Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/NSJtkB4gwpIAplQpTsia-qtsAAc.roa
File:                     NSJtkB4gwpIAplQpTsia-qtsAAc.roa (raw, json)
Hash identifier:          SxiOFoXcY1+xnBP/F91wwV4kUU9ogZNiEZa+vIhclkw=
Subject key identifier:   35:22:6D:90:1E:20:C2:92:00:A6:54:29:4E:C8:9A:FA:AB:6C:00:07
Certificate issuer:       /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial:       0480EDC5
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/NSJtkB4gwpIAplQpTsia-qtsAAc.roa
Signing time:             Sat 01 Jan 2022 16:07:28 +0000
ROA not before:           Sat 01 Jan 2022 16:07:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213111
IP address blocks:        93.177.82.0/24 maxlen: 24
                          2a0a:e540::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75558341 (0x480edc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
        Validity
            Not Before: Jan  1 16:07:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=35226d901e20c29200a654294ec89afaab6c0007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:88:c3:fe:02:72:c2:c4:3b:a9:b3:89:a8:
                    1d:de:ec:ba:d1:49:49:d1:30:04:b7:15:3f:1d:b3:
                    04:04:34:02:ae:60:09:03:b4:d5:4e:1b:b8:ac:d4:
                    4d:e5:48:d5:bc:4b:0c:ff:5d:bb:75:35:37:1d:74:
                    27:0f:d6:f4:45:f8:bb:04:a7:e3:80:43:21:39:e4:
                    57:d7:c7:cb:97:0e:93:21:78:cc:b9:89:c2:8a:68:
                    09:cf:ae:59:42:04:49:cf:b7:a6:ec:40:56:4b:9f:
                    bd:ef:24:6a:df:b5:33:b7:f3:72:09:31:55:c1:bc:
                    08:1f:14:f7:5b:60:70:23:77:c6:ed:5e:9f:34:d4:
                    69:75:fa:27:85:81:3f:d4:5e:bd:7c:24:15:98:df:
                    70:f8:9f:91:b1:aa:78:58:54:18:0c:ec:55:83:ad:
                    4f:94:ae:d3:8d:fd:ff:08:c0:be:2e:c7:37:05:65:
                    4e:06:31:bc:37:ad:f5:0e:d5:e1:de:ff:9f:29:34:
                    94:ce:9a:85:17:18:4e:47:72:d5:1e:c0:48:e7:dc:
                    0a:f2:dd:9c:d9:87:2b:aa:39:6e:eb:ed:f5:b6:a0:
                    5c:37:38:14:d9:93:fd:4d:75:18:71:89:c6:dd:e5:
                    62:49:74:67:03:53:ae:50:82:11:78:a6:bd:a3:9b:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:6D:90:1E:20:C2:92:00:A6:54:29:4E:C8:9A:FA:AB:6C:00:07
            X509v3 Authority Key Identifier:
                keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/NSJtkB4gwpIAplQpTsia-qtsAAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.82.0/24
                IPv6:
                  2a0a:e540::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:56:f9:23:99:8a:a8:c3:a8:d8:bd:38:e4:4c:63:63:de:b9:
         c7:50:be:d0:ef:a4:35:5b:ac:71:a5:fd:fb:52:27:41:4e:8d:
         3b:79:93:f6:40:cd:71:7f:d5:34:e3:61:22:92:92:73:15:8a:
         d5:c1:22:b8:08:71:14:29:a6:9f:88:4d:34:a5:28:18:d7:80:
         28:3c:34:d0:67:06:4b:67:3a:de:55:26:a3:74:37:38:ff:a2:
         0d:44:fd:97:ec:04:16:d6:87:38:30:53:70:20:b5:5e:2b:36:
         82:c6:d9:81:10:5e:7d:85:38:6f:5b:03:76:cb:1f:58:55:b7:
         d5:b8:78:f3:b7:50:49:e8:ae:8a:6d:b7:9a:19:be:b8:eb:e7:
         c1:44:af:9e:d3:5a:05:ee:0e:b7:5b:f5:b2:83:e6:ac:a8:ec:
         99:b2:af:ef:ca:15:84:3f:e7:dc:c2:e0:a4:ba:7a:89:0a:7a:
         53:69:60:91:03:1e:a5:86:df:76:c5:34:7f:37:5f:0a:49:e5:
         1a:de:33:25:1c:ec:d9:b2:2e:33:79:79:a4:fc:6c:cb:4b:10:
         3e:42:19:ce:49:cd:e0:49:f8:31:7b:b8:cf:d0:ab:99:c3:30:
         10:31:56:68:7d:51:5f:82:5f:d2:4f:be:49:8f:65:4a:c5:93:
         17:0b:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----