Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/y7WkXGZI__ncKo9crftP5nPKxJs.roa
File:                     y7WkXGZI__ncKo9crftP5nPKxJs.roa (raw, json)
Hash identifier:          fSWQY++HRzvxjcIui2dWUDcfne/KpVV7rrcMqffqwFs=
Subject key identifier:   CB:B5:A4:5C:66:48:FF:F9:DC:2A:8F:5C:AD:FB:4F:E6:73:CA:C4:9B
Certificate issuer:       /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial:       0182180D4C677398CB2A3B7AC8EDA4413C86
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/y7WkXGZI__ncKo9crftP5nPKxJs.roa
Signing time:             Tue 19 Jul 2022 20:01:40 +0000
ROA not before:           Tue 19 Jul 2022 20:01:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39431
IP address blocks:        193.93.19.0/24 maxlen: 24
                          193.93.18.0/24 maxlen: 24
                          193.93.18.0/23 maxlen: 23
                          2001:678:468::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:18:0d:4c:67:73:98:cb:2a:3b:7a:c8:ed:a4:41:3c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
        Validity
            Not Before: Jul 19 20:01:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbb5a45c6648fff9dc2a8f5cadfb4fe673cac49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:97:78:b1:bd:df:7e:33:f6:4a:60:06:49:
                    dc:f2:7b:eb:78:82:c4:09:a7:ec:33:f7:bb:7d:1c:
                    12:7d:ce:9d:29:29:73:b7:5d:87:d0:23:78:95:dd:
                    aa:e7:80:87:0b:48:6e:1d:ab:e5:93:48:30:a9:8f:
                    e1:26:d1:cd:d4:90:2d:e3:08:9e:1f:58:c7:aa:4a:
                    94:5f:9f:9c:83:4f:8b:f3:39:bf:2e:6b:9b:c9:f3:
                    3f:27:3b:d5:14:62:0c:ff:63:57:f7:41:16:ad:ce:
                    85:a6:99:0a:14:25:ea:70:92:5f:a5:47:7a:fb:75:
                    56:bc:6a:71:07:2c:cb:c8:9d:72:b3:00:ae:aa:c4:
                    b7:1c:9f:4c:00:83:4f:88:2a:ad:45:80:67:64:fc:
                    4b:b5:99:4a:35:ac:62:43:dc:00:50:1c:26:6a:33:
                    09:1a:7b:02:bc:55:79:89:98:3a:f7:d1:f1:b3:93:
                    23:eb:59:ec:ba:24:e6:8f:0a:bf:e9:11:26:7c:30:
                    ae:f3:eb:61:a2:3a:c4:23:0e:25:0e:e7:24:a1:fc:
                    d0:34:ec:f2:4d:2a:b5:c7:cf:38:3b:ee:e1:3c:14:
                    da:be:ef:67:5e:68:6c:2e:0e:09:2c:7e:7f:2a:e6:
                    64:70:f0:43:08:cd:b2:25:6f:b6:37:e4:23:58:bc:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:A4:5C:66:48:FF:F9:DC:2A:8F:5C:AD:FB:4F:E6:73:CA:C4:9B
            X509v3 Authority Key Identifier:
                keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/y7WkXGZI__ncKo9crftP5nPKxJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.18.0/23
                IPv6:
                  2001:678:468::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:5b:f6:e4:4a:a9:fa:3b:31:5c:0a:ab:64:07:d6:35:af:
         56:c1:bb:34:85:7d:da:a8:5e:79:2c:5b:81:83:22:2b:74:ae:
         71:25:99:b6:f6:12:ba:9a:5e:b2:5a:08:da:36:2b:8c:f7:c1:
         f9:f7:56:25:c8:b0:a4:8a:98:78:01:ad:65:6f:26:58:c0:92:
         b7:7d:2f:b8:7a:e2:7a:14:dc:a0:71:f1:84:e9:85:a2:8c:e6:
         da:c9:8b:ae:91:f0:00:4d:49:bb:d4:6d:aa:55:ad:4a:16:76:
         47:ad:44:52:43:63:b5:53:fc:ea:9a:4d:b4:33:ae:3c:84:13:
         52:9f:16:ec:47:56:0c:7b:f1:d8:e6:0d:34:18:93:74:5d:3d:
         68:59:86:07:9f:48:1b:ba:d7:71:ee:aa:39:65:e0:8b:e7:61:
         22:e3:b1:c8:c3:22:01:e8:e1:a9:25:3b:9b:18:37:e1:5a:af:
         7c:e5:c5:ca:e4:02:09:d5:57:0d:b7:f8:78:ed:03:e3:5b:06:
         2f:58:a0:97:fc:1e:a8:7c:92:a3:85:cc:db:a0:e5:30:ab:4a:
         50:65:7f:63:95:1e:fa:aa:0b:c3:ad:11:cf:96:32:62:8c:91:
         81:5e:7f:2f:6d:34:21:18:3e:1a:88:73:3c:00:64:93:50:98:
         7c:2a:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----