Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/teQjbG0IAsYm3HBwCHKZWgL_ipI.roa
File:                     teQjbG0IAsYm3HBwCHKZWgL_ipI.roa (raw, json)
Hash identifier:          HiY1B7xNnTXdasBq+t9E04gsi5X3VIEHpnXaIyERi5M=
Subject key identifier:   B5:E4:23:6C:6D:08:02:C6:26:DC:70:70:08:72:99:5A:02:FF:8A:92
Certificate issuer:       /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial:       02F118
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/teQjbG0IAsYm3HBwCHKZWgL_ipI.roa
Signing time:             Thu 28 Apr 2022 09:36:13 +0000
ROA not before:           Thu 28 Apr 2022 09:36:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57459
IP address blocks:        193.222.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192792 (0x2f118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
        Validity
            Not Before: Apr 28 09:36:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5e4236c6d0802c626dc70700872995a02ff8a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:85:6d:14:49:06:0f:26:d9:8c:32:b5:d9:
                    7c:07:3b:6f:6d:e9:8d:b4:9f:ac:da:7b:30:ee:55:
                    33:18:d6:59:0d:76:4f:54:ab:31:66:3f:13:60:56:
                    23:44:94:d5:58:69:3e:2a:20:dc:e7:0e:32:27:10:
                    1a:3b:36:82:9b:c6:b6:ae:d8:16:35:c5:ab:fb:2a:
                    3f:46:d3:f4:58:30:80:61:04:45:d6:64:2e:27:2d:
                    ff:b4:1e:da:c2:18:18:9d:a2:16:3d:93:ca:d8:64:
                    8a:27:6f:23:02:82:d8:ff:f2:75:41:8d:b0:cc:76:
                    a2:12:66:07:e5:e4:30:5f:03:f3:86:8f:61:c2:a5:
                    94:0a:4f:b5:40:81:6d:67:81:fa:79:ac:72:5d:f4:
                    72:41:cf:48:49:54:f2:b7:6a:34:da:40:ca:cb:9d:
                    02:44:bd:c1:a5:38:7f:73:70:74:b9:3c:aa:e3:11:
                    72:d0:a9:c3:c6:dd:61:38:59:7d:f3:b1:e3:98:fb:
                    11:dc:ed:c0:03:8a:c8:04:ca:e9:e4:fc:e6:bb:db:
                    ad:48:b2:20:74:5c:77:ca:15:77:40:db:8b:fa:99:
                    29:79:17:74:42:06:a7:cc:a2:10:01:98:91:97:69:
                    ae:63:3e:ec:0c:80:dc:11:c4:76:f6:3d:84:f7:e6:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E4:23:6C:6D:08:02:C6:26:DC:70:70:08:72:99:5A:02:FF:8A:92
            X509v3 Authority Key Identifier:
                keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/teQjbG0IAsYm3HBwCHKZWgL_ipI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d1:69:c8:c2:29:68:b9:84:1f:2d:1e:33:df:29:10:ed:b0:
         ad:fe:47:81:6f:5e:4a:5f:ad:bc:12:6d:03:bd:33:7e:e9:73:
         67:ac:35:3a:b9:78:c4:e6:66:2d:32:04:70:d7:91:22:45:4b:
         ae:2f:69:fa:32:f4:72:1a:be:e4:d4:cc:22:e4:d6:19:61:f1:
         33:3b:90:68:fb:8d:c0:7e:cc:dc:69:e9:c0:bd:84:1b:5c:d4:
         bf:6c:65:0b:50:09:72:01:88:8b:5c:b6:9f:0e:26:74:80:52:
         94:a6:6b:e0:c9:60:a9:a9:59:96:2e:e7:18:50:0d:ec:66:f6:
         0b:26:47:25:2f:a5:c1:fb:4d:d8:61:75:78:18:da:d8:13:ea:
         cc:db:0e:93:e3:88:46:8c:e6:a8:32:3e:ed:89:b0:eb:10:b1:
         5a:26:e8:79:3a:58:37:e8:05:74:6e:59:41:5f:91:ce:84:b1:
         84:1f:d6:e2:44:17:e3:52:34:30:cc:be:e5:78:20:15:54:59:
         e1:20:16:34:4d:42:7c:ac:57:4c:97:6e:01:97:b6:52:3f:53:
         9d:c0:5d:82:2d:72:d5:a2:c6:6b:7b:af:31:33:b9:67:47:cc:
         ba:b6:7d:16:08:33:16:a3:9c:63:12:6d:3f:20:fd:3f:52:d2:
         72:5e:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----