Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/n5GdrQaib8nBIu2iDNiVVTAnpWc.roa
File:                     n5GdrQaib8nBIu2iDNiVVTAnpWc.roa (raw, json)
Hash identifier:          8m6PGAXlHCinKIHCv2o/Zj1RmYYdr0PY0RIbgQUXjxE=
Subject key identifier:   9F:91:9D:AD:06:A2:6F:C9:C1:22:ED:A2:0C:D8:95:55:30:27:A5:67
Certificate issuer:       /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial:       01856274CC6CE9936FCFE2E9620F02533679
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/n5GdrQaib8nBIu2iDNiVVTAnpWc.roa
Signing time:             Fri 30 Dec 2022 09:54:59 +0000
ROA not before:           Fri 30 Dec 2022 09:54:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57533
IP address blocks:        91.231.97.0/24 maxlen: 24
                          2001:67c:568::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:74:cc:6c:e9:93:6f:cf:e2:e9:62:0f:02:53:36:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
        Validity
            Not Before: Dec 30 09:54:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f919dad06a26fc9c122eda20cd895553027a567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:f0:16:5e:cb:fb:30:0d:01:25:94:a7:cc:
                    7d:8c:7e:13:f6:21:2f:00:4c:ad:cf:fb:af:da:4c:
                    d9:df:67:d6:43:f6:f8:d8:4e:73:d0:40:80:53:06:
                    3e:38:36:f7:77:2b:aa:ee:11:87:c7:5d:88:9c:a8:
                    33:2f:34:dd:8b:86:3a:48:ba:7a:ff:09:05:b5:76:
                    70:fc:85:08:39:eb:ce:0f:d3:e5:eb:6f:96:18:21:
                    bf:af:9d:65:71:06:5c:f1:e2:c4:b3:ca:d0:da:3c:
                    45:48:27:a5:67:e6:48:51:32:aa:ab:28:61:eb:0c:
                    23:55:51:2b:9c:66:d8:e4:5f:1e:ee:0a:94:b5:d6:
                    97:f0:e4:d0:a1:ae:93:51:20:7c:f5:0a:33:c9:eb:
                    a1:84:7e:f7:b1:8f:f5:4a:a8:ad:ed:eb:51:16:f2:
                    71:af:55:f1:5f:49:14:5e:6b:35:ce:f1:d1:d3:b0:
                    5a:f8:ff:e8:5b:1f:40:3e:3e:dd:8a:6a:f4:64:3a:
                    60:6b:45:46:58:24:a2:9a:69:a1:af:a7:3f:31:db:
                    1b:51:d4:6e:b7:a2:6c:d3:e3:be:d8:7d:85:76:90:
                    db:03:c2:10:b7:bf:80:65:47:7c:2f:c7:02:27:55:
                    f4:ec:57:ea:79:b9:26:3e:62:78:39:eb:f7:51:d4:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:91:9D:AD:06:A2:6F:C9:C1:22:ED:A2:0C:D8:95:55:30:27:A5:67
            X509v3 Authority Key Identifier:
                keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/n5GdrQaib8nBIu2iDNiVVTAnpWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.97.0/24
                IPv6:
                  2001:67c:568::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:45:75:6f:57:84:f6:68:ef:63:0e:84:d2:57:f9:20:fe:
         37:29:72:94:d8:43:06:19:7d:1d:a6:0a:85:b1:a2:c8:f5:b1:
         49:db:b2:17:d0:0e:f8:fd:a7:e7:a4:8c:1e:d7:66:fd:bc:75:
         e9:c6:fd:0c:2f:95:bc:4f:0c:1e:0a:65:3d:d2:d7:16:0f:53:
         4b:d5:0f:0c:57:38:5e:37:ac:16:32:d7:7f:90:41:94:89:e7:
         e4:e5:ef:76:f8:b3:a5:16:76:ce:27:73:ce:79:0e:1b:f8:9b:
         17:0b:fd:34:f6:44:b5:8d:10:25:3b:7e:22:01:35:3e:ce:e8:
         75:91:51:b9:d0:e4:c4:b0:1c:1a:50:7d:c2:da:63:9f:99:70:
         e0:43:62:cd:84:38:67:d5:06:09:c5:45:a7:57:20:7c:7e:40:
         49:6a:a4:43:30:8e:7e:57:f8:54:05:50:dc:51:8f:01:f5:04:
         bf:55:79:73:c2:0a:ef:7b:87:a0:15:6b:81:5e:85:fb:82:bf:
         17:19:9b:0d:10:b7:ac:83:3b:c9:9f:76:cc:46:ef:6c:27:ee:
         bd:ef:26:83:d0:dc:2a:ce:70:5e:86:54:84:ba:dc:77:ea:67:
         76:ae:e8:ac:ae:2e:d6:fe:48:81:d8:f1:bc:c4:90:b0:be:96:
         65:40:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----