Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/JEicKLsqy_SJ8Jky_1EJLoWCRp8.roa
File:                     JEicKLsqy_SJ8Jky_1EJLoWCRp8.roa (raw, json)
Hash identifier:          nLCeyI8a0SPw/dOv1hpY5ALSVIrMYFJ8XH9BQDk9JT0=
Subject key identifier:   24:48:9C:28:BB:2A:CB:F4:89:F0:99:32:FF:51:09:2E:85:82:46:9F
Certificate issuer:       /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial:       04A0C1D9
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/JEicKLsqy_SJ8Jky_1EJLoWCRp8.roa
Signing time:             Sat 01 Jan 2022 09:57:23 +0000
ROA not before:           Sat 01 Jan 2022 09:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62098
IP address blocks:        193.30.167.0/24 maxlen: 24
                          2a0a:31c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77644249 (0x4a0c1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
        Validity
            Not Before: Jan  1 09:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24489c28bb2acbf489f09932ff51092e8582469f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:29:ca:7e:ec:71:cf:e8:89:c1:ce:1c:23:
                    d8:46:cd:d9:d9:f7:e6:3d:bc:ce:69:74:b9:78:ca:
                    46:f7:64:54:38:72:40:2b:ff:0a:84:c9:7b:bf:40:
                    3e:eb:3d:3b:b1:e2:7e:19:15:26:42:a4:cb:35:15:
                    03:23:85:f5:a9:99:70:17:34:73:ee:50:41:d7:14:
                    01:1b:64:9e:80:81:8c:c1:8e:ee:28:f2:a9:b4:18:
                    04:96:8a:87:e8:14:f7:1d:8c:62:55:4e:19:55:d6:
                    59:c1:d5:85:3a:fc:3b:a0:5d:1d:24:3e:98:9e:3f:
                    8d:7c:8b:36:55:97:d1:a9:62:f5:0f:59:5a:a5:8e:
                    ac:0c:d3:55:ab:a4:bd:24:31:c2:a6:6c:8e:d2:ce:
                    62:20:b7:d7:2c:07:de:f1:9a:33:ea:fc:42:46:1f:
                    1e:69:24:0c:57:35:c5:8a:70:3a:1b:03:76:c4:52:
                    bb:c2:4e:86:2e:41:91:02:af:b1:51:2e:4f:ea:75:
                    50:db:af:9c:bf:47:25:53:30:81:f5:9a:fc:b8:f3:
                    bc:f4:c5:2e:08:9f:1f:38:45:ad:30:54:54:cc:79:
                    74:7e:d0:70:36:da:9d:e1:a8:06:4f:f8:0d:9b:ee:
                    0e:f0:fc:3b:87:33:e7:c4:eb:b7:92:6f:6f:07:1d:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:9C:28:BB:2A:CB:F4:89:F0:99:32:FF:51:09:2E:85:82:46:9F
            X509v3 Authority Key Identifier:
                keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/JEicKLsqy_SJ8Jky_1EJLoWCRp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.167.0/24
                IPv6:
                  2a0a:31c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:9d:e7:6d:30:2e:9f:09:02:58:91:20:c4:12:33:dc:03:
         9b:ad:80:29:3f:e9:20:f4:f4:9c:48:28:97:00:36:03:34:38:
         f3:f4:dc:b7:e5:24:54:3e:e8:32:f6:c7:95:eb:14:11:bc:c5:
         3b:46:40:a2:de:50:94:08:02:74:20:ff:1e:1b:69:52:5d:69:
         44:e4:1d:8f:15:5e:96:9e:61:12:8f:d1:d6:97:aa:18:a4:d5:
         af:16:ab:69:37:eb:76:c4:f5:4f:92:7e:6d:f7:a7:d1:b1:dc:
         14:c9:b8:87:b8:07:08:15:00:95:c5:07:82:75:50:52:62:fe:
         1e:9f:d8:00:f3:81:b7:52:00:43:e4:e5:d1:09:29:b4:a4:5f:
         3b:fa:75:b3:da:04:40:73:bd:7f:be:6a:e0:9e:74:18:f5:56:
         14:19:ac:94:98:b7:27:7b:fa:6d:0e:1f:fb:e3:52:92:6e:d6:
         ac:d3:2c:fe:bb:c9:57:51:17:b6:83:d3:55:b3:4a:16:fe:cf:
         c3:1d:b8:08:06:c2:3b:de:f5:a1:e4:93:d6:c9:80:cb:12:e8:
         2e:1c:d7:ab:1e:9d:75:da:19:51:d7:05:44:62:c8:71:ee:26:
         04:81:10:ea:e2:a0:9d:dc:a4:d0:52:2b:cf:dc:24:7b:6b:8e:
         bc:f1:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----