Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/BdKLHlEutsXhRbXsAdB13e_eZ28.roa
File:                     BdKLHlEutsXhRbXsAdB13e_eZ28.roa (raw, json)
Hash identifier:          IbbWrWT6y3fBmWD0DiiWsjJYoW1ggGYLEh68fIHhPAc=
Subject key identifier:   05:D2:8B:1E:51:2E:B6:C5:E1:45:B5:EC:01:D0:75:DD:EF:DE:67:6F
Certificate issuer:       /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial:       08BE99D2
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/BdKLHlEutsXhRbXsAdB13e_eZ28.roa
Signing time:             Sat 01 Jan 2022 09:06:32 +0000
ROA not before:           Sat 01 Jan 2022 09:06:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        109.232.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146708946 (0x8be99d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
        Validity
            Not Before: Jan  1 09:06:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05d28b1e512eb6c5e145b5ec01d075ddefde676f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:24:fa:aa:43:6e:90:98:46:90:58:4c:fa:
                    4d:17:95:24:80:35:a7:72:ab:27:46:5c:7d:dc:aa:
                    7c:e4:8e:4f:ae:88:dd:6a:47:7c:d3:97:6c:d1:11:
                    b1:a3:e6:de:08:aa:dd:6c:f6:75:cf:9b:06:5f:3f:
                    fb:2d:fc:b3:85:44:98:82:61:76:09:1e:9e:4f:44:
                    6b:ac:02:75:e1:95:6b:b8:b3:13:d1:6b:ed:1f:18:
                    34:3d:ac:c3:9f:81:e6:d0:8a:8b:07:3c:9c:6e:ff:
                    13:6c:2c:61:ba:4d:f9:2d:c9:fb:9d:b7:9b:18:08:
                    2d:b3:0c:02:a8:2c:e0:0e:9d:2c:38:a6:77:b4:cd:
                    1e:70:2f:5a:81:7b:07:34:09:2e:83:3f:fc:40:3a:
                    31:18:18:2b:9b:40:4a:85:9a:5d:82:0c:e1:c5:0e:
                    3f:cc:c4:10:41:53:01:a7:bb:cd:9e:ec:13:ba:c5:
                    96:d0:c9:24:40:15:c9:79:22:ee:2e:14:ec:56:fe:
                    80:7f:d9:58:27:23:41:b0:06:53:9c:f1:8a:de:1f:
                    e3:a7:90:74:35:42:87:24:bd:ae:e6:a0:28:f1:2a:
                    b9:89:7a:41:de:8a:e0:f3:b3:9f:c3:df:8a:fd:51:
                    be:dc:7b:a7:de:0e:74:20:39:7e:1a:3a:7e:18:9b:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D2:8B:1E:51:2E:B6:C5:E1:45:B5:EC:01:D0:75:DD:EF:DE:67:6F
            X509v3 Authority Key Identifier:
                keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/BdKLHlEutsXhRbXsAdB13e_eZ28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.232.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:b5:e6:6e:29:1a:27:92:25:bf:5b:68:cd:24:4e:2e:f7:d1:
         f6:87:39:a0:80:e0:b9:c8:7c:a0:2b:cf:f3:a8:21:97:df:f7:
         01:b5:1c:40:3a:93:7a:12:de:26:20:c2:8a:b0:eb:d4:0b:3a:
         b5:45:89:e6:15:03:47:0d:c8:9d:9b:e3:50:87:d2:a7:cb:d4:
         3d:8f:b7:b8:46:75:52:8c:19:f5:ae:06:03:01:c1:cd:e2:e5:
         db:a3:8f:6c:fe:5b:93:ef:82:a6:45:3e:92:b5:38:37:78:98:
         7a:81:17:83:81:e4:5c:27:70:03:de:88:9c:fe:b5:e2:c6:32:
         8f:54:06:fb:85:c0:9d:c4:97:56:03:c6:b0:a6:8a:4f:ed:a6:
         2a:6f:a9:ba:b3:ce:e9:18:56:c3:cf:b8:26:51:c1:42:09:eb:
         63:b0:92:5e:b1:bc:b6:be:f2:55:8a:2c:ed:4f:2e:18:3b:c3:
         67:4d:33:7d:4e:f3:1d:b4:0f:63:80:8d:c6:03:8f:17:9d:19:
         75:c5:47:82:e3:8b:28:36:91:70:dd:7e:55:94:9e:c5:6f:88:
         a1:f6:87:0d:c2:75:ac:39:43:8e:4e:59:5f:24:ba:96:bc:42:
         71:ef:fc:51:26:10:13:86:5c:57:cb:b1:89:f9:32:f2:fa:ab:
         8a:3d:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----