Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/8tLS63ave21kA9L2mKAcEm89rZs.roa
File:                     8tLS63ave21kA9L2mKAcEm89rZs.roa (raw, json)
Hash identifier:          l/7c599gq6lJYLinVp+8Bup2eZxorkFv3ZnX3iP74I0=
Subject key identifier:   F2:D2:D2:EB:76:AF:7B:6D:64:03:D2:F6:98:A0:1C:12:6F:3D:AD:9B
Certificate issuer:       /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial:       3291A03E
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/8tLS63ave21kA9L2mKAcEm89rZs.roa
Signing time:             Sat 01 Jan 2022 13:03:12 +0000
ROA not before:           Sat 01 Jan 2022 13:03:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20805
IP address blocks:        213.167.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848404542 (0x3291a03e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
        Validity
            Not Before: Jan  1 13:03:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2d2d2eb76af7b6d6403d2f698a01c126f3dad9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:0d:99:1c:b7:c7:49:34:83:92:fc:17:47:
                    76:30:36:97:17:6b:29:d9:c5:28:39:fb:14:92:1b:
                    bd:68:1b:94:b7:5a:ce:3b:c5:a3:bd:64:44:c3:32:
                    a4:80:72:03:e2:1b:7d:bd:d7:eb:e3:4c:83:a5:7b:
                    4c:c8:4e:cf:5a:69:43:e5:17:60:78:6a:f1:31:5e:
                    82:f1:03:ef:28:36:a1:30:df:4b:ff:aa:03:0b:37:
                    63:75:d9:42:3e:45:c6:01:8f:ca:9c:df:b1:62:64:
                    a1:19:05:86:0c:25:9e:86:a0:e8:26:ad:48:9e:9a:
                    d6:dd:1a:83:f4:26:99:4c:75:2d:85:53:b0:ab:b8:
                    d8:bf:23:74:66:29:88:a1:47:b2:1a:ae:e9:79:e2:
                    e7:79:8d:50:08:16:b9:20:09:f6:8a:73:5a:73:be:
                    a5:35:c3:2b:be:00:77:64:b0:4c:f9:85:03:fb:87:
                    6f:2d:5e:c0:51:ed:bb:b7:13:d7:ca:1f:9c:91:88:
                    07:86:24:2c:ac:5f:5a:09:4d:49:bc:0d:4e:57:f0:
                    c5:d4:82:4c:17:47:4e:f5:dd:e2:0f:da:0e:f0:51:
                    ec:9f:ab:a9:36:ad:d6:35:bb:16:9e:ac:23:7a:d3:
                    56:ac:70:92:d7:db:8a:c8:60:59:b5:eb:6b:a4:58:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D2:D2:EB:76:AF:7B:6D:64:03:D2:F6:98:A0:1C:12:6F:3D:AD:9B
            X509v3 Authority Key Identifier:
                keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/8tLS63ave21kA9L2mKAcEm89rZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.167.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:78:88:f8:d7:4e:29:38:ff:d8:79:fd:d9:d6:77:f8:e5:af:
         01:18:d1:d9:8c:b1:c3:ab:d9:9c:5e:0d:05:4f:65:d1:fe:72:
         b2:39:f5:16:fa:30:1f:67:21:8f:d9:37:71:24:eb:73:80:42:
         d9:8d:33:38:75:40:8d:41:a4:7d:44:0b:5e:cd:a9:50:69:9f:
         3a:3a:31:cd:16:1d:48:7f:42:39:5c:cd:df:62:65:87:0d:db:
         70:17:07:f1:b8:1f:1c:db:15:94:f9:08:ab:5e:e3:12:0c:0d:
         39:9d:ac:cd:be:ca:ec:2a:ad:34:31:e8:4d:1a:23:55:6b:49:
         f4:34:e6:a8:64:53:74:fd:9e:0f:5b:c7:bd:d6:10:6b:2a:fc:
         7f:d3:86:5c:cf:cb:82:18:3e:d3:7b:b1:e4:a5:53:31:83:bb:
         6b:a6:1b:81:d7:b9:8e:1b:50:77:33:a0:21:1b:0b:f6:18:cd:
         21:9b:e7:dc:23:14:3d:67:99:d4:f5:34:62:aa:1c:a0:5b:c4:
         1b:97:95:d8:49:9b:85:aa:09:49:c1:a4:db:15:6b:e7:bc:ab:
         b9:b9:d4:c6:54:a3:de:41:1a:d5:e2:8b:44:ee:15:ac:33:c8:
         72:39:0e:97:40:a0:bc:f5:97:8a:56:df:f2:2f:50:6f:3c:3e:
         c9:4b:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----