Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/KUMwLH2wtt63l592BRH7V_eZV1Q.roa
File:                     KUMwLH2wtt63l592BRH7V_eZV1Q.roa (raw, json)
Hash identifier:          Lrg9AHlZiO2lje1CVcsk9OSxQ4L8/2TwgpRUQBLF77M=
Subject key identifier:   29:43:30:2C:7D:B0:B6:DE:B7:97:9F:76:05:11:FB:57:F7:99:57:54
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       058A48AA
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/KUMwLH2wtt63l592BRH7V_eZV1Q.roa
Signing time:             Sat 01 Jan 2022 00:51:52 +0000
ROA not before:           Sat 01 Jan 2022 00:51:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43754
IP address blocks:        164.215.128.0/17 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92948650 (0x58a48aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jan  1 00:51:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2943302c7db0b6deb7979f760511fb57f7995754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:44:bd:a1:9d:b6:d8:09:72:07:be:38:3e:
                    80:02:20:5f:ae:20:92:26:be:c1:7d:cf:48:aa:73:
                    8b:b1:fa:82:18:50:f6:fb:96:25:fc:8e:ca:36:6a:
                    06:f9:67:39:32:23:fe:62:1e:67:9a:1d:f0:82:33:
                    87:4f:7c:ea:ba:7b:9b:92:6a:8b:e1:38:d7:e7:55:
                    49:d0:ab:1b:c6:1f:5d:41:67:bf:18:91:c3:0c:88:
                    65:b2:b8:07:c8:9f:b4:9b:83:52:ef:c9:a2:97:0a:
                    d2:1f:29:b1:b3:03:88:91:21:5a:81:e3:7f:9c:12:
                    a2:e5:2b:cc:11:b6:d5:eb:d1:1e:63:ae:b0:69:f6:
                    83:dd:6f:e4:26:fc:0b:15:26:b9:d0:9c:e7:f3:24:
                    81:07:21:be:6b:be:3d:2c:1b:05:05:9e:63:06:e0:
                    44:76:e1:87:8b:77:b5:12:4a:f3:91:08:ba:d2:4f:
                    b2:bb:6c:e5:b6:e3:87:8a:f3:40:59:ac:a6:0a:b3:
                    9a:30:e1:b2:d3:d3:67:37:80:d1:c6:60:76:f6:4a:
                    2b:93:be:3f:32:db:fb:e2:8d:27:62:e6:a5:b0:c3:
                    9e:da:0f:5c:55:b2:0d:f6:0d:59:aa:f6:28:ee:a0:
                    31:b3:30:62:ac:74:79:99:2b:51:54:e7:e1:b9:27:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:43:30:2C:7D:B0:B6:DE:B7:97:9F:76:05:11:FB:57:F7:99:57:54
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/KUMwLH2wtt63l592BRH7V_eZV1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.215.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         99:28:e1:79:79:cc:6f:ad:e6:9a:e6:9c:96:84:3d:fe:9a:d3:
         68:9c:b7:42:43:de:6f:e5:e6:01:6d:6a:f6:b1:ab:83:a1:92:
         35:3c:b5:3e:a7:0f:d2:2c:f4:e0:56:15:60:23:9b:10:20:9a:
         35:cd:b5:40:b2:14:b4:b3:1f:55:83:bc:72:8d:1a:e4:91:3f:
         4a:8d:5e:77:72:cd:a3:f0:8f:d3:1d:1a:a9:4b:69:19:4c:26:
         2e:76:f9:f5:15:dc:18:13:61:e2:ab:f9:2e:da:4e:0d:60:da:
         e9:0b:ed:71:72:6a:cd:30:a0:f6:43:b6:2c:e7:05:10:5b:e7:
         69:ca:cd:d6:2d:6f:7c:52:2d:0f:8d:e2:5c:3f:a1:a3:b3:27:
         a0:76:90:bb:d9:a7:d8:9c:09:82:ed:e8:3d:c6:54:5f:7d:09:
         cf:53:29:3f:00:da:06:83:2a:9b:19:95:ed:6d:f5:fe:c3:c1:
         a7:f2:1b:fe:0e:5e:aa:f4:d7:18:ee:30:47:96:6d:9e:8a:91:
         3e:e5:af:7b:e9:fe:d9:86:a4:88:59:48:25:10:71:e9:94:0e:
         5d:16:7c:ac:52:70:0b:77:5b:a0:d9:e7:72:27:38:e7:86:76:
         31:c8:ad:71:a2:fd:ff:6d:a6:5b:66:3d:10:b8:d4:c5:a8:43:
         a0:78:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----