Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/6YAZXTcyKvIxdNhDK89t3hE-SVM.roa
File:                     6YAZXTcyKvIxdNhDK89t3hE-SVM.roa (raw, json)
Hash identifier:          PNi86NT23mK+jM6GpYTxsfF3fWr88Uc5ig0CDYiMQe0=
Subject key identifier:   E9:80:19:5D:37:32:2A:F2:31:74:D8:43:2B:CF:6D:DE:11:3E:49:53
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       0182F89046D429F5B3E13F669EC1135E363A
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/6YAZXTcyKvIxdNhDK89t3hE-SVM.roa
Signing time:             Thu 01 Sep 2022 10:19:40 +0000
ROA not before:           Thu 01 Sep 2022 10:19:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39144
IP address blocks:        193.178.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f8:90:46:d4:29:f5:b3:e1:3f:66:9e:c1:13:5e:36:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Sep  1 10:19:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e980195d37322af23174d8432bcf6dde113e4953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:90:a3:80:8a:b8:e7:ff:4f:75:a3:fa:86:
                    38:74:a4:05:57:63:59:bf:4b:b3:8e:b0:e1:f1:86:
                    52:84:de:ed:93:1b:68:9b:3c:8e:7c:72:ab:9d:45:
                    37:75:30:8f:f3:a5:9b:4f:86:f5:60:d0:1b:f2:d7:
                    1d:d7:97:71:f6:e2:02:ee:01:8c:15:4f:6e:ce:7a:
                    16:6d:ed:bd:e1:81:6f:1d:4c:54:7d:4f:19:c6:1c:
                    cf:db:fc:69:26:a6:f1:44:d8:18:21:1a:14:64:6c:
                    d1:5a:ce:5d:db:02:eb:34:a5:51:5b:a7:bf:d4:b3:
                    f5:02:0d:d9:9e:4d:34:bd:39:97:ac:7a:8e:45:da:
                    f1:c1:e0:5a:85:6c:d4:56:bd:29:aa:9a:0b:c8:5a:
                    d6:e2:7e:df:8d:03:c3:91:db:dd:49:25:f3:fc:79:
                    d0:2e:cb:23:51:06:8b:fe:80:e1:51:97:40:0d:5c:
                    88:2c:58:47:37:2c:4f:d7:2b:e2:f6:f9:99:d3:ea:
                    34:8f:61:dc:33:23:11:94:66:42:f8:72:97:e3:0a:
                    85:e3:a6:f4:8a:80:2c:a1:5d:75:b5:0c:69:35:65:
                    ff:7e:2c:cf:1e:af:c2:a9:cb:b1:cd:50:2d:0c:f0:
                    0f:39:e3:ea:2a:7a:90:3b:0a:c2:32:83:46:29:88:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:19:5D:37:32:2A:F2:31:74:D8:43:2B:CF:6D:DE:11:3E:49:53
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/6YAZXTcyKvIxdNhDK89t3hE-SVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:76:5d:57:5b:4b:39:9d:84:53:7c:e4:a7:77:7f:d3:7d:91:
         ea:82:5b:77:df:47:cf:05:bd:47:31:14:6c:93:05:da:92:f6:
         2c:6e:5d:06:3c:9c:1c:a4:45:d2:95:d5:4e:79:69:0c:f3:95:
         9d:d6:79:af:4b:dd:91:99:4a:6e:5e:99:16:33:56:da:36:50:
         70:25:9d:0c:23:7a:52:12:86:5c:62:ea:f3:82:b3:6f:00:1a:
         ab:86:f2:3a:20:52:28:9f:74:88:c1:cf:36:47:79:73:41:d6:
         7e:28:a1:6c:18:1e:db:2a:da:4a:f5:2a:73:e1:4c:3c:44:a3:
         c6:6f:0f:7e:1e:41:7a:5e:b7:b1:83:08:94:9f:a1:f7:12:27:
         8b:fa:4e:11:7c:f6:53:31:7f:e6:1b:4e:d6:46:dc:69:e3:52:
         85:56:04:ff:23:06:3e:05:e7:4c:1a:9a:ef:58:1e:1c:85:78:
         42:c6:e0:f5:19:cd:88:e5:54:fb:b0:45:82:a1:9b:a3:0e:1e:
         97:d1:d2:20:25:2e:a7:f1:98:d5:a2:60:87:dc:c2:e3:54:f5:
         05:2c:78:e4:0f:43:ed:15:d7:00:87:20:56:34:dc:28:82:0e:
         b7:39:76:85:45:6c:88:20:08:53:2f:d7:57:ad:c7:43:fb:cf:
         d6:9f:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----