Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/BTNc0alJTw1jiQCgEw98slhShBU.roa
File:                     BTNc0alJTw1jiQCgEw98slhShBU.roa (raw, json)
Hash identifier:          iqMtXadxjZFUnbueVFoWO1Xx76FBkC1l5MSqzKgp2JE=
Subject key identifier:   05:33:5C:D1:A9:49:4F:0D:63:89:00:A0:13:0F:7C:B2:58:52:84:15
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       0184D2D77E2D0E8F28CBEC3AD3B471ACF65C
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/BTNc0alJTw1jiQCgEw98slhShBU.roa
Signing time:             Fri 02 Dec 2022 12:37:28 +0000
ROA not before:           Fri 02 Dec 2022 12:37:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        93.94.3.0/24 maxlen: 24
                          2a03:1e03::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d2:d7:7e:2d:0e:8f:28:cb:ec:3a:d3:b4:71:ac:f6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: Dec  2 12:37:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05335cd1a9494f0d638900a0130f7cb258528415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:04:c8:cb:11:cd:3a:0f:0c:c3:9a:69:04:
                    63:93:8c:78:05:01:0f:79:3e:c7:5e:ed:54:9b:89:
                    a0:a5:ff:48:02:c5:49:59:b7:84:01:23:df:a5:4e:
                    a0:7d:8a:b0:79:8a:a6:ab:8f:b8:4f:11:64:8e:23:
                    cd:41:6a:d0:0f:79:00:ec:73:ea:bd:dd:7f:80:c6:
                    f1:a5:e6:7e:49:bd:11:20:00:ae:b7:c6:9f:e3:e6:
                    28:81:03:e5:98:31:d9:3d:9b:84:df:be:6d:98:b7:
                    0f:47:de:18:de:19:e6:12:ba:d5:f4:ff:13:39:74:
                    25:f9:0f:b7:94:29:63:8c:19:d9:8a:84:03:6d:58:
                    e0:79:cb:cb:1d:de:4f:86:02:42:0f:b1:12:99:1d:
                    a8:60:e2:c4:b6:3a:89:38:5c:73:33:ca:b1:fd:9c:
                    47:87:d6:b1:ba:90:17:9c:55:04:6b:b2:cd:5a:24:
                    d0:77:b7:d2:61:8c:45:7b:76:08:92:63:eb:7a:59:
                    13:be:16:7a:42:13:f5:cc:60:3b:9d:6c:d3:94:f2:
                    59:40:57:7e:2e:f5:fc:6e:29:df:06:c9:57:7e:cb:
                    b8:00:06:59:9d:2e:54:59:f4:ff:f2:81:55:58:c2:
                    09:ed:39:1f:cc:0e:51:c2:4d:b7:dd:b6:dd:5c:5d:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:33:5C:D1:A9:49:4F:0D:63:89:00:A0:13:0F:7C:B2:58:52:84:15
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/BTNc0alJTw1jiQCgEw98slhShBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.94.3.0/24
                IPv6:
                  2a03:1e03::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:41:00:ee:f5:e2:cd:66:de:c1:c6:54:68:d9:56:4a:07:
         45:7f:fb:4e:86:81:e6:7f:77:0a:fa:64:93:28:49:2c:0f:26:
         98:8f:84:94:b5:56:0d:0a:78:0a:28:2b:21:02:9e:50:c9:c4:
         77:b3:60:4f:43:79:e4:f5:e5:9e:4e:03:32:39:74:18:1f:21:
         5f:cc:37:f5:2a:40:5e:df:3d:23:3b:a9:94:b7:6f:db:19:16:
         5f:2b:f6:8a:01:f0:54:1a:85:08:36:c3:26:b9:ec:e3:3a:80:
         a6:24:0e:70:2e:58:cd:f3:1f:9e:8a:bb:8c:72:94:5e:8c:32:
         a1:67:0d:9c:89:64:76:76:43:20:cc:2f:13:f1:fc:11:4f:8b:
         56:00:00:ef:c2:26:0b:9c:77:c0:a7:01:d5:cf:ec:85:b4:02:
         a4:88:b0:4e:9d:15:f6:51:24:6e:3d:45:75:a8:7c:ec:de:eb:
         f0:25:4b:ef:ea:c4:0d:8d:df:fd:7e:22:c7:b8:fa:e7:b2:a3:
         e9:ff:e2:69:12:00:c5:7c:e8:b1:f9:f3:3c:1d:3a:ba:38:a6:
         75:43:8d:62:85:0a:26:19:fa:0e:ec:fd:ba:6f:a4:55:86:92:
         b9:a6:55:44:18:00:b3:72:97:c7:84:03:05:e1:d0:d9:a2:a2:
         7b:7a:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----