Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/dCIZNRTMxG-EMqHqD7rliPNiuCg.roa
File:                     dCIZNRTMxG-EMqHqD7rliPNiuCg.roa (raw, json)
Hash identifier:          JUVqWBnW6bS50GQiasJJuFRme8daM3Q3Zilqimq748A=
Subject key identifier:   74:22:19:35:14:CC:C4:6F:84:32:A1:EA:0F:BA:E5:88:F3:62:B8:28
Certificate issuer:       /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial:       05834B59
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/dCIZNRTMxG-EMqHqD7rliPNiuCg.roa
Signing time:             Sat 01 Jan 2022 10:58:07 +0000
ROA not before:           Sat 01 Jan 2022 10:58:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51305
IP address blocks:        128.127.93.0/24 maxlen: 24
                          2a00:10a0:b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92490585 (0x5834b59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
        Validity
            Not Before: Jan  1 10:58:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7422193514ccc46f8432a1ea0fbae588f362b828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:8b:6f:40:ca:4b:89:03:2d:a3:75:23:f3:
                    7d:8e:5d:8b:0e:6a:89:50:43:e5:96:7f:19:77:c4:
                    fb:40:52:a9:66:8b:ed:85:23:21:94:72:72:86:d5:
                    c4:fb:96:fd:a2:92:7d:95:19:32:c2:d6:60:cd:12:
                    08:6d:27:57:03:11:36:38:e3:d0:2c:b8:f9:c7:f4:
                    70:7c:88:93:0a:35:11:f0:2f:6c:d9:f3:84:4a:d9:
                    b7:64:69:58:8e:ff:87:e9:df:7b:80:59:3e:bf:16:
                    db:28:34:b5:e4:81:4c:e4:d6:b8:63:43:02:ba:eb:
                    36:ff:60:05:61:c8:09:b3:f1:39:98:d6:f1:a9:47:
                    e9:00:f2:5e:36:44:5f:83:02:20:c8:48:1e:4a:dd:
                    c1:5e:bf:fc:66:ad:90:9e:d0:0e:25:ac:f8:89:ea:
                    39:79:56:fb:50:2b:fd:eb:8c:e5:cc:08:a8:59:1a:
                    97:2d:b7:19:01:7d:6e:3f:63:c1:eb:e5:c4:de:68:
                    c7:02:88:d9:f8:dd:1e:0a:eb:2b:5e:af:ca:a8:5b:
                    a1:01:94:6a:8e:63:a0:27:e3:ea:a7:ec:8d:62:dd:
                    86:8a:dc:77:d6:1f:17:6a:0e:c6:a7:b1:7f:02:3f:
                    72:c5:3e:5a:87:51:38:86:da:56:f6:87:4d:ac:fa:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:19:35:14:CC:C4:6F:84:32:A1:EA:0F:BA:E5:88:F3:62:B8:28
            X509v3 Authority Key Identifier:
                keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/dCIZNRTMxG-EMqHqD7rliPNiuCg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.127.93.0/24
                IPv6:
                  2a00:10a0:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:0b:4e:36:c7:5f:4c:5a:a7:ff:9a:d2:53:1c:b0:62:19:72:
         33:68:c4:a7:4d:4c:0c:cb:58:34:4d:ae:41:fb:eb:d5:8d:8a:
         0f:d8:ba:10:5d:a1:24:91:d9:67:2e:54:c4:ca:c6:0b:2a:63:
         40:89:a9:48:d0:df:23:41:d9:ff:8a:1a:b2:d3:ff:97:6c:1a:
         3e:8e:20:83:87:d7:10:42:c6:36:d6:9f:4f:d8:f5:4f:af:83:
         77:c8:79:6a:63:76:28:a1:bb:e3:a4:f8:5a:fc:0d:32:11:f7:
         1a:dc:3d:22:a3:d6:f0:8b:b0:38:b3:88:63:0c:b8:e3:38:ca:
         d7:9b:b7:e9:67:8a:a9:e1:88:2c:d4:76:f5:f0:f6:a6:46:81:
         0c:5d:78:12:bd:9b:12:9a:62:af:2f:1e:ad:1a:f2:3c:28:8a:
         b4:4d:aa:32:1d:8c:b7:be:1b:03:07:d1:cf:19:dc:d7:9f:d1:
         14:45:86:3e:95:0a:a2:9c:2a:79:83:68:0f:01:1e:f4:68:ae:
         0c:48:fe:9f:8b:c4:ba:e2:70:81:ef:75:de:a0:ff:e8:0e:a8:
         8c:6e:43:5d:a3:d5:d7:65:6c:1b:15:b6:46:10:35:42:a5:50:
         01:74:6e:92:c4:07:ef:6e:f1:7b:04:0b:d4:5a:98:d0:70:8d:
         ad:11:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----