Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/PAN98SfzsqBU_N5B4g6WjxXWBG8.roa
File:                     PAN98SfzsqBU_N5B4g6WjxXWBG8.roa (raw, json)
Hash identifier:          L6tfLsNFHRUFytdID9BuvDf6G8REmpVCGV654dGU04c=
Subject key identifier:   3C:03:7D:F1:27:F3:B2:A0:54:FC:DE:41:E2:0E:96:8F:15:D6:04:6F
Certificate issuer:       /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial:       174A8FB6
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/PAN98SfzsqBU_N5B4g6WjxXWBG8.roa
Signing time:             Sat 01 Jan 2022 10:53:36 +0000
ROA not before:           Sat 01 Jan 2022 10:53:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15830
IP address blocks:        193.26.9.0/24 maxlen: 24
                          2001:678:d24::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390762422 (0x174a8fb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
        Validity
            Not Before: Jan  1 10:53:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3c037df127f3b2a054fcde41e20e968f15d6046f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:6b:b9:d1:73:92:05:6a:b9:d4:81:f2:f6:
                    c3:22:b0:08:03:c0:54:c8:5a:e2:3f:19:2c:1a:10:
                    1f:09:a5:0f:b1:7a:40:42:40:51:82:98:a3:fb:b5:
                    43:2b:fd:a2:3d:75:10:13:60:67:7b:af:cb:27:97:
                    4d:f0:85:7a:2a:e6:ec:fa:28:0b:26:2d:45:0f:97:
                    3b:d0:46:75:bc:b7:98:79:f1:04:b9:d7:26:ce:ef:
                    74:17:b4:34:fd:5d:dc:a9:07:6b:03:ee:69:70:d6:
                    7e:f0:4a:f9:0a:57:5b:14:4a:65:94:c9:1a:93:5a:
                    64:14:62:c3:67:e2:b2:45:87:31:03:a1:24:0a:4b:
                    53:e2:82:db:70:e7:78:ef:93:e5:fd:31:ef:4e:49:
                    75:f9:ca:95:b5:b5:d7:92:a1:f1:73:21:3b:c6:a0:
                    87:38:3b:bb:dc:80:c5:fe:d0:a4:84:88:95:83:3d:
                    5a:9f:18:b8:f5:80:dc:2a:ef:93:b5:6a:54:26:6a:
                    8a:d9:69:77:8c:99:c1:ab:4e:6a:71:e0:a3:f4:e7:
                    d5:47:07:ec:c7:4e:19:97:ab:4a:51:35:06:84:43:
                    f2:b9:06:66:b5:10:0d:74:2f:4e:70:02:4e:c3:03:
                    b0:02:d9:8b:73:f8:20:07:f6:ac:09:38:3e:1d:64:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:03:7D:F1:27:F3:B2:A0:54:FC:DE:41:E2:0E:96:8F:15:D6:04:6F
            X509v3 Authority Key Identifier:
                keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/PAN98SfzsqBU_N5B4g6WjxXWBG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.9.0/24
                IPv6:
                  2001:678:d24::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:92:14:1a:67:62:95:98:3c:45:3f:45:28:d8:a2:bd:09:
         08:9e:10:f3:c0:7b:1b:e8:1f:8b:76:f6:b3:87:0e:47:84:59:
         98:58:e4:39:2c:2b:02:7d:8b:72:19:92:83:21:78:17:61:f7:
         78:65:b2:d3:dc:3d:ba:f2:1e:70:c7:c0:9b:7c:5b:dc:12:24:
         7b:f6:b8:7a:03:04:98:9f:25:66:93:47:ed:a9:3f:d9:6a:d9:
         b5:74:7f:d0:61:3c:5a:0c:1f:09:4f:82:3d:67:6f:c7:fe:76:
         42:3c:2a:3b:63:2e:44:d4:6c:ec:42:81:4d:ce:99:34:79:e7:
         ff:a7:b6:fe:b5:33:a1:15:85:5a:77:37:a0:94:fb:e8:35:3e:
         e4:60:df:3d:5f:41:1d:70:21:6a:5d:e4:e6:09:d4:0f:7f:43:
         58:fb:30:0a:cc:a0:08:ba:98:3d:40:c1:25:3a:7b:92:df:7a:
         fd:d5:87:33:83:34:d1:e5:30:c5:99:64:90:67:fa:4d:85:06:
         d3:ce:87:58:b6:7d:3e:1b:f9:27:d3:af:db:67:a4:af:54:6f:
         eb:8e:d4:71:99:11:71:3d:71:32:d6:4f:ce:b5:8b:e2:ac:04:
         ed:c9:32:9f:4a:61:07:30:45:90:35:90:02:4b:36:4f:b7:5e:
         89:4b:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----