Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/JGt16rjdxSKnh9mvMTI3iy9LQG8.roa
File:                     JGt16rjdxSKnh9mvMTI3iy9LQG8.roa (raw, json)
Hash identifier:          ER6a1K1SbGGnn76pz3AUjLrEHqryDEwBMBSC+23iokY=
Subject key identifier:   24:6B:75:EA:B8:DD:C5:22:A7:87:D9:AF:31:32:37:8B:2F:4B:40:6F
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       0183181EEB8A4A91D72E97C49FBFE00DB002
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/JGt16rjdxSKnh9mvMTI3iy9LQG8.roa
Signing time:             Wed 07 Sep 2022 13:23:43 +0000
ROA not before:           Wed 07 Sep 2022 13:23:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57037
IP address blocks:        146.247.96.0/19 maxlen: 24
                          2a01:b180::/29 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:18:1e:eb:8a:4a:91:d7:2e:97:c4:9f:bf:e0:0d:b0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Sep  7 13:23:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=246b75eab8ddc522a787d9af3132378b2f4b406f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:67:52:36:6a:58:34:b1:ff:ee:03:ba:61:
                    fb:6c:29:a8:b1:fe:a8:61:19:bb:ff:99:16:2e:00:
                    34:e6:15:78:29:47:1c:c3:a0:a6:d4:b2:fe:62:ab:
                    3b:33:b6:b1:60:a3:d9:0c:a4:52:8f:49:05:d9:db:
                    8d:28:e9:9d:ba:dc:36:9d:d9:6d:8f:85:59:65:8e:
                    f4:23:5c:2f:5a:2d:2c:f6:66:3e:73:7e:25:ba:ed:
                    0e:be:53:07:7a:db:27:a1:b6:04:2c:6e:2d:3a:a6:
                    7b:ac:95:79:27:24:ec:c5:2c:e2:7d:8c:ed:c3:1f:
                    7f:19:81:42:67:2e:b3:33:aa:90:81:b5:73:97:d2:
                    a0:d8:a7:18:63:08:4e:1d:86:c2:b1:c0:d4:fc:a7:
                    09:b4:af:e6:68:b9:cf:76:c4:ad:dd:a8:6c:3c:46:
                    1f:da:16:28:6e:ee:30:3b:f2:9e:bf:ac:c5:2c:5d:
                    4c:54:03:fc:f4:7a:42:c4:11:cc:02:88:79:9a:fb:
                    7c:f6:29:0a:6f:41:62:7c:d4:42:5b:90:07:e6:e1:
                    12:3c:69:d5:5d:e5:67:69:88:ba:8b:21:0b:8e:68:
                    c1:49:3d:4b:26:c5:f0:8b:5c:dd:d5:e7:71:6a:b9:
                    93:65:d7:92:7a:5d:9a:b0:c7:10:20:54:ed:a1:39:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6B:75:EA:B8:DD:C5:22:A7:87:D9:AF:31:32:37:8B:2F:4B:40:6F
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/JGt16rjdxSKnh9mvMTI3iy9LQG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.96.0/19
                IPv6:
                  2a01:b180::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:4f:e5:c4:b7:1c:0d:e7:26:f9:70:d3:1c:c2:48:92:5c:
         79:27:13:31:1a:b8:77:da:10:eb:1c:35:27:60:7b:66:7a:19:
         93:0f:7b:c2:e1:43:fe:90:b1:9f:45:c7:46:8a:3d:5c:31:97:
         00:5e:b2:86:63:6f:26:26:d0:49:95:aa:9a:ef:27:d5:ae:27:
         60:b7:bc:22:c7:d5:ba:00:bd:9e:8e:65:89:8f:4a:1c:43:25:
         5f:d8:1d:b0:a0:20:c8:ee:bd:09:56:44:06:87:ed:a8:f9:be:
         a5:5c:b4:8f:b0:a5:af:f8:76:3d:be:a9:30:4a:e3:c7:15:66:
         70:70:e1:98:91:d3:d7:33:50:89:96:37:9c:db:8f:e8:2b:0d:
         d1:5d:1b:49:8a:54:5b:31:93:2b:d8:0b:e6:cd:d0:21:42:27:
         96:81:c3:18:37:93:f1:a9:e4:66:b5:f4:bb:b2:58:8c:f8:42:
         f2:69:ee:75:87:e1:80:0c:ac:db:61:0f:83:3e:31:a6:42:f7:
         72:58:c7:c9:7f:f3:87:2a:a9:a8:24:a8:f6:3b:32:cc:0c:7f:
         5d:78:7a:4c:1e:7d:bb:2c:23:ee:12:64:40:fd:c3:0c:b4:fc:
         7d:fc:d7:70:c7:94:ae:0a:cf:29:5a:f3:14:b3:b0:31:ad:1a:
         1e:8b:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----