Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oeqZ9j7iR6CKOktdJgth_H_1q5U.roa
File:                     oeqZ9j7iR6CKOktdJgth_H_1q5U.roa (raw, json)
Hash identifier:          Y8SbRgqEUvfKInrn54nLXDBGT1JPzTxof0Goq0BWZJU=
Subject key identifier:   A1:EA:99:F6:3E:E2:47:A0:8A:3A:4B:5D:26:0B:61:FC:7F:F5:AB:95
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17A457BB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oeqZ9j7iR6CKOktdJgth_H_1q5U.roa
Signing time:             Sat 01 Jan 2022 04:54:03 +0000
ROA not before:           Sat 01 Jan 2022 04:54:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39018
IP address blocks:        185.193.38.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396646331 (0x17a457bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1ea99f63ee247a08a3a4b5d260b61fc7ff5ab95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:33:05:8d:a7:17:46:30:93:70:29:61:38:
                    13:00:96:fe:37:69:4c:b0:c2:57:ea:b3:68:4f:3f:
                    02:c9:82:69:78:84:31:07:1d:ab:56:b5:d7:74:d9:
                    5b:8d:38:2a:21:93:f8:68:e1:a4:25:46:74:5f:eb:
                    fd:71:78:10:a2:b8:99:3b:f4:b2:0f:7f:3b:1c:e5:
                    94:68:11:a7:98:01:af:47:bb:47:0b:90:9f:b3:a6:
                    fd:d9:9f:fc:39:9f:a4:82:9c:f5:1a:91:3b:2f:1a:
                    78:13:22:40:05:7b:fb:85:08:42:8a:d5:4e:a6:7b:
                    53:39:e7:b2:f1:26:7f:5e:99:c4:d4:85:39:f7:60:
                    f2:45:66:8e:bc:fd:da:7a:8e:10:e2:d2:02:ec:06:
                    2f:e3:0c:9d:e2:9b:77:6d:1d:3f:f5:0c:cc:3c:83:
                    7d:f3:8c:e0:cf:b3:1a:d1:5c:a1:a7:1a:f0:8e:84:
                    1a:f3:8a:2c:1f:20:cc:f2:58:db:89:0f:f2:35:af:
                    38:70:83:37:ac:7e:6f:d7:bd:d3:c7:6f:72:55:f5:
                    00:75:35:4f:a9:f3:de:80:55:79:bf:98:db:cd:7c:
                    4e:bf:44:19:01:ec:85:03:20:e4:d0:c9:6f:0f:d5:
                    5e:ce:6a:47:01:b0:e0:46:92:4c:bb:c5:55:ef:fa:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EA:99:F6:3E:E2:47:A0:8A:3A:4B:5D:26:0B:61:FC:7F:F5:AB:95
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oeqZ9j7iR6CKOktdJgth_H_1q5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:34:e5:cb:cc:9a:8d:50:f7:62:2f:fb:3d:17:c1:34:a0:
         76:dd:31:ed:9e:bc:c8:79:e5:07:dd:21:c0:ae:cc:83:e3:d6:
         53:26:51:db:54:e7:fa:9d:c6:a6:22:bd:89:b6:2d:d6:6e:9f:
         14:67:b6:f4:f1:ad:ac:af:24:7f:a6:40:ac:9e:33:91:17:e7:
         fc:a6:f6:b9:51:56:82:c5:7c:ef:d2:1e:ef:8c:4b:f4:a7:fe:
         3e:b0:45:bd:69:8a:56:ff:b0:3c:fb:e2:69:5a:54:62:39:fa:
         c5:f7:f0:a2:72:c2:d6:86:cb:dc:3b:4a:d8:ac:ad:d8:c8:2e:
         c3:3c:18:53:fd:2f:80:1d:6b:cc:37:04:b5:bc:77:5c:dc:76:
         77:c9:59:7c:db:81:89:f8:77:5a:20:4f:1c:b0:bf:9a:f2:2c:
         2f:1d:b5:ad:d2:04:36:a4:c1:4b:cf:ca:fa:6f:3a:de:90:fb:
         4e:7f:77:16:84:c9:89:f6:85:39:1b:e1:4c:41:0d:9d:e2:f9:
         34:7d:b7:a0:3b:b9:d2:c2:0e:9c:cf:98:86:ed:7d:9f:96:a0:
         f2:02:a7:4d:2f:58:4a:cf:5b:f7:c9:b7:0a:c4:1c:6e:79:12:
         1c:f9:16:a6:e0:20:e0:5e:ec:59:6b:55:65:9f:9d:fe:77:f1:
         96:1c:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----