Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/99NFL9-_0OusceU0LCIOghk5hKE.roa
File:                     99NFL9-_0OusceU0LCIOghk5hKE.roa (raw, json)
Hash identifier:          m9xZiqh5j1K/XTffwfnm8lQ94ejI/diZawjohbqV4sw=
Subject key identifier:   F7:D3:45:2F:DF:BF:D0:EB:AC:71:E5:34:2C:22:0E:82:19:39:84:A1
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       1BD7A6B1
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/99NFL9-_0OusceU0LCIOghk5hKE.roa
Signing time:             Thu 31 Mar 2022 08:24:49 +0000
ROA not before:           Thu 31 Mar 2022 08:24:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        194.149.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467117745 (0x1bd7a6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: Mar 31 08:24:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7d3452fdfbfd0ebac71e5342c220e82193984a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:d8:4c:5b:72:eb:80:7c:bd:cb:85:6a:88:
                    1a:c6:91:e5:85:01:61:0c:9a:dd:09:fe:01:a2:39:
                    39:3f:96:2e:9c:96:c0:70:98:6f:78:5d:af:2c:b6:
                    0f:d1:8a:0a:e4:44:d6:51:5f:0a:d9:df:a4:21:32:
                    5d:3b:39:da:6e:23:18:b7:48:0f:57:d7:00:5a:e3:
                    f6:90:f8:a1:2e:27:c8:b7:48:dc:7b:69:7a:c0:a4:
                    79:4d:37:3f:72:80:ad:5a:06:81:87:b3:9b:45:d6:
                    c1:c1:19:74:80:cb:1c:64:93:17:c9:76:ea:f7:41:
                    c5:42:3c:92:82:b8:01:80:ae:3f:dd:cb:50:f1:5b:
                    ad:15:39:9a:a7:da:42:59:ff:77:60:12:62:bb:dd:
                    2f:e1:eb:dc:ed:5a:7d:48:5f:43:18:03:6f:46:c0:
                    17:4d:b8:87:04:d3:9c:3b:bf:60:e3:ca:74:bb:24:
                    64:17:27:2b:4f:1c:a2:9d:bc:07:45:c0:a5:cc:36:
                    ce:f4:c0:8c:d9:e6:5f:bb:cf:bb:ba:f6:60:2b:50:
                    d6:50:31:49:a4:6d:be:59:fc:42:6e:c4:7d:6e:9f:
                    76:23:f0:9b:5f:96:3f:e5:d6:29:40:9b:fa:ba:7c:
                    6f:88:ce:fb:34:a5:8b:e3:40:89:a8:f5:0b:16:62:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:45:2F:DF:BF:D0:EB:AC:71:E5:34:2C:22:0E:82:19:39:84:A1
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/99NFL9-_0OusceU0LCIOghk5hKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.149.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:58:46:94:99:a7:9d:6c:4e:d0:83:46:36:f7:ad:7b:c9:93:
         a5:1f:07:de:99:37:97:03:87:a6:bf:35:1d:d3:ac:cf:17:b6:
         d0:4c:32:cb:7d:a8:41:ee:d7:88:27:7a:40:1f:15:35:e9:63:
         36:93:b0:cd:9f:2f:62:00:6f:15:1e:fb:11:32:bc:ec:1b:78:
         43:e7:6c:b9:db:6c:31:f3:e5:99:cd:ec:d3:ba:ec:d6:96:60:
         af:36:a5:2a:39:49:4f:63:f0:9e:b2:9e:19:58:26:dd:1e:90:
         ca:ad:4a:e6:35:71:c3:5b:15:b1:1e:c9:08:47:1c:54:d1:03:
         d6:d9:ed:af:a1:11:16:51:6d:e7:42:ac:0b:d6:2a:a8:7d:5f:
         ce:70:9e:e6:6a:af:9a:3c:a1:27:f3:89:17:fd:3e:6f:3d:e1:
         e8:8a:77:25:6b:c8:5c:4a:23:aa:ea:71:70:72:85:99:1a:e1:
         7d:bc:12:09:cc:99:20:6a:db:d6:ee:31:87:55:92:1b:69:49:
         27:95:20:ff:dc:99:82:cf:cc:81:1c:56:f0:4d:38:04:4f:84:
         6f:e2:98:0d:85:ea:db:d7:b1:8a:1e:1b:34:ef:84:34:19:b0:
         23:bd:26:b1:98:98:15:44:af:2b:03:5d:95:ed:ec:ce:6f:ef:
         eb:81:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----