Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jx9vnkfOhWfc29AiH01q48_gIPc.roa
File:                     jx9vnkfOhWfc29AiH01q48_gIPc.roa (raw, json)
Hash identifier:          sjLzywBLHPrV4vRe/7CH25gdkdvqQhamp8iU5maU7Fc=
Subject key identifier:   8F:1F:6F:9E:47:CE:85:67:DC:DB:D0:22:1F:4D:6A:E3:CF:E0:20:F7
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       178FD0B6
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jx9vnkfOhWfc29AiH01q48_gIPc.roa
Signing time:             Sat 01 Jan 2022 13:03:19 +0000
ROA not before:           Sat 01 Jan 2022 13:03:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61361
IP address blocks:        94.247.47.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395301046 (0x178fd0b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  1 13:03:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f1f6f9e47ce8567dcdbd0221f4d6ae3cfe020f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:7e:14:f9:b4:56:79:5d:be:67:30:db:c7:
                    f3:37:a8:c5:b1:72:0c:3f:d2:b7:e7:84:a4:c1:7d:
                    4c:b3:e0:51:4f:a9:d4:ee:2b:b0:63:82:d6:e8:4d:
                    5c:d7:71:3f:b2:81:f8:32:87:a5:eb:ee:c4:cc:d3:
                    e5:69:1e:ae:2d:ed:29:d3:2e:04:17:b2:a1:91:7a:
                    42:2f:9f:89:99:b3:39:12:3e:31:4b:f7:8a:19:b4:
                    99:cc:60:c0:89:85:13:10:24:5b:be:3c:0a:2b:9f:
                    d6:ac:d0:99:a5:8f:c9:43:97:93:c1:e4:5a:6c:00:
                    81:78:ce:c2:df:7d:29:9c:a5:de:e4:ef:c2:a4:ed:
                    d8:3e:7f:47:99:74:f1:3f:27:fd:4e:b7:fc:6a:dd:
                    02:1d:38:9b:66:fb:58:49:62:dd:9e:9e:c8:60:fd:
                    2e:e4:8b:24:46:12:d7:15:44:e5:ca:40:74:ac:fb:
                    aa:52:88:e8:f6:ed:de:8f:7a:7f:dd:62:e7:f9:d3:
                    a9:4b:a7:2f:ac:2c:7b:ef:90:ac:ff:59:40:e4:23:
                    a8:27:cd:33:a7:1a:4c:bc:db:fb:ea:21:65:e4:db:
                    ba:dd:9a:31:e7:bc:21:ed:40:e8:9f:b6:e9:5b:60:
                    46:1e:0d:19:c1:54:fb:3b:55:d9:ce:6c:a1:cb:a6:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:6F:9E:47:CE:85:67:DC:DB:D0:22:1F:4D:6A:E3:CF:E0:20:F7
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jx9vnkfOhWfc29AiH01q48_gIPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:41:44:26:6c:e6:3c:b3:b8:8a:16:15:27:89:35:6b:ce:f7:
         63:71:8b:65:6d:01:26:45:2e:f7:46:95:06:90:3c:da:49:2f:
         c3:dd:77:1d:a5:5d:41:48:79:a7:97:99:29:01:0e:29:44:73:
         10:90:bb:29:c6:27:cb:93:7a:fb:f0:35:8f:8a:e3:66:43:af:
         33:dc:75:34:b6:ac:a2:47:bd:8f:f7:7f:bb:e7:9f:8c:4e:95:
         21:a9:91:77:56:e0:58:52:02:65:17:82:d4:f3:7b:f1:e3:27:
         cd:9a:b6:d5:e5:c6:e0:76:a4:f8:fe:d7:1d:53:41:e7:2e:3c:
         9b:0e:11:68:a2:50:3a:44:7d:56:b7:ce:e9:cc:d7:2c:00:bd:
         a0:3c:1d:98:fc:66:46:94:95:a1:52:ba:a7:bb:b8:c0:2d:4d:
         6d:c0:6d:b6:81:fa:94:59:85:2d:8e:6d:bb:71:9d:75:18:dc:
         ee:39:1e:22:bc:cf:39:c8:df:eb:76:f4:77:41:09:2e:e2:e3:
         91:fd:35:72:26:f3:cc:91:98:b3:a3:70:44:7e:e5:10:a2:ea:
         a1:66:e0:5a:ad:6e:72:6b:83:eb:f3:1d:42:bc:7a:82:23:0e:
         06:11:e9:54:44:72:53:83:6f:40:fb:bf:13:90:c9:96:51:e7:
         72:dd:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----