Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/_LiC-jl4yU9BHrlQ5H53UINtZm4.roa
File:                     _LiC-jl4yU9BHrlQ5H53UINtZm4.roa (raw, json)
Hash identifier:          eeb0FrFUiBK8zQMlp8pyH9HSE3ifwHTqBP2fNDSvjFo=
Subject key identifier:   FC:B8:82:FA:39:78:C9:4F:41:1E:B9:50:E4:7E:77:50:83:6D:66:6E
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       06BBEA20
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/_LiC-jl4yU9BHrlQ5H53UINtZm4.roa
Signing time:             Sat 01 Jan 2022 01:58:54 +0000
ROA not before:           Sat 01 Jan 2022 01:58:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196948
IP address blocks:        193.105.155.0/24 maxlen: 24
                          2001:67c:2980::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112978464 (0x6bbea20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Jan  1 01:58:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcb882fa3978c94f411eb950e47e7750836d666e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:98:ca:6a:cf:47:5c:36:02:23:e8:3e:9e:
                    3a:20:74:7c:b7:95:69:a7:93:21:fd:62:3f:a6:f1:
                    a3:4e:2b:bb:4c:01:21:0c:60:9f:53:5f:75:b3:ab:
                    66:bf:93:74:05:a4:fe:bd:a3:7a:11:aa:ca:a3:c5:
                    f1:06:3c:5f:b8:d2:91:fb:ca:bb:17:f0:ad:50:9b:
                    b7:b6:07:a3:d5:db:83:9c:0a:af:c8:a2:ec:01:5c:
                    42:09:20:d0:c7:43:d4:83:46:b4:bb:6b:41:3d:1f:
                    15:be:34:50:e0:b3:69:9d:c4:cd:9d:d4:78:af:34:
                    8e:c6:22:45:26:8e:6c:cc:c3:6b:e0:ea:44:66:46:
                    ea:21:09:09:3c:e4:70:85:d8:a9:94:fc:1f:e0:27:
                    16:46:1a:54:8b:68:7d:f9:ba:b9:8e:4e:05:39:31:
                    7e:eb:ee:1e:fe:89:21:62:1e:0d:6b:e8:c3:26:0f:
                    b6:fe:c1:45:d9:dc:f0:43:c0:5c:05:c1:5e:ca:13:
                    fd:d9:f4:c3:82:73:a6:06:c1:4c:b1:f0:00:37:72:
                    8f:8f:fe:b9:a9:d3:8b:3a:43:0f:08:c5:03:55:3f:
                    d9:1a:7e:b7:a2:e4:57:8e:c6:e5:d2:89:1f:45:88:
                    44:15:0b:2b:dc:0a:36:6f:a5:2f:64:f7:c3:9c:c9:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:82:FA:39:78:C9:4F:41:1E:B9:50:E4:7E:77:50:83:6D:66:6E
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/_LiC-jl4yU9BHrlQ5H53UINtZm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.155.0/24
                IPv6:
                  2001:67c:2980::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:55:2a:09:bf:09:c9:d2:ab:3b:76:93:8a:bb:cc:65:6d:
         f5:4e:a6:ad:e4:86:e3:f9:22:85:22:7b:38:ee:cf:38:89:74:
         2e:f1:01:87:0e:22:17:17:bb:90:49:6f:bf:c9:33:90:7a:e3:
         dd:6c:eb:c0:59:e7:67:4e:08:d1:2c:00:d9:3f:1d:14:52:db:
         73:f1:fa:e6:5d:d2:ae:fd:67:8e:c9:dd:6c:6f:9a:ef:a3:79:
         04:e5:0d:1e:c2:c4:c5:a2:51:05:03:5c:9b:07:53:23:80:26:
         6d:6f:3c:7d:f7:65:75:bd:77:ad:bd:40:73:3b:dc:be:fb:64:
         30:e3:87:bb:26:d4:92:da:47:4d:9b:0f:a6:97:d4:39:f2:7a:
         e7:31:f4:13:c1:95:3e:13:86:c2:32:36:b8:7c:f3:2c:e2:39:
         0f:a6:60:bb:f3:1a:9b:7a:52:72:2f:4a:17:de:fc:2a:ef:3c:
         4b:f9:11:a1:5b:74:94:7a:81:d7:d0:a6:4a:30:f3:5c:c2:9a:
         21:55:da:47:46:f0:8e:6a:48:93:b7:10:54:a0:52:8a:89:24:
         e2:46:9d:47:b4:35:2a:34:f3:15:8e:9c:21:b5:2b:8e:a7:ef:
         65:3c:bd:58:4c:65:0b:c8:2e:45:b3:94:c1:ad:a9:b3:78:b1:
         33:71:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----