Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/7HUd5Efvp0wDlGTdixwPUYYcWAg.roa
File:                     7HUd5Efvp0wDlGTdixwPUYYcWAg.roa (raw, json)
Hash identifier:          zUe/w1XHeZOd+k1dygkQeJ7ILFWN35VPCHSFyCr6/YU=
Subject key identifier:   EC:75:1D:E4:47:EF:A7:4C:03:94:64:DD:8B:1C:0F:51:86:1C:58:08
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       01821AED1C5991B6A575603D2E46B529A4BB
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/7HUd5Efvp0wDlGTdixwPUYYcWAg.roa
Signing time:             Wed 20 Jul 2022 09:25:23 +0000
ROA not before:           Wed 20 Jul 2022 09:25:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50209
IP address blocks:        193.104.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1a:ed:1c:59:91:b6:a5:75:60:3d:2e:46:b5:29:a4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Jul 20 09:25:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec751de447efa74c039464dd8b1c0f51861c5808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bc:2e:b9:da:dd:2a:18:eb:64:3b:c6:3e:80:
                    2b:ea:bb:80:e5:5a:14:80:8d:1a:89:26:c6:8c:78:
                    43:97:b9:49:75:c3:20:88:fb:4d:85:5e:5d:ea:b0:
                    ad:dd:0b:ad:ea:61:c1:ed:b7:99:88:af:b7:c4:47:
                    b8:2a:b2:ec:8f:51:fc:83:b1:af:68:ff:97:1c:5d:
                    2d:10:f1:e8:ad:29:88:b0:10:7c:fb:8f:8b:1b:e0:
                    0b:f0:f7:f3:71:46:e3:08:97:b6:c7:48:46:ba:49:
                    a8:00:5f:d2:c8:4a:c0:e8:4a:90:40:34:4b:27:f2:
                    03:05:ca:8e:ea:e8:85:d2:3e:84:17:9e:5a:ca:0b:
                    4e:75:46:be:df:5c:44:6c:e4:73:00:2e:26:ee:20:
                    fb:02:2a:5b:e1:8e:13:d1:cb:2d:d3:7c:2f:6c:1f:
                    df:a1:78:a3:85:2a:67:71:28:8d:5f:e0:b3:89:8a:
                    5a:1e:73:85:2f:60:e8:c3:1c:2c:7a:f3:94:4f:0e:
                    eb:06:4d:6e:b9:be:39:6f:73:26:44:2d:92:a5:29:
                    b9:68:cb:28:38:c0:92:c6:9f:2d:6d:13:9f:d5:5d:
                    c9:48:ab:ef:88:71:c6:0b:85:e0:19:3b:3a:44:1c:
                    de:5c:cf:56:11:81:4b:db:68:41:c6:e3:ed:ef:1f:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:1D:E4:47:EF:A7:4C:03:94:64:DD:8B:1C:0F:51:86:1C:58:08
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/7HUd5Efvp0wDlGTdixwPUYYcWAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:72:bb:a0:d2:d4:24:bb:83:a2:e9:98:88:e5:3d:cd:d8:6d:
         18:d0:e6:48:4d:c5:57:d3:60:3c:f2:d3:2f:a6:69:2e:15:b3:
         8f:d9:ac:97:96:98:8f:2b:fe:96:d0:1b:13:60:bd:f5:f8:ed:
         b6:b6:aa:5e:c2:93:18:aa:ab:9c:0e:90:87:7d:f2:f0:65:8b:
         1e:23:32:28:03:c6:46:ce:d8:1e:ad:40:75:d5:cd:e5:d4:43:
         f1:98:60:d6:f6:ae:02:2e:ef:28:1d:36:13:bf:77:4d:6d:37:
         e5:f6:96:18:47:35:0a:a7:12:d9:d6:46:4c:6a:bd:67:c4:06:
         bb:72:a3:6b:e2:64:db:54:4c:78:58:cd:3b:19:10:ef:00:fe:
         a6:e7:ea:93:6c:d7:b6:2a:29:ff:d7:ee:84:d7:1a:12:49:e2:
         9e:f1:69:80:46:5b:84:16:75:f8:a4:b7:d6:c3:51:35:42:0c:
         09:ce:6e:60:c9:1b:ab:7d:f1:1b:4e:44:a4:79:de:b5:8f:9e:
         63:37:02:d0:01:3a:98:65:6a:de:2e:40:6f:3f:fb:a4:6c:83:
         08:ca:05:2e:0d:2b:bf:58:d3:fc:89:da:27:61:34:33:d4:51:
         fb:3c:bb:eb:73:2a:91:bb:67:49:11:ac:be:ef:7f:41:e6:58:
         a1:ad:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----