Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/1-eaw2wgHegUuo6Cf0EiL98NCfco.roa
File:                     1-eaw2wgHegUuo6Cf0EiL98NCfco.roa (raw, json)
Hash identifier:          Ld2Pg05ru0RokWRH6PrrmIMulXyRMZzwY9+KOT7UCIc=
Subject key identifier:   F9:E6:B0:DB:08:07:7A:05:2E:A3:A0:9F:D0:48:8B:F7:C3:42:7D:CA
Certificate issuer:       /CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Certificate serial:       5F6F61
Authority key identifier: 0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/1-eaw2wgHegUuo6Cf0EiL98NCfco.roa
Signing time:             Sun 06 Mar 2022 07:59:43 +0000
ROA not before:           Sun 06 Mar 2022 07:59:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50131
IP address blocks:        193.105.95.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6254433 (0x5f6f61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
        Validity
            Not Before: Mar  6 07:59:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9e6b0db08077a052ea3a09fd0488bf7c3427dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:83:a1:b0:62:0d:5b:74:ee:eb:0e:0a:bb:
                    7a:b7:d2:90:5f:34:eb:cf:25:f1:3f:98:e4:87:d9:
                    61:7d:f8:ac:16:a5:c9:52:c9:0a:aa:c9:91:16:73:
                    bb:42:7e:cc:b0:75:7f:f5:96:f9:b5:2b:dc:66:6a:
                    45:6a:55:54:60:f2:35:cb:52:06:1e:65:44:3d:25:
                    01:c9:8c:3e:90:51:05:01:01:8a:00:81:51:f0:b8:
                    22:ab:2e:02:20:0e:a5:16:e1:53:95:e3:2a:65:77:
                    1b:ab:7f:f2:11:e6:ea:9e:2b:5b:f3:bb:79:c6:85:
                    2e:a3:b2:f5:b2:fe:44:bf:e1:12:2c:36:7e:92:ff:
                    77:00:fb:5a:0c:f1:49:65:aa:93:20:3d:f5:dd:60:
                    ca:88:a6:5c:ca:74:b6:d5:5e:48:32:f3:0f:d1:23:
                    0a:23:e5:4a:ef:6c:21:a6:d2:ae:7f:3c:8b:0c:87:
                    05:17:05:18:d0:ff:06:8b:9a:79:4f:79:15:da:12:
                    98:35:70:ce:62:b2:37:3b:1b:9f:50:18:77:e3:8d:
                    40:75:e2:63:0e:cf:87:20:82:3a:42:ec:d2:88:8b:
                    ef:54:34:da:23:ef:2a:cc:3a:b6:17:34:96:2b:4d:
                    9a:90:0a:72:76:fa:13:91:86:c0:d6:8a:39:3a:fa:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:B0:DB:08:07:7A:05:2E:A3:A0:9F:D0:48:8B:F7:C3:42:7D:CA
            X509v3 Authority Key Identifier:
                keyid:0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/1-eaw2wgHegUuo6Cf0EiL98NCfco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:45:c7:35:6a:31:ec:04:35:bc:67:47:47:5d:5b:eb:a3:4b:
         e6:bf:11:61:a3:8a:cc:85:a0:65:b0:02:f4:1d:39:08:1a:67:
         eb:38:37:0d:7c:3a:21:42:79:0c:f6:0b:14:1f:ae:94:49:c9:
         94:78:06:2f:44:4c:15:b4:4e:d4:f8:94:6c:ec:f7:cd:b5:45:
         63:da:39:fe:a5:77:7d:18:54:1c:5c:2b:95:6a:50:8a:af:a9:
         c5:83:d5:a4:2b:5f:da:ef:db:f8:2c:24:60:f8:0b:61:dd:c8:
         a7:aa:dc:d9:18:6d:8c:9b:25:ad:44:90:52:59:fb:58:cd:af:
         e1:7b:cc:b0:34:08:3d:cf:9f:6a:18:87:c7:5e:a3:68:1c:11:
         e0:e6:bd:68:4b:9f:69:1d:3f:24:7d:be:03:27:b1:f5:e4:4b:
         d8:10:79:1f:eb:3c:a9:ce:bc:41:e4:db:8e:07:d3:bb:58:8d:
         53:78:0a:84:11:bd:97:f8:17:1d:51:af:37:63:ae:d2:94:d0:
         f8:96:f5:8a:0f:4d:d8:20:95:a2:39:c6:78:b9:a9:b8:02:02:
         2f:2e:10:d9:24:9e:5d:67:93:49:fb:e9:9b:8f:00:68:94:c3:
         f0:b4:80:0f:22:b7:e7:7f:2d:4e:d2:e4:5b:18:ef:a7:3b:b3:
         a5:8a:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----