Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/viJre3wBvwPTMgpHe5KpkwPcpqw.roa
File:                     viJre3wBvwPTMgpHe5KpkwPcpqw.roa (raw, json)
Hash identifier:          kX4AH07TmiRb7by9oWrNVJQwpdi2pdTvPnvX/tZAKXI=
Subject key identifier:   BE:22:6B:7B:7C:01:BF:03:D3:32:0A:47:7B:92:A9:93:03:DC:A6:AC
Certificate issuer:       /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial:       0183E5C4A083CAFECDAE552C5EC125AA4E60
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/viJre3wBvwPTMgpHe5KpkwPcpqw.roa
Signing time:             Mon 17 Oct 2022 11:46:51 +0000
ROA not before:           Mon 17 Oct 2022 11:46:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45047
IP address blocks:        93.188.216.128/25 maxlen: 25
                          2a12:9dc0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:c4:a0:83:ca:fe:cd:ae:55:2c:5e:c1:25:aa:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
        Validity
            Not Before: Oct 17 11:46:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be226b7b7c01bf03d3320a477b92a99303dca6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:17:fc:38:51:af:a6:00:f5:34:be:4e:aa:
                    1d:5e:61:77:4d:11:b7:cd:ae:2e:7d:6c:0d:e0:be:
                    0b:c7:f4:43:5c:6b:04:1c:6a:10:3f:47:67:37:fb:
                    11:2e:25:3b:d9:d5:ed:0c:1b:21:e5:bb:d5:0f:5e:
                    f2:f9:44:07:ee:9b:a1:4e:89:62:e3:f9:a8:97:11:
                    e9:4d:79:bc:5e:78:55:12:4e:de:30:c9:0a:b0:bf:
                    18:e5:25:29:91:8b:97:40:f2:3a:19:71:77:d7:25:
                    b1:f8:d3:dc:d2:57:64:19:ad:b6:f8:08:de:05:43:
                    b9:97:74:c7:0b:33:cf:45:c1:f8:2f:e7:4e:c0:89:
                    a5:1a:49:9b:d3:7e:75:03:4a:d6:8f:29:51:ef:3d:
                    fa:56:90:1c:aa:55:6c:15:82:26:f1:83:7e:81:18:
                    2c:6e:b1:cd:8f:f8:0b:ce:f6:3d:95:85:5e:3c:bc:
                    1f:dc:3e:dc:dc:bb:17:54:69:ec:75:fe:82:cd:dd:
                    46:2f:0a:5f:c3:79:9b:dc:e3:46:2c:b8:8b:ea:8d:
                    26:55:37:3c:c1:e2:68:2d:e8:f6:95:41:91:15:47:
                    70:b9:bd:a5:16:85:34:b2:bc:d4:05:84:b3:cb:96:
                    36:99:f8:a1:15:62:fb:93:ad:b9:02:71:4e:c3:cf:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:22:6B:7B:7C:01:BF:03:D3:32:0A:47:7B:92:A9:93:03:DC:A6:AC
            X509v3 Authority Key Identifier:
                keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/viJre3wBvwPTMgpHe5KpkwPcpqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.188.216.128/25
                IPv6:
                  2a12:9dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:73:83:25:b6:71:46:3b:61:5f:11:10:b9:ac:7a:d4:fb:
         e7:f3:09:dc:0b:55:ef:ea:05:bc:c9:41:55:46:da:2c:20:a0:
         71:08:8f:62:29:eb:b6:ba:7e:c9:2e:7b:01:71:59:4c:4e:e8:
         00:50:7c:6a:1c:4e:29:5c:f8:b0:0e:54:06:63:68:1e:f0:a1:
         80:e9:ee:63:3a:2c:6d:86:f9:8a:e3:44:e8:5c:a9:c1:88:59:
         fb:83:d8:02:0e:ee:0d:49:eb:03:53:50:45:44:ba:73:7a:a2:
         8b:d7:ea:fa:1b:ea:9c:62:b5:e9:7e:f0:3f:9c:82:22:22:dd:
         71:0d:bb:1e:f1:e0:18:ff:ec:dd:9e:ab:90:60:43:8d:ed:01:
         b8:b8:a7:30:2e:07:2a:f1:17:04:07:9b:fc:19:b5:57:40:0f:
         0a:50:5c:ad:48:d1:3f:b4:2f:53:4a:53:f9:58:5c:2d:0f:e1:
         19:40:ab:21:b5:b5:46:4f:c9:96:79:05:37:95:be:b5:c8:0a:
         74:e9:fa:6b:e5:b4:2e:3a:28:65:63:8b:2d:f8:33:7f:46:48:
         67:ca:a9:7c:0e:ec:f0:97:c5:36:ba:84:37:54:6f:97:80:53:
         4d:cb:0e:a5:d9:90:b8:72:bc:ee:f2:ef:4e:61:44:81:47:a3:
         f9:c0:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----