Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/yyyg3kPYvpH4PzVEQRYjklFRPBc.roa
File:                     yyyg3kPYvpH4PzVEQRYjklFRPBc.roa (raw, json)
Hash identifier:          jEF6Kpm20tnTxNP1HxyJlqTfY/9NxJuoUHDdHjfocow=
Subject key identifier:   CB:2C:A0:DE:43:D8:BE:91:F8:3F:35:44:41:16:23:92:51:51:3C:17
Certificate issuer:       /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial:       0A826EF1
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/yyyg3kPYvpH4PzVEQRYjklFRPBc.roa
Signing time:             Sat 01 Jan 2022 08:55:09 +0000
ROA not before:           Sat 01 Jan 2022 08:55:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47998
IP address blocks:        94.228.64.0/20 maxlen: 24
                          2a00:1068::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176320241 (0xa826ef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
        Validity
            Not Before: Jan  1 08:55:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb2ca0de43d8be91f83f35444116239251513c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:9d:89:56:54:9e:9f:c7:fb:c8:0b:f4:cd:
                    5e:dc:c0:5a:f8:e6:a4:67:73:94:64:c8:3b:2f:d7:
                    02:d2:04:8f:6e:09:63:73:88:2b:bf:58:8d:ed:c9:
                    63:40:42:5b:bb:be:a9:6e:7b:5f:16:b3:bb:b5:df:
                    38:bc:2d:5a:7e:2f:ba:04:5c:16:17:7d:2a:a7:89:
                    cf:67:d5:52:fa:b1:37:e4:65:d8:5d:0e:e4:76:37:
                    09:67:89:c4:d8:a3:a4:ca:49:1c:16:17:9b:16:2f:
                    4d:9a:ef:8a:cc:67:01:d8:46:1c:99:e4:35:7f:93:
                    c1:57:2e:58:b1:50:99:0e:6e:87:c3:4f:62:01:be:
                    b0:50:a0:c8:07:94:02:86:40:d4:8c:ce:cc:cd:86:
                    bb:b5:d7:88:dd:a1:75:66:e7:34:dd:ae:8e:97:ee:
                    74:e5:c5:66:bf:1a:bf:ff:32:d0:04:7a:2f:5f:9e:
                    11:50:ee:5b:f7:7a:f8:f2:3c:96:17:50:7f:95:d8:
                    1d:ba:86:e7:3c:93:a7:87:42:ff:32:15:26:72:be:
                    c1:bb:c8:69:6d:df:af:c7:4d:2a:98:52:c4:4e:0e:
                    46:e6:a4:77:7d:2f:05:e4:fb:ed:c7:4e:b2:a1:52:
                    4b:38:70:7c:d0:ed:17:f5:08:65:8f:21:51:79:97:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:A0:DE:43:D8:BE:91:F8:3F:35:44:41:16:23:92:51:51:3C:17
            X509v3 Authority Key Identifier:
                keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/yyyg3kPYvpH4PzVEQRYjklFRPBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.228.64.0/20
                IPv6:
                  2a00:1068::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:86:fd:e7:84:a8:fa:af:6d:49:75:66:07:24:56:9c:5a:
         8f:70:5d:eb:ce:a0:da:03:22:d5:e8:af:05:4f:c0:e2:c2:ac:
         5a:c0:5c:ec:5d:f6:8e:69:fc:f8:37:73:97:8f:b2:a7:72:d0:
         0e:19:27:35:24:3d:5f:13:03:0c:87:cf:83:a2:b3:a3:4a:b5:
         33:0b:07:90:c5:9b:c9:3d:db:16:9e:a3:70:51:ab:6c:60:ca:
         a8:f0:bd:f1:c7:ab:1d:73:1c:f4:4a:0e:34:2f:01:7c:ed:81:
         09:32:1b:4b:da:45:ee:10:e5:49:62:e9:29:3d:cc:16:7c:b1:
         2b:c0:50:7f:93:c8:94:16:d3:fb:ff:7d:a8:ef:79:59:a3:38:
         cd:5f:6c:67:94:75:3d:11:39:df:d9:a7:91:fa:38:bf:e1:3a:
         dd:55:4d:37:f1:a1:39:23:77:1a:bc:ea:63:88:3c:59:f3:3c:
         32:d3:b0:90:50:d0:c6:4a:66:a1:d5:ad:09:42:cf:f9:54:57:
         47:77:12:86:a0:75:b7:d6:34:3d:4e:31:e9:a8:5a:1e:03:2b:
         2a:09:08:30:79:0e:94:77:4e:66:28:3e:ec:3c:2e:19:57:c4:
         fb:be:11:c7:57:73:04:ce:e8:e4:ad:cd:23:6f:d2:35:2e:d0:
         cf:92:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----