a9:3c:a4:48:9e:77:c4:79:f6:93:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B3:1C:CE:F7:30:CC:99:C8:C0:65:F8:19:E9:D7:AA:16:7A:3F:2F
            X509v3 Authority Key Identifier:
                keyid:B8:B8:22:00:A1:33:2E:99:95:43:7F:9C:64:7E:A2:4B:41:61:98:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/k7MczvcwzJnIwGX4GenXqhZ6Py8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bd0b55-86a4-497f-9eeb-661e1a56bc76/1/uLgiAKEzLpmVQ3-cZH6iS0FhmK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:98:63:97:64:13:f5:d7:f2:b6:80:b6:8a:74:c2:70:9b:53:
         68:e5:7d:9a:62:52:35:52:9c:6e:bb:da:ec:1a:dc:a8:19:53:
         6a:f2:0e:24:d6:3b:1b:11:d9:e5:92:05:9b:6b:b7:6f:a3:b5:
         17:08:70:37:d5:44:6a:a2:e7:98:36:b5:e5:91:fe:c7:a8:a3:
         2d:44:b1:37:a5:70:c6:31:db:5f:38:de:fb:57:ea:d8:b1:5f:
         11:d7:fd:e8:ac:13:18:ba:b1:6e:ea:16:56:c5:7f:69:77:ed:
         3a:9d:99:6c:5e:97:bf:f7:db:02:69:c2:e0:97:c7:c5:e4:c4:
         06:b0:76:cf:64:62:1f:2f:fa:28:4c:c5:26:1d:04:42:f3:f8:
         62:1a:94:2b:2c:d3:f2:c9:ec:98:09:6a:e0:18:47:9a:a7:09:
         b7:66:e9:d5:55:9a:a7:75:01:69:3b:8d:53:40:0c:60:ff:01:
         22:6f:8d:b8:d8:28:74:2b:f2:19:98:d3:90:a3:1b:6e:bc:ae:
         43:01:86:c8:cb:76:11:10:62:ff:7e:45:ad:1e:00:70:a1:8d:
         18:a2:2d:18:a0:93:51:c8:4b:8d:8d:d0:a2:64:c0:e6:5e:45:
         c2:64:fa:bc:64:b5:b0:31:37:a4:31:88:1d:e1:61:64:de:80:
         82:a9:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----