Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/PD7wq9IFISvYFNdIMRb3-mGVKRg.roa
File:                     PD7wq9IFISvYFNdIMRb3-mGVKRg.roa (raw, json)
Hash identifier:          BtvCutZ1XhxtK79nF+Th9dOnbSZf1iOqwIpZ6+WNRJM=
Subject key identifier:   3C:3E:F0:AB:D2:05:21:2B:D8:14:D7:48:31:16:F7:FA:61:95:29:18
Certificate issuer:       /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial:       030873EC
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/PD7wq9IFISvYFNdIMRb3-mGVKRg.roa
Signing time:             Sat 01 Jan 2022 16:05:28 +0000
ROA not before:           Sat 01 Jan 2022 16:05:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48258
IP address blocks:        91.209.53.0/24 maxlen: 24
                          2001:67c:2488::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50885612 (0x30873ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
        Validity
            Not Before: Jan  1 16:05:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3c3ef0abd205212bd814d7483116f7fa61952918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:70:21:78:3e:92:f4:cc:e0:ce:48:ea:52:
                    e8:6e:b7:dd:2b:9d:48:b3:e0:d6:35:a7:3b:ec:26:
                    20:f3:49:f8:af:e4:fb:37:56:d1:17:11:bf:34:1a:
                    b0:83:36:15:2f:1f:1d:82:79:10:90:d7:ce:1a:6c:
                    50:61:0b:f4:98:66:96:12:73:ca:87:bc:b8:40:5f:
                    cb:f2:0c:c1:64:09:0b:83:be:ac:0c:1e:d6:0e:d7:
                    45:b0:12:12:5c:fe:e6:74:e5:9e:98:bd:55:ec:d4:
                    4e:90:47:be:1d:c1:3a:ed:32:c2:f4:f2:20:bd:c1:
                    8e:71:76:a0:89:43:fd:80:e1:d9:57:9b:69:60:a9:
                    4a:ad:c5:82:10:a7:d1:5d:c9:6d:4f:37:71:2c:ed:
                    76:a4:5d:10:79:a7:8b:1a:53:d5:7b:4b:e6:58:91:
                    d1:b0:93:17:e7:e9:ab:a5:09:66:88:5a:45:f5:47:
                    00:09:25:91:21:00:d1:32:70:ef:29:9c:3c:b3:86:
                    fc:ea:d8:9a:95:df:16:d7:e1:2a:50:57:da:18:1b:
                    f0:3f:41:34:be:7e:a0:e6:3a:ce:67:7b:59:f6:bb:
                    46:22:25:be:91:07:82:be:15:aa:38:ab:11:e8:b6:
                    67:80:2b:62:06:b5:6e:25:d3:e4:0c:de:79:4f:28:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:F0:AB:D2:05:21:2B:D8:14:D7:48:31:16:F7:FA:61:95:29:18
            X509v3 Authority Key Identifier:
                keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/PD7wq9IFISvYFNdIMRb3-mGVKRg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.53.0/24
                IPv6:
                  2001:67c:2488::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:dc:d7:80:58:c7:6f:e1:a8:f6:86:44:1a:db:92:48:83:
         ce:08:42:50:72:61:25:0d:9c:e2:23:d5:cf:79:05:f9:8f:91:
         ed:b9:96:dd:cf:b4:19:04:af:db:cb:63:4d:79:bf:20:83:28:
         61:bd:e5:f1:4e:fb:53:b8:17:cf:e5:a7:6a:a5:2d:2a:d6:de:
         06:9c:d2:3c:df:53:28:b2:b1:d3:1f:ab:bf:bc:00:31:6a:46:
         03:e6:63:6b:0e:31:9a:3c:f7:f3:fe:0f:99:ff:8b:50:01:53:
         89:e0:b1:0e:c2:14:b4:b1:ea:db:b8:fb:0d:5c:e0:f5:e9:c2:
         19:66:d5:92:92:5d:58:21:69:29:e8:be:99:c7:09:68:f1:35:
         83:b4:07:1a:62:fd:c9:35:ca:37:fb:ad:22:4a:5b:61:7a:53:
         0f:79:6e:64:36:ff:f8:72:f2:98:43:06:d5:70:c8:07:5d:21:
         fa:5e:f6:c4:4e:91:13:57:70:8d:7e:08:1d:90:de:54:0a:4b:
         c7:e9:45:b9:30:86:b1:dd:78:b7:b4:83:fe:8f:22:b3:db:75:
         47:2f:47:68:b4:47:f4:ca:f4:2e:ec:05:0a:a6:8d:bf:26:04:
         a2:3a:78:82:c1:8f:e1:6b:7c:cd:74:6b:54:30:1b:bc:7e:b3:
         9e:00:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----