Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/ZqkSxSYxw645k-qHr2uiy5vbCxQ.roa
File:                     ZqkSxSYxw645k-qHr2uiy5vbCxQ.roa (raw, json)
Hash identifier:          vL/bqRQ7Pycmtn/dza6eWTzasWw8b7h4LAnfQpkesdQ=
Subject key identifier:   66:A9:12:C5:26:31:C3:AE:39:93:EA:87:AF:6B:A2:CB:9B:DB:0B:14
Certificate issuer:       /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial:       026E111F
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/ZqkSxSYxw645k-qHr2uiy5vbCxQ.roa
Signing time:             Sat 01 Jan 2022 06:54:00 +0000
ROA not before:           Sat 01 Jan 2022 06:54:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206994
IP address blocks:        193.5.147.0/24 maxlen: 24
                          2a0c:8187::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40767775 (0x26e111f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
        Validity
            Not Before: Jan  1 06:54:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66a912c52631c3ae3993ea87af6ba2cb9bdb0b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:d3:8a:b1:c4:ca:ba:27:95:17:ea:2e:32:
                    13:9d:fc:8c:f4:6d:07:b5:4d:35:cc:2e:73:3f:0b:
                    48:00:9b:ae:2f:2b:de:7b:d7:86:02:2a:87:db:bb:
                    25:05:fd:15:bb:0e:27:96:9a:94:17:3f:99:ac:3a:
                    09:0f:ec:3d:81:5b:b6:98:69:f0:11:4a:65:a5:30:
                    ce:12:ce:57:2a:24:6f:6e:7f:54:34:3c:6b:75:a6:
                    ae:84:08:c9:20:bf:ef:97:de:a9:fb:3f:60:f6:c1:
                    1f:32:93:61:94:4d:5c:39:46:fe:9e:85:d8:71:f2:
                    2f:f9:f4:30:9e:05:55:89:7a:bb:f0:4c:a7:05:a9:
                    b0:55:c4:a9:5d:2c:aa:20:e2:2f:32:5e:81:3c:88:
                    0e:1b:2c:bc:0a:b3:bb:0e:32:76:7c:66:dc:48:96:
                    b2:a9:bf:cd:8c:27:56:b3:5c:bc:e6:58:d5:6b:2e:
                    e3:01:21:b3:5c:e5:b7:e8:d1:f8:db:09:c4:06:9a:
                    2c:ca:d4:cd:c7:0d:1a:1b:56:f4:2e:40:31:6e:33:
                    cc:62:94:01:f4:a6:08:09:f4:a2:5a:14:42:60:2e:
                    54:ad:6f:2c:32:57:55:b3:42:f8:35:82:dc:3e:d4:
                    06:e4:7a:1c:de:27:a1:fb:bd:c7:5e:fe:fb:b9:57:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A9:12:C5:26:31:C3:AE:39:93:EA:87:AF:6B:A2:CB:9B:DB:0B:14
            X509v3 Authority Key Identifier:
                keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/ZqkSxSYxw645k-qHr2uiy5vbCxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.147.0/24
                IPv6:
                  2a0c:8187::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:d3:24:c4:89:61:37:8c:b1:b3:4f:78:d3:8d:61:04:dc:
         ef:4f:c1:a2:e1:5c:9c:6e:36:36:03:84:b8:ab:54:01:36:85:
         27:cc:e7:b5:9c:6d:9d:d4:b4:9f:0c:10:0e:9e:90:98:9a:a0:
         33:94:dd:da:98:3a:9a:eb:87:e2:55:fd:30:55:ee:4d:e6:a7:
         ec:c0:17:cb:a4:16:b6:3d:e2:84:ae:4d:10:bc:2a:f8:b7:3e:
         cf:83:c1:01:fd:60:0a:84:94:28:d6:c7:4a:5a:61:32:1b:7b:
         3a:df:80:a6:12:16:96:3c:fd:92:36:33:bc:bd:0f:30:31:62:
         87:fc:b6:ae:ba:3c:29:6a:04:ce:17:f5:10:8a:50:89:39:c4:
         b6:c9:4a:41:91:95:04:67:5b:34:e7:a9:5e:0a:1f:2f:3d:03:
         03:8a:92:78:4a:2e:4e:4f:93:b4:e6:9a:81:d9:d7:01:bf:d9:
         64:bf:74:e4:b6:c3:18:31:c4:75:d1:e8:67:09:b5:95:20:41:
         c2:68:d7:4f:47:13:f4:6a:fb:4c:b1:5c:c5:70:47:c6:b2:a2:
         89:83:e3:47:7b:be:dd:f2:2e:b1:4b:68:7e:bc:a1:a2:eb:4b:
         bd:78:95:2d:d4:ad:6e:29:1b:47:ea:ff:94:be:04:fa:50:de:
         e4:69:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----