Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ScJe_nM3NA-UfvN73O7XEalh_Kg.roa
File:                     ScJe_nM3NA-UfvN73O7XEalh_Kg.roa (raw, json)
Hash identifier:          peXoNt4l8DuimHtKu9EbxwOwfd1kUCBpnjtUR0ybB7g=
Subject key identifier:   49:C2:5E:FE:73:37:34:0F:94:7E:F3:7B:DC:EE:D7:11:A9:61:FC:A8
Certificate issuer:       /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial:       0406F9BA
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ScJe_nM3NA-UfvN73O7XEalh_Kg.roa
Signing time:             Sat 01 Jan 2022 13:56:34 +0000
ROA not before:           Sat 01 Jan 2022 13:56:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50673
IP address blocks:        193.219.97.0/24 maxlen: 24
                          2a0d:f300::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67566010 (0x406f9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
        Validity
            Not Before: Jan  1 13:56:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49c25efe7337340f947ef37bdceed711a961fca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:1a:dd:20:31:f6:9c:09:a2:25:2e:52:e3:
                    75:bd:dc:b1:45:fc:08:31:55:8d:2b:1d:f4:a8:8c:
                    b6:aa:57:21:68:e9:38:e6:18:ee:a0:10:9c:c4:47:
                    34:67:8b:26:25:c9:7a:dd:2f:3a:94:5b:5f:c7:ad:
                    65:e3:05:0b:59:44:fb:98:7b:19:dd:45:e8:d4:ff:
                    33:65:14:f6:e6:9b:0f:62:d8:f8:2d:37:cf:64:04:
                    14:1b:59:76:fe:30:5b:ee:d8:b1:26:77:9f:9e:d3:
                    44:c2:81:db:47:5a:ae:a4:a8:f7:cd:90:20:8d:22:
                    1d:29:cc:ef:fe:bb:72:fa:3d:10:9a:72:53:f7:52:
                    37:b4:50:1c:33:e0:09:d0:54:18:da:87:68:cc:ee:
                    88:dd:c6:52:13:ad:df:7a:81:ba:45:28:e5:46:a3:
                    95:ad:a0:4e:50:83:dc:4e:f1:0e:73:5b:80:7c:e8:
                    ed:b4:d5:d6:91:d7:3d:ca:e7:7e:91:31:1d:11:2d:
                    5a:66:a7:45:de:ca:7e:da:45:97:06:7e:1a:7a:b7:
                    ce:93:f9:ee:e4:b9:97:38:7b:e7:02:10:83:fd:f0:
                    0f:c7:c3:8a:73:b5:67:6c:e6:d4:27:f8:66:28:cc:
                    e9:96:3e:f9:42:dc:52:71:f6:b3:d0:30:43:42:ee:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C2:5E:FE:73:37:34:0F:94:7E:F3:7B:DC:EE:D7:11:A9:61:FC:A8
            X509v3 Authority Key Identifier:
                keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ScJe_nM3NA-UfvN73O7XEalh_Kg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.97.0/24
                IPv6:
                  2a0d:f300::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:65:0b:63:2a:a0:1f:ff:6d:fb:79:fd:b3:e7:0b:d9:65:ee:
         57:bc:56:d9:a7:ee:37:ec:8d:9c:c2:fa:b3:52:0f:e9:d7:12:
         82:d9:ce:5e:9f:04:2d:94:df:35:b9:70:60:71:30:d7:a0:0c:
         43:bf:80:5f:c1:51:39:ce:77:14:44:8c:d7:0a:42:54:51:de:
         25:10:65:5e:35:16:ab:03:4c:19:94:f5:6e:1d:8f:28:00:53:
         88:d0:47:38:57:30:7c:44:8f:3c:67:eb:e6:72:07:83:15:b2:
         5e:65:76:f4:87:f4:31:3c:ad:3c:9e:e0:47:0d:7c:c4:4d:00:
         c8:92:d5:c1:c9:11:e4:ce:a7:04:82:a3:56:08:a1:73:d5:a7:
         b4:2d:5c:78:d6:74:33:7f:ff:ee:73:a5:50:1f:e8:10:c1:e8:
         be:9a:04:ef:3c:24:5d:5b:fe:b8:2e:6d:ff:21:a9:b3:b2:8b:
         0e:9d:06:95:ff:3e:51:02:00:7c:bf:30:e3:75:12:f1:15:77:
         50:27:f6:86:bd:49:a9:33:66:51:3d:73:71:01:59:25:6e:86:
         10:8c:26:f6:33:c0:81:4a:5d:80:01:43:d2:6f:fb:94:29:33:
         92:ea:2a:47:47:ca:51:43:f8:4f:3e:0e:b2:98:80:6f:2d:f3:
         aa:b8:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----