Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/jPxTXPoAnePnbzfG3aqVNRfiunk.roa
File:                     jPxTXPoAnePnbzfG3aqVNRfiunk.roa (raw, json)
Hash identifier:          a4uKsJjxb6ytxXWGltZPZrOE437LubWK/gEu7AOsqmM=
Subject key identifier:   8C:FC:53:5C:FA:00:9D:E3:E7:6F:37:C6:DD:AA:95:35:17:E2:BA:79
Certificate issuer:       /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial:       17B79A23
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/jPxTXPoAnePnbzfG3aqVNRfiunk.roa
Signing time:             Sat 01 Jan 2022 14:01:16 +0000
ROA not before:           Sat 01 Jan 2022 14:01:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58027
IP address blocks:        192.94.233.0/24 maxlen: 24
                          2001:67c:1b00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397908515 (0x17b79a23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
        Validity
            Not Before: Jan  1 14:01:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8cfc535cfa009de3e76f37c6ddaa953517e2ba79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:95:93:6e:b4:77:77:83:1c:80:f9:99:4d:
                    97:48:4b:10:a6:44:7b:b3:2c:f2:61:c7:76:62:9b:
                    d8:6f:59:5a:94:37:f4:55:a0:31:08:60:b2:b7:45:
                    ee:83:b4:9d:9d:f4:27:32:e1:ee:55:a5:d9:d8:06:
                    90:7f:82:52:ae:d5:ac:c1:2e:06:15:e1:97:0a:e5:
                    f2:6d:c2:f8:d5:45:72:15:8f:79:bc:9c:ea:02:14:
                    8c:4e:72:5a:18:0e:c6:93:fb:ec:74:ad:32:08:52:
                    76:98:74:bf:c9:fd:32:c7:b5:c6:79:45:6b:29:9b:
                    74:76:8c:3b:87:7c:65:a6:97:89:0c:d5:3b:c5:df:
                    ca:c9:c8:7f:c2:de:3d:92:a9:41:8f:b1:e9:42:db:
                    82:fe:33:1c:30:eb:bd:23:02:e2:d7:9a:73:66:cb:
                    5a:3f:d6:60:1b:ed:b8:9b:dd:f3:f8:2e:7b:1e:6b:
                    18:cb:9f:73:9e:3f:73:d3:9a:39:3f:4d:55:de:8b:
                    e5:69:c5:e4:ae:9d:39:16:9d:4d:9e:75:0b:f7:f5:
                    59:df:a4:38:7b:5c:8e:47:22:7e:89:65:21:67:83:
                    ad:11:4d:11:74:81:73:ad:e1:a2:59:b9:df:36:ba:
                    cf:6d:2e:54:e6:16:0f:ab:41:0a:ac:ec:c6:ce:54:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:53:5C:FA:00:9D:E3:E7:6F:37:C6:DD:AA:95:35:17:E2:BA:79
            X509v3 Authority Key Identifier:
                keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/jPxTXPoAnePnbzfG3aqVNRfiunk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.233.0/24
                IPv6:
                  2001:67c:1b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:a3:3d:90:83:c5:7c:87:be:73:41:cc:82:88:0f:ef:ad:
         c5:53:5c:b9:76:78:54:8e:53:1b:62:e4:99:ca:36:c2:d0:32:
         f1:fa:39:cd:1d:94:56:09:27:8d:cf:db:25:86:37:4f:d2:97:
         ea:01:91:cc:22:d3:07:98:f7:74:07:03:ac:d0:4d:94:b8:7d:
         1a:03:00:70:54:ee:82:ff:17:d3:e4:28:fd:56:5e:65:5f:27:
         b6:dc:b9:db:39:ec:9e:9d:c2:ea:55:81:9b:bf:82:ba:fe:e4:
         dd:61:8b:91:39:76:e6:86:68:af:2d:67:5a:0e:e7:10:85:64:
         02:35:50:21:ac:61:c8:8a:76:9c:e0:66:09:f5:49:7a:bb:24:
         ce:e7:03:12:2a:49:e3:9a:14:22:31:a6:19:7d:93:b9:48:14:
         e2:da:99:75:ff:7d:86:5f:ca:20:6e:9f:94:90:ec:a7:7f:58:
         5f:00:d3:1a:20:87:cc:e5:1f:89:0c:23:cf:1d:ba:d2:84:1e:
         03:53:fc:3d:85:c0:58:98:f2:2e:8a:a0:8f:45:66:38:09:ff:
         67:57:84:fe:02:80:78:ba:69:4a:a3:57:f0:2d:fc:a8:9d:4f:
         7e:2a:c5:e8:c2:99:a6:4a:df:d9:88:1c:07:30:de:6f:d5:ff:
         28:eb:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----