Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/tdm3A0MCGkJgxI2RXjF93-2Xso8.roa
File:                     tdm3A0MCGkJgxI2RXjF93-2Xso8.roa (raw, json)
Hash identifier:          hEcbXKlJsSmsIJ1pKgGiIH8wuApniD8x4/+FrRk0CZI=
Subject key identifier:   B5:D9:B7:03:43:02:1A:42:60:C4:8D:91:5E:31:7D:DF:ED:97:B2:8F
Certificate issuer:       /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial:       54C93D
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/tdm3A0MCGkJgxI2RXjF93-2Xso8.roa
Signing time:             Tue 22 Feb 2022 09:02:27 +0000
ROA not before:           Tue 22 Feb 2022 09:02:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43500
IP address blocks:        195.189.144.0/24 maxlen: 24
                          2a12:b40::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5556541 (0x54c93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
        Validity
            Not Before: Feb 22 09:02:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5d9b70343021a4260c48d915e317ddfed97b28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:e3:0f:1a:e2:f2:d3:b7:89:8c:24:d5:19:
                    5f:cb:01:ae:32:b7:50:97:1f:5d:27:49:80:c3:a1:
                    6a:83:d5:2d:e4:cd:4e:c6:f8:e8:a2:21:ff:44:80:
                    3f:0f:f8:7b:20:23:4d:d1:40:d2:49:0d:b7:e3:2f:
                    a2:13:bc:c2:1b:4f:62:27:c4:1c:5a:24:32:1d:99:
                    2f:03:23:fc:15:21:2f:02:77:3c:59:9b:64:31:b1:
                    e8:a8:e1:70:33:e6:cf:75:53:ae:73:f5:2f:f2:b0:
                    65:d2:22:69:22:1a:d3:8a:bb:60:08:4f:01:c5:2a:
                    ec:33:11:14:57:79:48:f9:58:92:2b:99:d3:05:de:
                    95:e7:ee:51:5f:23:58:a0:45:f8:3a:37:5c:b8:a3:
                    b0:2c:ab:9b:4b:29:a5:a7:26:ce:d3:ad:d4:0d:08:
                    cc:6f:0e:9d:af:bb:52:02:a2:72:c9:89:ea:a2:eb:
                    24:b1:41:30:18:e4:16:f9:f7:71:4f:f1:42:9e:8d:
                    bb:91:bc:3d:02:04:4d:5c:29:46:cb:bc:22:01:ad:
                    9b:38:9c:70:64:f8:97:85:08:d5:a2:b1:0b:99:08:
                    c5:62:9f:46:15:86:7e:2e:64:67:42:6c:17:41:e5:
                    4e:f9:78:3a:52:8b:02:1b:45:7f:90:55:b9:e8:3c:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D9:B7:03:43:02:1A:42:60:C4:8D:91:5E:31:7D:DF:ED:97:B2:8F
            X509v3 Authority Key Identifier:
                keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/tdm3A0MCGkJgxI2RXjF93-2Xso8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.144.0/24
                IPv6:
                  2a12:b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:48:f8:d3:cd:18:4c:95:88:e7:5d:d4:fd:0f:45:12:53:75:
         2f:dd:13:8f:a2:c9:41:d3:b3:fb:ac:fa:ed:b0:c5:d6:2b:ce:
         32:76:66:5c:88:be:5e:92:bf:76:af:3a:f7:4b:60:df:a8:05:
         3b:22:ee:24:21:b4:a7:e8:33:86:d0:01:0e:d8:18:0a:dd:ef:
         3e:14:9c:07:8a:dc:f4:52:c6:29:97:03:82:24:4d:ba:0f:62:
         9b:a6:6d:e7:c1:e3:13:4d:3e:2c:64:49:48:8c:d4:39:62:d5:
         c6:5e:a3:4c:44:df:1d:35:bd:4e:bf:14:1a:45:17:35:4d:9f:
         dc:91:30:b1:1f:a3:f4:27:aa:cc:a1:34:ce:bc:1b:83:5d:58:
         e7:64:2b:55:da:53:a6:de:0b:db:16:b6:99:24:d9:3b:d1:f4:
         c8:87:79:e6:7b:61:dd:1b:63:62:c0:ad:aa:2a:ab:3a:48:de:
         92:67:3c:7f:a8:1b:6c:80:3a:6c:cc:e0:61:77:7a:03:41:2b:
         bc:05:97:0e:a2:7f:f7:5b:a7:7b:01:9a:08:ec:1b:66:e1:66:
         b3:a3:25:4b:01:c9:9f:00:42:44:82:d5:81:f1:a6:1b:04:1d:
         05:a4:8b:9c:e0:32:02:62:b4:4d:4e:b8:81:c5:f4:af:9e:32:
         15:2d:62:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----