Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/v0f1JnhPexnX82xSS33EIA5mVWw.roa
File:                     v0f1JnhPexnX82xSS33EIA5mVWw.roa (raw, json)
Hash identifier:          470strdQfkwDxjPiyqiqC+lX+eQB15B2arXbdX5yGdQ=
Subject key identifier:   BF:47:F5:26:78:4F:7B:19:D7:F3:6C:52:4B:7D:C4:20:0E:66:55:6C
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       3934910E
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/v0f1JnhPexnX82xSS33EIA5mVWw.roa
Signing time:             Wed 06 Apr 2022 07:20:18 +0000
ROA not before:           Wed 06 Apr 2022 07:20:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206394
IP address blocks:        94.176.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959746318 (0x3934910e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Apr  6 07:20:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf47f526784f7b19d7f36c524b7dc4200e66556c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:05:d7:86:2e:2e:4d:7e:f4:a7:e4:df:48:
                    25:c1:16:00:72:43:c0:ac:7d:11:20:b9:b8:91:02:
                    dc:94:d9:49:d8:c8:e3:7b:dd:a5:e2:ed:87:15:36:
                    86:5d:14:32:55:2c:6d:8c:76:7c:7d:21:c5:13:3a:
                    bb:e5:52:39:cf:fb:bd:67:7a:05:a9:dc:c9:39:61:
                    1c:00:05:b4:46:33:d3:9a:0b:26:2a:5e:0a:20:db:
                    83:bf:2a:8d:cf:d0:1b:c1:65:0a:9a:b0:bc:bc:41:
                    0e:23:40:19:cc:dc:c0:63:ca:f4:ed:dd:50:15:f7:
                    7b:d7:58:f2:46:45:e8:02:55:9d:da:b8:6c:11:82:
                    73:46:86:8a:1d:24:fa:bc:fa:1a:ee:80:03:1a:0a:
                    33:24:f6:a1:55:c6:02:da:ba:e9:17:92:6a:e3:a2:
                    eb:bb:8c:e1:06:a3:43:61:93:b5:45:89:51:e6:a4:
                    b5:09:ec:8d:37:0a:93:83:6b:66:d6:d4:1a:d6:43:
                    b2:ed:22:11:81:48:b0:71:01:76:1e:e3:8a:30:ec:
                    aa:b1:8e:3c:7e:ca:db:2a:6a:95:a5:d9:39:59:13:
                    a2:c1:d3:42:f8:88:b6:e3:3e:0e:d5:1f:33:32:b4:
                    3e:35:dc:8a:25:d1:a2:91:bf:b0:8f:64:38:f4:ef:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:47:F5:26:78:4F:7B:19:D7:F3:6C:52:4B:7D:C4:20:0E:66:55:6C
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/v0f1JnhPexnX82xSS33EIA5mVWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:11:59:d0:55:03:6d:2c:ef:7f:a0:0a:1a:d5:19:a7:86:
         0a:cf:de:8f:be:d6:d1:01:0c:23:be:c8:1a:94:a7:b4:43:56:
         0c:86:6c:73:28:1c:bf:64:63:6b:ab:8e:8d:00:6c:4e:a4:b3:
         86:1b:28:c4:68:4b:c4:e6:76:9e:a6:af:d8:ea:75:75:6b:9f:
         3a:96:60:fb:b9:64:0f:6b:25:a1:c8:7b:83:d2:1d:74:ce:11:
         0c:24:c4:a5:06:e0:c1:35:05:a2:ad:8d:a3:b1:00:c1:8c:cf:
         7b:05:53:32:53:65:bd:ad:34:4e:a0:97:74:3d:43:9b:bd:3e:
         61:31:2b:9f:a7:89:65:49:e5:6e:74:7b:08:dc:7d:9e:9c:7f:
         ef:c8:f1:2a:af:b0:31:a0:89:d6:25:bd:e8:ab:21:27:5d:3c:
         f9:54:d5:a5:75:26:30:b0:ee:9f:2e:f3:36:58:9f:f2:89:f8:
         a5:f3:c2:88:da:18:45:7d:bd:af:b0:c5:e6:89:6c:ea:1c:4b:
         e2:f3:40:3d:6d:23:b9:d7:2d:4b:00:da:e3:cb:61:72:46:7a:
         54:bb:99:96:47:c8:f6:cc:97:fb:70:bc:84:ab:b1:b8:fe:b8:
         1b:f8:4a:bc:9e:85:42:85:d6:d4:27:10:1f:21:9e:ba:f6:d0:
         5a:6f:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----