Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/DRD-Zq6TIpM2QSqrUKoW5BrQ4gA.roa
File:                     DRD-Zq6TIpM2QSqrUKoW5BrQ4gA.roa (raw, json)
Hash identifier:          WlHKCwfuCcTpgf5ibJbgWiyvKC0oUlO1i+VqiB+8LGo=
Subject key identifier:   0D:10:FE:66:AE:93:22:93:36:41:2A:AB:50:AA:16:E4:1A:D0:E2:00
Certificate issuer:       /CN=bde74850b31f3ac2198bf85ffb5c50bc703cc8a6
Certificate serial:       95693B
Authority key identifier: BD:E7:48:50:B3:1F:3A:C2:19:8B:F8:5F:FB:5C:50:BC:70:3C:C8:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vedIULMfOsIZi_hf-1xQvHA8yKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/DRD-Zq6TIpM2QSqrUKoW5BrQ4gA.roa
Signing time:             Sat 01 Jan 2022 02:58:12 +0000
ROA not before:           Sat 01 Jan 2022 02:58:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        176.126.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9791803 (0x95693b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde74850b31f3ac2198bf85ffb5c50bc703cc8a6
        Validity
            Not Before: Jan  1 02:58:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d10fe66ae93229336412aab50aa16e41ad0e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:cf:42:90:27:49:8f:26:33:3a:c8:e1:f7:
                    7d:77:37:13:49:c9:18:ad:7b:89:e9:18:58:f3:9e:
                    25:4e:c8:1c:07:e2:bb:f9:42:1d:f9:8f:48:bf:7c:
                    da:d1:44:7c:50:2b:8e:e4:d4:03:ab:d3:78:6d:71:
                    05:85:5d:3e:ee:8c:b4:ad:82:6e:82:4c:8a:e6:76:
                    7e:88:db:a2:ec:da:65:8f:7d:9c:a0:85:f1:04:9e:
                    fd:50:55:46:58:cd:07:fd:c3:6d:47:27:80:23:73:
                    ed:ca:9f:51:cc:a0:7d:7e:30:3d:c2:7f:02:28:8e:
                    13:fd:38:5f:d2:84:60:37:d8:ff:8b:38:09:3e:ec:
                    73:a1:9d:ad:f1:3b:61:e5:2a:0b:c8:a6:40:0b:05:
                    97:18:7d:f3:f4:30:ee:7e:21:b7:b0:75:e9:56:b0:
                    91:de:ba:b8:4c:49:49:64:39:77:56:9c:6a:b2:be:
                    4f:70:01:4b:13:4c:e0:82:28:70:14:09:fd:12:13:
                    03:93:19:0f:6a:61:43:8d:cd:f7:ec:28:d0:53:f8:
                    c9:55:2c:67:bd:5c:df:2f:bf:6c:5c:ee:ea:5f:b8:
                    1d:7e:23:94:99:0e:6a:bc:bb:2a:f3:e4:2b:26:ab:
                    3f:fe:11:a9:75:ff:d0:02:9c:93:85:73:62:af:b3:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:FE:66:AE:93:22:93:36:41:2A:AB:50:AA:16:E4:1A:D0:E2:00
            X509v3 Authority Key Identifier:
                keyid:BD:E7:48:50:B3:1F:3A:C2:19:8B:F8:5F:FB:5C:50:BC:70:3C:C8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedIULMfOsIZi_hf-1xQvHA8yKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/DRD-Zq6TIpM2QSqrUKoW5BrQ4gA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5a7c57-2aef-4caa-94c5-f56865c56ba9/1/vedIULMfOsIZi_hf-1xQvHA8yKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:34:70:ba:cc:a6:e9:cf:fd:cb:b0:e0:a1:ab:e1:29:c4:e3:
         b6:37:1f:f9:97:4f:b0:3c:b2:d9:89:ef:e5:a3:b1:9c:ed:19:
         e3:5e:9b:2b:3e:da:bc:a1:3a:3e:22:0d:b1:39:4b:05:4d:c3:
         07:a1:47:f9:d7:52:d6:db:e0:d2:be:7c:95:9a:cd:ce:6f:a8:
         d1:10:8b:c7:57:a1:53:38:33:e3:56:a0:e5:1d:17:ce:1b:85:
         ec:20:c7:0f:a6:a5:91:e2:fc:91:df:d8:7d:e6:06:94:5b:5d:
         d5:d8:07:0b:bd:28:e7:7a:05:0d:3e:69:8c:48:e5:6c:82:0d:
         d7:08:25:33:de:f5:1a:38:9d:cb:9e:27:3b:1f:b7:b9:20:aa:
         8e:75:cb:01:5e:e5:97:28:51:f0:ed:e2:71:12:64:10:fe:8e:
         cd:b6:2e:2e:9e:de:cf:29:c7:c4:2d:e8:b8:d0:17:00:19:89:
         84:bf:ad:38:ba:0e:f8:3d:71:61:9e:29:71:a8:84:c0:4f:46:
         cb:23:2f:eb:c6:57:66:ef:a0:6a:40:03:54:8f:2a:f9:b5:fe:
         27:5f:97:a0:e4:f3:ab:41:1f:cf:95:f7:73:01:c0:7e:ff:e9:
         81:2e:e5:55:13:e0:ff:90:30:d8:fc:fd:35:4b:13:3d:fa:ab:
         18:1d:3e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----