Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/oG59KZ8RMnsp672clsDFINRs1KI.roa
File:                     oG59KZ8RMnsp672clsDFINRs1KI.roa (raw, json)
Hash identifier:          RZuoSBaK2dkLCsm48udZoKftQRfGS/W1qe7qltVMvLE=
Subject key identifier:   A0:6E:7D:29:9F:11:32:7B:29:EB:BD:9C:96:C0:C5:20:D4:6C:D4:A2
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       05907965
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/oG59KZ8RMnsp672clsDFINRs1KI.roa
Signing time:             Sat 01 Jan 2022 12:02:17 +0000
ROA not before:           Sat 01 Jan 2022 12:02:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33915
IP address blocks:        194.26.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93354341 (0x5907965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Jan  1 12:02:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a06e7d299f11327b29ebbd9c96c0c520d46cd4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:77:15:67:de:12:13:d5:51:ad:7e:f9:d8:9e:
                    fc:7b:34:36:f6:39:cb:d1:fc:82:a3:e7:86:90:f0:
                    ba:2b:a7:f4:65:a8:bf:8d:5c:ee:e8:63:9a:0d:b9:
                    55:86:05:ee:73:0d:2f:6a:c6:6f:f2:44:e6:6f:ba:
                    2b:65:04:02:e0:0a:b3:d9:67:8f:bd:55:be:36:3d:
                    34:57:13:39:74:36:ba:f3:54:15:95:08:58:e0:6a:
                    50:8a:91:50:f0:11:36:dd:77:44:70:51:22:55:e8:
                    20:23:6f:15:8a:ab:1d:c5:ed:08:09:f4:d8:bf:32:
                    c9:e7:5a:dc:f2:9b:7c:24:5e:00:1d:89:6c:a3:84:
                    6f:59:d5:f1:62:09:0a:a5:f1:c1:df:ce:81:aa:7a:
                    bb:d1:9c:70:a8:d1:c9:96:86:ac:3a:64:65:11:29:
                    47:7b:dd:3b:ef:65:41:02:8e:dc:77:fe:b8:3f:37:
                    89:78:50:57:ca:61:f2:0c:26:fe:2d:d1:4b:1a:94:
                    86:5d:23:ec:e1:52:86:99:86:bf:98:04:a5:a2:12:
                    c3:08:32:73:c8:4a:7c:a8:38:13:3e:d2:86:95:d8:
                    ea:33:0e:f9:1a:41:1c:55:28:fb:41:ab:3d:d3:68:
                    e7:94:06:27:84:e9:5b:6d:86:1e:49:8f:83:55:0c:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6E:7D:29:9F:11:32:7B:29:EB:BD:9C:96:C0:C5:20:D4:6C:D4:A2
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/oG59KZ8RMnsp672clsDFINRs1KI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:d2:ca:af:f8:9c:e3:a6:46:d9:ed:80:5f:81:dd:c1:81:
         81:bb:a1:11:39:91:e2:6d:92:c0:03:24:62:4c:d6:a4:57:53:
         0d:ab:82:cb:24:47:34:44:76:f5:63:92:8e:dc:13:29:22:cf:
         00:1b:71:24:34:13:34:fb:14:9d:44:75:d1:65:03:47:d6:e1:
         6e:27:1b:84:96:b2:29:94:90:c5:ea:c3:66:59:35:f8:6d:34:
         f6:5c:27:4d:0b:1d:fb:9f:e7:27:b8:7f:27:38:d8:6e:dc:42:
         f4:c3:4f:d0:2a:c9:26:62:d5:2f:9e:65:7a:94:c0:07:bf:a3:
         03:34:9b:a6:8f:ac:8e:66:ea:59:ec:21:5a:52:a2:03:27:6f:
         46:f2:d8:19:92:7f:9c:32:d5:d2:79:34:28:12:df:38:ad:72:
         39:e2:74:ea:ce:0e:dd:37:e9:cd:5e:8b:90:97:ca:c5:22:ce:
         10:2b:17:3f:c6:88:85:f9:3a:e4:bb:66:f8:35:8f:b1:d1:7a:
         f4:79:84:2d:bc:d4:0b:b2:f9:f4:0a:46:92:94:38:a8:50:dd:
         7b:94:33:32:be:52:37:f0:4b:ed:bc:69:ee:8e:41:ef:7f:1c:
         27:60:d2:1f:c3:5c:13:51:46:34:a1:68:cb:5f:17:ed:db:81:
         41:cf:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----