Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/mfiwnrriCN6km4_Ntf7RdFGPSIs.roa
File:                     mfiwnrriCN6km4_Ntf7RdFGPSIs.roa (raw, json)
Hash identifier:          Lt/6sDexMJsGsdgB6XltcMvj7NhvqAP3zQSTUk6FS6o=
Subject key identifier:   99:F8:B0:9E:BA:E2:08:DE:A4:9B:8F:CD:B5:FE:D1:74:51:8F:48:8B
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       2581CB4F
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/mfiwnrriCN6km4_Ntf7RdFGPSIs.roa
Signing time:             Mon 30 May 2022 07:52:13 +0000
ROA not before:           Mon 30 May 2022 07:52:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207258
IP address blocks:        93.188.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629263183 (0x2581cb4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: May 30 07:52:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=99f8b09ebae208dea49b8fcdb5fed174518f488b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:b9:b0:fc:36:7c:bf:d2:25:ec:ba:0c:46:
                    e1:49:b2:89:fe:06:69:ce:98:f2:18:89:f5:2f:50:
                    1c:0a:97:53:59:2e:eb:fd:d0:3b:84:e1:f9:b7:91:
                    17:ea:97:9f:c5:17:0d:02:11:7b:72:7b:4d:fa:20:
                    30:c2:77:d6:a5:77:91:b2:7a:0a:40:65:ad:84:11:
                    78:af:f1:d5:4f:82:6a:c3:9b:6b:53:2d:e3:a7:cf:
                    2d:b8:3a:34:95:52:6d:74:2e:10:35:f6:36:b0:e3:
                    4b:0b:61:ed:11:03:2e:45:80:bb:2f:77:f9:04:b8:
                    89:0f:7e:b1:b5:dd:8a:bb:cf:ea:c0:54:8b:fd:30:
                    5c:36:57:51:80:86:60:44:c0:00:88:21:51:e4:0f:
                    92:6a:35:1e:31:0a:eb:a0:dd:28:90:f1:cd:3a:f4:
                    a0:4c:30:98:76:e0:d5:24:c1:16:8a:53:b2:d6:34:
                    a4:68:56:b7:17:cc:d6:60:01:ff:4c:cc:8a:b8:3e:
                    a5:13:3f:ca:41:8c:16:ab:62:a7:9a:f9:b4:52:94:
                    99:8e:15:f1:6e:bf:03:5c:a3:d5:33:39:0e:e4:7d:
                    ca:d6:33:f9:aa:da:fc:f4:ce:12:42:21:3c:64:29:
                    3a:dc:4f:56:42:5c:cb:95:4a:50:c4:df:19:f1:e6:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F8:B0:9E:BA:E2:08:DE:A4:9B:8F:CD:B5:FE:D1:74:51:8F:48:8B
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/mfiwnrriCN6km4_Ntf7RdFGPSIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.188.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:61:de:d7:b6:1e:62:33:fa:9d:26:92:12:1c:36:57:ee:
         81:bc:a0:52:a3:9f:db:fb:a3:0e:b7:e3:80:ce:cf:1e:c2:bb:
         eb:1a:5a:83:10:2e:b6:61:70:3b:fe:18:b7:93:6e:91:98:fb:
         e0:3f:8e:c4:8d:cf:73:87:3c:ca:6e:4f:99:c4:63:0b:15:14:
         32:84:16:c4:24:40:52:2e:bd:0a:4c:27:fc:9c:f2:69:03:85:
         70:89:75:07:19:13:f1:a2:c2:a0:e8:b4:54:54:d5:31:57:33:
         c1:5e:01:ca:41:5a:2d:70:9f:0d:5d:5c:75:e8:b3:63:9e:4d:
         cc:9b:8a:70:86:ec:31:fc:fe:98:8e:76:bc:a2:cf:c6:a9:f6:
         b4:e9:4b:4c:42:d9:32:2e:31:97:31:52:ed:4c:32:29:82:59:
         d5:cf:ff:84:4c:d0:92:a5:92:57:8b:b2:c1:97:f7:c6:32:42:
         47:17:c1:60:37:9c:b0:7f:bb:9a:d6:e8:1b:1c:c8:81:4c:84:
         ee:8b:83:ee:00:22:86:16:02:5e:4a:df:01:d5:ff:d8:a4:5d:
         0f:06:28:80:62:2b:01:48:92:5f:2c:f0:ff:d8:bc:31:5d:d5:
         a3:54:fc:bf:f6:c4:d4:0d:38:4f:9c:c8:d8:96:a2:81:a0:61:
         f1:a7:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----