Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5170f2-fb23-4a72-bd81-65f0f2cee9af/1/1-WvszbSi8qz5SGgmVAfhRIf419I.roa
File:                     1-WvszbSi8qz5SGgmVAfhRIf419I.roa (raw, json)
Hash identifier:          Gg3egEj6Rg8i4Ioo+oWeLoN6S+6ymV4in5gC4rMNsQY=
Subject key identifier:   F9:6B:EC:CD:B4:A2:F2:AC:F9:48:68:26:54:07:E1:44:87:F8:D7:D2
Certificate issuer:       /CN=040438fe9f7aa4dd740710ed25e91e1738778c9b
Certificate serial:       A181BB
Authority key identifier: 04:04:38:FE:9F:7A:A4:DD:74:07:10:ED:25:E9:1E:17:38:77:8C:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BAQ4_p96pN10BxDtJekeFzh3jJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/5170f2-fb23-4a72-bd81-65f0f2cee9af/1/1-WvszbSi8qz5SGgmVAfhRIf419I.roa
Signing time:             Sat 01 Jan 2022 01:55:41 +0000
ROA not before:           Sat 01 Jan 2022 01:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62068
IP address blocks:        91.226.227.0/24 maxlen: 24
                          2a11:b240::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10584507 (0xa181bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040438fe9f7aa4dd740710ed25e91e1738778c9b
        Validity
            Not Before: Jan  1 01:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f96beccdb4a2f2acf94868265407e14487f8d7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:ec:a5:5a:51:94:91:bd:57:23:a9:45:6a:
                    24:eb:60:6f:3f:99:1a:9d:6f:85:70:57:2f:63:dd:
                    27:d2:c5:2f:63:f9:c3:52:b2:a9:6c:93:c4:f6:21:
                    33:5e:5a:f4:a5:dc:0a:9f:07:e6:54:1a:a5:47:56:
                    88:2f:90:c5:41:ee:ab:0f:52:e7:f0:3b:39:b3:d3:
                    1a:2f:57:07:cf:3e:d2:0a:61:87:6f:92:41:c4:ea:
                    af:20:d5:ad:53:5a:89:eb:83:c7:72:ae:9f:c4:59:
                    65:71:18:73:52:ad:b9:51:4b:99:f8:fd:9a:df:12:
                    b5:81:5e:6b:b3:80:cc:10:d3:84:b4:d9:a5:19:c9:
                    9b:10:bc:f6:87:30:29:fc:fc:42:78:16:1f:9c:d8:
                    f3:59:d6:d5:ff:50:ed:75:b5:89:7a:87:f1:43:ec:
                    3b:67:6b:e1:fe:a1:b4:c4:2c:9e:c6:1e:93:b3:a6:
                    80:2f:0c:02:c9:4c:bf:94:17:27:b0:2c:8d:56:b9:
                    e4:df:b0:d4:38:e5:86:ac:b9:87:f5:e7:d9:63:5c:
                    ca:24:86:0c:2c:ec:00:bd:a9:eb:09:bc:ca:6e:d6:
                    21:ac:d5:63:dd:74:09:e0:36:22:be:b0:ad:77:49:
                    ba:f6:4d:93:e0:f0:eb:2d:69:6e:b9:9e:8b:eb:1a:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6B:EC:CD:B4:A2:F2:AC:F9:48:68:26:54:07:E1:44:87:F8:D7:D2
            X509v3 Authority Key Identifier:
                keyid:04:04:38:FE:9F:7A:A4:DD:74:07:10:ED:25:E9:1E:17:38:77:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAQ4_p96pN10BxDtJekeFzh3jJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5170f2-fb23-4a72-bd81-65f0f2cee9af/1/1-WvszbSi8qz5SGgmVAfhRIf419I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5170f2-fb23-4a72-bd81-65f0f2cee9af/1/BAQ4_p96pN10BxDtJekeFzh3jJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.227.0/24
                IPv6:
                  2a11:b240::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:e8:4a:c5:76:50:fb:0f:3a:20:13:8a:46:04:b2:6e:2c:
         3f:d0:dc:95:9b:fb:7b:83:28:60:f4:15:f4:30:65:86:07:a9:
         9d:c7:52:aa:37:fd:3d:79:73:31:80:89:ef:63:ff:84:fe:ee:
         17:c1:68:5a:27:1f:7a:8d:dd:ab:80:97:a3:72:1f:15:ef:67:
         3f:69:4e:3f:3c:38:0f:2d:dd:f9:ca:fc:a1:04:db:34:ff:1a:
         bc:7c:97:28:96:e6:31:65:df:8c:27:96:9e:90:c5:9b:63:58:
         bc:91:3b:d4:0b:be:b5:34:90:03:1d:e8:a8:81:01:53:2e:e0:
         9c:bd:74:20:e3:20:83:25:37:0f:95:74:fa:4a:96:24:f2:3d:
         6d:81:7e:88:6f:da:d2:6e:dc:2b:d8:67:23:d9:ab:fc:84:e4:
         ed:94:bb:2b:92:77:3e:78:78:4f:28:ea:86:08:ea:f3:9d:f1:
         99:10:66:df:ea:fe:09:4a:19:d1:8e:a5:0f:c3:f6:f7:ed:7b:
         0f:89:23:5e:ce:85:3e:a7:fe:3e:81:63:ce:65:50:06:c1:03:
         a8:87:de:1f:04:2a:90:c4:2a:61:7d:61:2d:cb:6f:70:47:da:
         8c:62:c2:a8:8c:e4:53:4b:79:2e:47:13:c9:6f:c6:cd:a6:d5:
         27:c9:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----