Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/1TRUVBoyeYkYdRAMsKKL1C5mWew.roa
File:                     1TRUVBoyeYkYdRAMsKKL1C5mWew.roa (raw, json)
Hash identifier:          CARxf/rB4TSHnWf74CNmFKtiTpPQyHJsnIpUrajN7oc=
Subject key identifier:   D5:34:54:54:1A:32:79:89:18:75:10:0C:B0:A2:8B:D4:2E:66:59:EC
Certificate issuer:       /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial:       260259
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/1TRUVBoyeYkYdRAMsKKL1C5mWew.roa
Signing time:             Sat 01 Jan 2022 02:56:48 +0000
ROA not before:           Sat 01 Jan 2022 02:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210598
IP address blocks:        109.107.152.0/24 maxlen: 24
                          2a11:d2c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2490969 (0x260259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
        Validity
            Not Before: Jan  1 02:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d53454541a3279891875100cb0a28bd42e6659ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:e7:a4:ff:87:c7:b9:2e:d6:3c:ab:52:1e:
                    15:af:3f:ce:9b:29:d7:4a:7d:dd:d7:48:19:e9:a8:
                    b9:1d:82:6a:ab:02:f4:1e:e7:86:2b:5a:e8:11:fb:
                    6a:a5:85:36:75:e0:56:61:66:57:1c:44:39:f4:93:
                    8a:c4:e3:ad:55:ed:5d:8c:9c:b2:91:4f:08:b9:a3:
                    ca:1d:0c:f3:33:75:88:34:42:2f:22:d8:0c:ae:48:
                    e6:42:46:53:b5:05:67:97:01:94:8c:6d:cc:b1:de:
                    0d:3c:26:af:e5:8d:79:2c:cd:3b:a9:97:3e:c3:50:
                    71:97:77:e6:2f:c9:e5:16:96:01:68:e3:25:87:70:
                    18:00:e7:4c:00:24:b0:d6:c4:22:a5:81:e2:2e:e2:
                    d5:ad:02:a1:9f:dd:e1:61:4d:c2:87:96:60:e8:c2:
                    af:05:81:9f:02:ff:bd:b7:04:7e:a5:7f:60:b5:78:
                    6f:a8:fe:ad:82:e2:d0:46:04:f8:7b:3c:f2:ad:74:
                    92:be:09:35:b0:28:4b:99:f8:22:2b:a0:0e:e2:33:
                    f5:c3:2a:2d:17:af:8d:56:e6:93:4a:8d:13:62:e1:
                    bb:19:2e:34:49:66:5d:9e:7c:8d:aa:81:e1:d6:32:
                    58:c9:26:48:0f:0c:5d:64:77:cf:cb:28:76:ff:cd:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:34:54:54:1A:32:79:89:18:75:10:0C:B0:A2:8B:D4:2E:66:59:EC
            X509v3 Authority Key Identifier:
                keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/1TRUVBoyeYkYdRAMsKKL1C5mWew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.152.0/24
                IPv6:
                  2a11:d2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:f3:b8:5e:f7:5c:90:20:33:7c:e6:f0:c5:f2:f0:27:a4:
         eb:4a:7e:04:ab:e7:c4:d5:f6:d8:43:4b:03:01:1e:b1:f9:03:
         0e:f9:6a:ab:68:b5:ae:7a:ce:bb:95:3c:73:2d:ae:b9:27:5a:
         47:60:49:5f:0e:a3:c8:53:41:a9:52:35:af:62:03:ec:f4:6f:
         52:a9:36:21:49:d1:d2:a6:4f:03:f6:e7:3d:8c:74:99:22:96:
         1e:31:05:93:af:20:d5:9f:9d:c1:05:b8:91:c9:f3:e8:46:64:
         63:7b:96:92:cb:41:16:b1:2f:d2:8d:b2:a2:97:20:15:51:fe:
         57:d5:52:48:64:8b:80:c5:a2:2c:a9:3e:d7:31:00:5e:27:2b:
         8b:58:dc:78:0b:6f:64:f5:57:2d:f8:a7:f4:ed:61:18:1f:a7:
         92:a6:7c:ba:4f:71:46:70:13:f0:b2:24:9d:f7:3c:1b:01:d2:
         1e:e5:e3:17:ef:7f:42:9a:cf:0b:2f:59:5f:0f:30:8c:cf:12:
         d9:b0:82:2d:8d:c0:2c:d8:d8:3b:cc:93:d0:0d:86:b5:ff:31:
         f6:2c:15:4d:94:1f:99:d9:78:06:65:5a:14:86:a3:c4:de:1a:
         ee:42:4f:29:3a:11:25:06:f2:17:62:4b:93:fa:38:fd:c8:4a:
         9b:49:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----