Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/D4XfCurdQnPyC3UqfA0MbnKGSeA.roa
File:                     D4XfCurdQnPyC3UqfA0MbnKGSeA.roa (raw, json)
Hash identifier:          HSoLfZEHTAIemfUTI4tyLt20B/pgl1XfshCYBxDp1XE=
Subject key identifier:   0F:85:DF:0A:EA:DD:42:73:F2:0B:75:2A:7C:0D:0C:6E:72:86:49:E0
Certificate issuer:       /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial:       01850AA0E048B2AE5C3730D9DCA71F58DDC8
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/D4XfCurdQnPyC3UqfA0MbnKGSeA.roa
Signing time:             Tue 13 Dec 2022 08:36:33 +0000
ROA not before:           Tue 13 Dec 2022 08:36:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16175
IP address blocks:        80.89.32.0/19 maxlen: 19
                          2a00:e08::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0a:a0:e0:48:b2:ae:5c:37:30:d9:dc:a7:1f:58:dd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
        Validity
            Not Before: Dec 13 08:36:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f85df0aeadd4273f20b752a7c0d0c6e728649e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:95:32:33:a2:c3:2e:57:f7:54:c3:7c:5d:
                    83:fb:d0:d6:4a:9c:4c:b7:ee:0c:e5:d7:61:e1:36:
                    01:ae:c1:42:c1:c7:10:54:17:da:e5:03:31:44:ef:
                    d5:e9:1f:e7:52:04:9b:c7:c8:f7:14:12:fe:4d:ea:
                    d9:3b:82:4f:62:3a:4b:e8:de:87:e0:5b:e6:96:3f:
                    41:af:55:02:df:35:0b:c2:93:3d:b0:5d:73:28:af:
                    fb:7a:8c:80:d9:f5:1c:2c:88:40:a5:84:aa:51:2c:
                    a9:cc:06:57:2f:35:1b:d0:ed:ae:94:f1:2c:e2:c0:
                    39:6a:2e:fb:68:85:c1:e5:99:76:49:6c:6d:25:5b:
                    e9:88:71:4a:db:c6:9c:85:a7:c2:0e:b8:88:42:1f:
                    58:db:66:af:31:2f:68:17:66:c7:3a:cd:11:25:e7:
                    a0:7c:33:c8:20:a9:c5:a8:6d:82:4c:22:54:ab:38:
                    b2:7c:48:22:6a:ce:31:3a:5e:68:e5:c8:07:ff:46:
                    0b:44:e1:ca:5a:0e:1b:c7:b3:d2:f6:f6:04:6c:ab:
                    49:f6:78:61:2a:7b:8b:0f:23:49:39:e4:bb:03:29:
                    af:07:e8:06:b2:d6:0e:57:50:ca:f6:79:9b:a6:fc:
                    8b:68:a2:5e:35:28:3d:63:08:b1:31:96:7b:23:26:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:85:DF:0A:EA:DD:42:73:F2:0B:75:2A:7C:0D:0C:6E:72:86:49:E0
            X509v3 Authority Key Identifier:
                keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/D4XfCurdQnPyC3UqfA0MbnKGSeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.89.32.0/19
                IPv6:
                  2a00:e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:68:77:7c:1d:c4:8a:f3:d5:f2:13:0a:48:98:8e:7c:12:
         32:a4:9d:00:0e:6b:1b:5c:e8:16:60:04:24:19:d0:7c:02:eb:
         a8:ce:84:32:17:a1:92:22:50:0e:18:34:14:bb:dc:b2:8f:01:
         b1:ff:b4:87:7f:73:3e:d1:77:d5:c9:d1:9a:a1:bf:e8:da:de:
         a4:bb:73:9a:46:b0:24:ad:fa:2a:e8:21:54:22:86:c8:fe:ed:
         51:18:22:79:aa:bb:3f:d1:64:d0:b1:d9:c4:9c:a5:77:af:da:
         d6:a5:1a:77:45:da:54:8f:86:62:3b:9d:6b:2a:78:9c:ca:bc:
         32:e0:cd:79:d0:2f:b0:9c:d0:63:d9:12:6c:46:45:28:17:82:
         62:ae:22:ae:5b:1b:a0:a7:b0:07:cc:76:fc:22:f8:ed:31:46:
         00:0d:b6:fc:0f:5f:13:f0:f9:81:3c:dd:bc:0e:7b:11:ab:15:
         1a:9b:3f:89:16:90:09:3a:56:e8:44:31:6f:46:2a:fd:3c:7b:
         a7:b2:59:2c:3d:32:1b:80:0a:33:44:b3:ab:cb:40:21:4a:ed:
         b3:01:c6:bc:36:ae:0d:ab:78:4f:ad:42:9d:f9:b9:ba:ab:63:
         a1:14:76:d9:6a:da:12:b9:c1:c3:89:1d:d4:e0:67:e1:14:fb:
         e1:dc:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----