Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/qqQm9Sm63yt-l03b9d94k1H_Dfg.roa
File:                     qqQm9Sm63yt-l03b9d94k1H_Dfg.roa (raw, json)
Hash identifier:          6EakdLLyVpLIGxB1jDpeSBQmrDRAIAl1edEOqWjuNdU=
Subject key identifier:   AA:A4:26:F5:29:BA:DF:2B:7E:97:4D:DB:F5:DF:78:93:51:FF:0D:F8
Certificate issuer:       /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial:       033CE3CB
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/qqQm9Sm63yt-l03b9d94k1H_Dfg.roa
Signing time:             Sat 01 Jan 2022 01:56:30 +0000
ROA not before:           Sat 01 Jan 2022 01:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31285
IP address blocks:        193.19.114.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54322123 (0x33ce3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
        Validity
            Not Before: Jan  1 01:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aaa426f529badf2b7e974ddbf5df789351ff0df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:f8:4a:70:5f:5d:53:bf:4c:23:b9:3b:5a:
                    13:7a:6d:15:9e:5d:08:12:17:c0:89:ea:d7:18:a0:
                    9e:93:4b:3c:9a:01:a1:d7:46:5c:b3:35:a4:f9:43:
                    de:5a:46:ed:04:c2:11:24:4f:f7:08:68:f4:4c:54:
                    32:1a:d4:bb:69:ab:85:3a:75:23:08:88:3c:88:15:
                    43:e9:06:a8:87:b0:a7:33:47:7b:a1:0a:63:4f:85:
                    3f:67:94:ff:88:5f:37:3d:f8:f7:f4:52:ad:ea:9d:
                    92:68:69:a6:56:26:30:fc:2d:14:c3:ba:19:d2:73:
                    af:09:d4:e7:17:c9:90:cf:5a:c4:9f:09:40:f8:6a:
                    61:51:61:99:75:0b:64:25:9c:fe:91:73:b4:bc:fd:
                    8d:20:0e:2f:0b:34:a4:63:d7:f9:45:07:fd:49:80:
                    24:fe:60:70:8a:91:b4:e6:52:85:94:3b:4f:57:b3:
                    25:ce:3a:57:2b:77:7d:86:91:53:af:95:fd:bf:cb:
                    74:fc:9d:4e:c2:40:e7:1e:a3:54:95:b7:42:71:7b:
                    9e:b3:99:03:90:ee:c6:50:66:21:8e:9a:12:54:b1:
                    e5:aa:ed:a5:e7:ac:4e:e5:50:1f:e0:0d:28:6d:3e:
                    b8:2c:3d:13:44:b8:41:dc:be:9a:b3:52:79:b6:72:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A4:26:F5:29:BA:DF:2B:7E:97:4D:DB:F5:DF:78:93:51:FF:0D:F8
            X509v3 Authority Key Identifier:
                keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/qqQm9Sm63yt-l03b9d94k1H_Dfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:08:5a:30:47:d9:df:8b:80:e8:3f:60:52:71:96:a3:16:
         30:f1:78:c4:e8:c6:fa:c4:60:ad:ab:e9:72:37:77:bb:d4:55:
         ea:b7:ac:f5:8a:bb:aa:5a:74:4c:05:44:48:5c:c8:da:4e:66:
         6c:52:6d:21:e6:04:e8:6f:2c:0f:7c:b0:b4:c5:62:05:fb:c3:
         e1:bd:16:66:f6:57:5a:58:45:03:95:4f:5a:0e:3d:6c:ec:ef:
         bb:f0:00:91:63:61:85:51:f3:3b:2d:2b:21:78:b5:59:5e:1c:
         5a:6e:34:29:5e:e8:f5:61:fa:ba:d8:02:46:4d:ad:99:b1:0d:
         0a:6f:2b:3a:16:9f:f4:0d:3b:b7:a9:9b:fd:25:9f:20:f4:f8:
         10:9e:41:57:52:45:1f:2f:64:0f:b8:89:1a:9e:03:64:d0:73:
         c5:8b:c0:ef:2e:9d:51:08:11:83:aa:88:c9:95:e3:fb:79:1d:
         2e:4a:98:21:79:b7:cb:25:f3:b8:f5:ae:fe:a7:4d:08:4a:91:
         29:85:ec:3b:5f:5b:53:bc:c7:f2:2c:a0:71:ba:bf:a6:b6:b8:
         ed:76:0e:9d:a2:4f:be:73:b6:e3:94:e5:41:19:21:e9:47:21:
         a9:66:9f:d7:55:0f:9e:1e:d3:dc:ef:34:d3:dc:b1:d4:2a:ec:
         95:9e:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----