Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/NQjd-ZE9xv71PboA-m6EhO7hzO8.roa
File:                     NQjd-ZE9xv71PboA-m6EhO7hzO8.roa (raw, json)
Hash identifier:          1+tHklYmaLkHnlUK9GfJmK98UVbligttJ1Q8U3Zh2dA=
Subject key identifier:   35:08:DD:F9:91:3D:C6:FE:F5:3D:BA:00:FA:6E:84:84:EE:E1:CC:EF
Certificate issuer:       /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial:       108575
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/NQjd-ZE9xv71PboA-m6EhO7hzO8.roa
Signing time:             Tue 15 Mar 2022 14:31:25 +0000
ROA not before:           Tue 15 Mar 2022 14:31:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208309
IP address blocks:        91.231.34.0/24 maxlen: 24
                          2a12:88c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082741 (0x108575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
        Validity
            Not Before: Mar 15 14:31:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3508ddf9913dc6fef53dba00fa6e8484eee1ccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:b6:5a:f5:5c:c0:c0:75:9f:8f:59:c3:ee:
                    43:bd:92:ac:bb:7a:5b:05:7e:27:ad:bc:23:f4:d3:
                    ee:c9:ca:bb:c2:75:e0:d6:82:3d:85:c0:10:db:7f:
                    0a:f7:54:61:f6:03:30:33:2a:0f:09:9c:e2:3c:e8:
                    93:a4:dc:77:9f:3a:69:86:79:e3:85:2b:f0:24:98:
                    1c:20:53:06:60:f4:40:71:ec:e2:89:f6:72:71:78:
                    73:41:fb:f9:a6:e2:dc:f4:54:a1:eb:c5:ba:d4:b9:
                    b2:7f:45:4d:c7:db:4e:05:60:d7:84:5a:c6:6c:42:
                    fe:5d:46:16:f0:1b:47:bd:ab:5b:31:7e:c1:16:4f:
                    45:3c:b7:e2:d5:88:b1:60:ba:a7:f4:a1:14:6f:86:
                    c4:79:73:d8:29:a4:78:2c:cf:62:0a:64:46:a6:3f:
                    5c:05:6d:ea:32:5b:94:81:40:23:cb:77:a8:bd:70:
                    25:f0:95:2a:4b:3b:7f:f7:2b:d8:b3:23:b7:21:db:
                    96:5d:7c:9d:a7:4a:b6:78:d0:27:2d:96:0a:c5:4b:
                    7c:02:d9:18:e1:65:91:b9:ec:1d:72:1b:77:c6:13:
                    3a:68:4b:4c:11:e4:93:a4:0b:f7:5d:7b:30:b0:4a:
                    57:b3:29:96:0b:de:f1:da:c1:87:2f:db:59:49:17:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:DD:F9:91:3D:C6:FE:F5:3D:BA:00:FA:6E:84:84:EE:E1:CC:EF
            X509v3 Authority Key Identifier:
                keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/NQjd-ZE9xv71PboA-m6EhO7hzO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.34.0/24
                IPv6:
                  2a12:88c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:08:b8:9e:10:25:bc:f6:13:fe:41:68:19:8e:f5:e2:f7:1c:
         1c:da:f1:2e:d4:e6:2b:af:c4:1f:e7:9d:0e:67:a8:81:4c:d9:
         ad:36:c0:23:41:ef:53:75:dc:f4:f8:82:e9:dd:d8:ea:8b:fa:
         64:ce:46:98:c6:91:8b:33:73:07:76:5f:a5:7c:08:f8:c3:c2:
         ac:41:5f:f5:b3:86:2a:0b:6d:bf:59:24:16:a3:3a:fe:87:22:
         25:c0:35:06:bd:f6:d1:40:b0:0c:41:77:8b:14:27:ac:54:be:
         2e:09:ad:f3:da:53:1d:6a:79:c7:da:7d:73:3a:c2:bf:b7:f9:
         6c:33:17:79:1e:87:27:bc:72:a4:37:15:83:b5:0b:03:05:a9:
         3a:e0:83:f3:c0:95:38:a7:3c:83:dd:07:1d:5f:54:61:24:25:
         80:19:05:e7:9f:7f:5f:f3:4f:21:ad:a1:5d:ab:43:3f:63:1f:
         f6:6c:1c:7a:8f:ee:45:a5:68:26:95:6e:85:ba:35:42:e0:1e:
         41:f9:ae:b0:f4:af:c6:2d:01:c8:77:1e:10:d3:93:26:5e:39:
         7b:d2:a7:60:95:f4:94:86:b1:49:5f:7f:4d:10:16:3a:dc:17:
         90:f9:19:5e:83:f9:99:a7:84:ef:0a:cc:1f:33:68:5b:59:ca:
         7d:23:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----