Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/MHT2OYC61TacXoMDZqoegzzw3oo.roa
File:                     MHT2OYC61TacXoMDZqoegzzw3oo.roa (raw, json)
Hash identifier:          5fWiuVUWH2TjwdNZ0Nv3kQP+KTxbGvIeI9ICevK8FxY=
Subject key identifier:   30:74:F6:39:80:BA:D5:36:9C:5E:83:03:66:AA:1E:83:3C:F0:DE:8A
Certificate issuer:       /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial:       01AEFF
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/MHT2OYC61TacXoMDZqoegzzw3oo.roa
Signing time:             Tue 26 Apr 2022 14:59:15 +0000
ROA not before:           Tue 26 Apr 2022 14:59:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3303
IP address blocks:        193.73.242.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110335 (0x1aeff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
        Validity
            Not Before: Apr 26 14:59:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3074f63980bad5369c5e830366aa1e833cf0de8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:52:39:e9:9a:7e:80:84:89:f9:30:d1:94:
                    b7:2b:b5:82:11:76:76:48:f5:7e:9c:20:01:22:ea:
                    19:05:71:8b:bd:b3:37:ca:57:93:48:a0:ba:56:df:
                    61:6a:5d:e9:c5:22:90:a6:86:18:a5:bd:73:91:07:
                    c5:28:59:c6:5f:8b:ad:b0:17:2e:f1:88:d4:8a:84:
                    50:cb:9e:08:2b:cb:1e:39:db:28:a5:7f:9d:9d:14:
                    c6:91:3b:9c:72:e6:1e:6a:26:09:df:38:88:18:4a:
                    f6:b7:1d:ca:9a:0d:6c:33:af:9b:b3:0c:3a:e5:e9:
                    29:39:3f:72:b0:19:4a:43:7d:4e:cc:df:8e:99:54:
                    b9:d3:25:44:29:2c:24:17:6e:b2:cf:55:e2:55:6a:
                    0f:e4:f7:6b:25:12:62:52:a3:bf:14:2f:22:4d:3b:
                    e6:ba:d7:cb:d6:0a:26:d8:1f:31:e4:b0:e8:38:b3:
                    46:bf:d5:2d:92:44:47:ba:a6:b5:78:dd:ec:56:07:
                    69:a8:93:ad:5c:41:3f:9d:28:6b:13:6d:c1:65:40:
                    a6:e5:95:b9:10:86:ff:4d:25:6b:1a:c7:ab:81:58:
                    e8:16:89:36:2f:24:9c:5f:00:76:d6:b3:d5:59:c6:
                    7d:27:2a:a8:67:13:f4:53:ad:1f:7f:46:88:9b:86:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:F6:39:80:BA:D5:36:9C:5E:83:03:66:AA:1E:83:3C:F0:DE:8A
            X509v3 Authority Key Identifier:
                keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/MHT2OYC61TacXoMDZqoegzzw3oo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.73.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:6a:af:81:c9:45:ba:8d:2e:3b:4c:0d:a7:b0:0c:bf:a5:c7:
         ea:c7:78:16:fa:25:ae:8d:99:5a:6c:b7:2f:59:d7:06:62:44:
         c9:a0:d1:0c:eb:df:4d:20:75:2a:ff:47:34:6c:e4:12:3c:6f:
         c4:d0:32:c1:76:af:94:cd:04:da:bc:60:d5:2a:c2:11:34:4c:
         db:98:df:9e:d9:0a:c9:dc:2b:d0:24:d7:95:89:27:84:bf:e4:
         84:3d:5e:67:58:a0:52:2d:38:d8:64:58:cd:cb:99:c0:42:12:
         04:47:7a:9f:0a:1c:65:d5:16:a2:91:ce:7c:4c:44:b6:39:bd:
         8c:cc:03:7b:14:96:81:29:95:02:b7:ba:c6:e2:17:77:56:25:
         21:44:2f:15:02:ce:58:46:7d:e6:93:2f:fe:8b:ff:3b:70:71:
         64:81:a9:17:bd:bf:06:a3:e3:83:f5:99:a5:16:d1:1b:f7:a0:
         f3:32:e7:9c:35:34:60:eb:7e:94:de:e2:28:66:c3:66:d3:74:
         dc:4c:b3:4e:a2:e7:f0:2d:a5:c5:cf:25:03:04:9a:0f:eb:2e:
         c2:a7:86:d1:61:f5:6c:65:d9:19:a1:12:4e:9a:45:53:1a:ab:
         57:3b:2a:e9:e6:73:36:df:13:50:da:43:64:c0:5f:9d:81:67:
         26:79:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----