Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LxSWS_elFrs30n3P5x_zw4Sqp6I.roa
File:                     LxSWS_elFrs30n3P5x_zw4Sqp6I.roa (raw, json)
Hash identifier:          91wrnayQAjM09SaV5AsvmGua8ab9eyE/Df1FwwJ7I5I=
Subject key identifier:   2F:14:96:4B:F7:A5:16:BB:37:D2:7D:CF:E7:1F:F3:C3:84:AA:A7:A2
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       180E0ADA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LxSWS_elFrs30n3P5x_zw4Sqp6I.roa
Signing time:             Tue 04 Jan 2022 11:03:21 +0000
ROA not before:           Tue 04 Jan 2022 11:03:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15924
IP address blocks:        193.160.214.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403573466 (0x180e0ada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  4 11:03:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f14964bf7a516bb37d27dcfe71ff3c384aaa7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:77:07:c4:11:fc:ca:41:a6:06:e7:7b:3d:
                    58:fd:93:0e:9e:37:48:bc:a3:07:b0:4d:2f:22:67:
                    38:df:7c:08:9d:ee:60:20:f8:2b:c3:01:60:34:12:
                    6e:d9:37:68:e6:1e:3e:f9:84:d5:8a:a7:37:8f:43:
                    a5:be:bf:73:08:ba:7d:8f:49:28:58:63:73:dc:33:
                    91:45:13:12:34:13:88:5d:43:da:a1:ff:34:0d:41:
                    f0:5f:a3:5a:c1:9c:28:d8:f8:79:ad:cd:22:ee:21:
                    f0:6d:26:3d:01:73:3f:8e:55:c2:65:9d:d7:b4:5e:
                    8c:e2:3b:a5:fd:66:04:49:88:9c:b5:50:fc:7a:9b:
                    b2:b9:e9:48:19:0d:ce:54:1c:50:b7:ad:51:e6:af:
                    29:24:e0:fb:6c:b9:dd:e0:76:c2:32:52:cd:cd:10:
                    45:c2:f0:69:fa:4f:d2:6d:77:b8:71:e6:a0:5e:be:
                    fa:02:56:5b:0b:77:ee:62:96:df:0a:16:00:83:ba:
                    c0:4a:ed:1d:41:bc:14:2b:51:36:a2:cf:c9:60:7c:
                    50:35:9f:1a:1c:86:68:dd:fc:00:c6:b5:79:67:aa:
                    d5:90:0b:f6:6b:d6:5e:fd:2f:be:6e:ae:dc:7b:a7:
                    00:95:2b:be:ea:31:bc:65:fa:16:79:d6:92:99:79:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:14:96:4B:F7:A5:16:BB:37:D2:7D:CF:E7:1F:F3:C3:84:AA:A7:A2
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LxSWS_elFrs30n3P5x_zw4Sqp6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:24:d6:78:94:87:6a:f8:8d:fc:ad:e1:83:83:1f:87:17:88:
         32:af:31:b7:9a:81:b7:46:dd:c0:18:ca:74:b7:0f:b8:8d:01:
         5c:04:a6:27:0d:7b:68:bf:65:e8:6b:22:b1:47:cf:ee:ca:ea:
         10:e8:83:73:79:6e:83:17:89:52:ad:25:97:95:0d:f5:51:1e:
         09:88:62:69:81:00:6f:5d:71:2d:68:14:92:2c:0a:37:e9:1f:
         80:2e:b9:1d:9e:2b:dc:aa:93:7c:fc:ba:9c:cf:11:f4:c5:45:
         7b:02:1d:b2:19:dd:5e:52:83:14:fc:80:32:cb:4b:f9:14:36:
         b3:87:ac:1a:f4:08:8a:3f:cf:6e:03:2e:c8:16:8f:96:33:1d:
         65:8c:7f:af:51:a2:13:7d:33:28:c7:d8:7e:23:85:8b:90:63:
         d6:b5:63:9e:0a:71:e6:1a:90:15:3f:10:a0:1b:61:25:38:54:
         87:94:a3:98:12:15:4d:25:50:c6:77:2b:2f:4a:c4:68:7e:9a:
         e0:5f:59:d1:da:03:1e:91:09:15:81:24:ee:db:cb:7a:b5:c4:
         e5:5f:0a:26:e2:91:b0:bf:9e:07:27:8d:38:c8:4b:4d:02:df:
         40:07:d5:95:ce:46:07:e9:17:43:87:96:2c:8c:65:7d:df:55:
         bb:b5:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----