Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/xdu-SGjXr01HNZO785N-EzOgtVE.roa
File:                     xdu-SGjXr01HNZO785N-EzOgtVE.roa (raw, json)
Hash identifier:          YAoMZJXVxPKMgEFpW+JlOx0uS6KL33oe+PxrLl0893o=
Subject key identifier:   C5:DB:BE:48:68:D7:AF:4D:47:35:93:BB:F3:93:7E:13:33:A0:B5:51
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       02459EE1
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/xdu-SGjXr01HNZO785N-EzOgtVE.roa
Signing time:             Sat 01 Jan 2022 04:56:53 +0000
ROA not before:           Sat 01 Jan 2022 04:56:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8469
IP address blocks:        185.64.96.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38117089 (0x2459ee1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Jan  1 04:56:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c5dbbe4868d7af4d473593bbf3937e1333a0b551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:da:6c:db:b4:f2:3b:a4:38:d6:74:56:5b:
                    5b:89:e1:58:a3:cd:c4:b0:63:67:b0:5c:d1:c8:81:
                    f9:47:18:e2:1a:1b:bb:10:52:2d:db:81:95:c5:30:
                    62:69:41:0b:95:93:c4:b5:51:67:61:26:9e:b1:c2:
                    b4:ac:ab:3d:7e:f2:4a:3a:66:2d:8e:ad:c1:f2:43:
                    21:c3:25:e5:f1:e7:f1:cc:20:9a:9b:9b:2b:be:e9:
                    42:c3:44:04:1b:4f:71:90:d4:ca:00:13:73:c5:42:
                    65:11:57:fb:76:79:f9:32:10:58:96:f6:3f:40:23:
                    0d:0d:84:a6:d1:7f:21:0f:e7:57:e1:83:1c:66:b1:
                    83:9c:a4:a0:aa:db:09:c1:d6:03:e1:f4:20:0d:09:
                    89:fb:c0:df:80:c3:83:c7:f1:d4:f5:37:92:24:86:
                    f8:ba:9d:03:f2:cb:bb:85:54:45:ec:7d:81:3b:aa:
                    d0:c5:99:5a:78:ad:69:c6:20:36:79:79:35:09:d4:
                    fc:66:02:d6:00:bc:b9:fc:65:79:13:cc:b0:6f:48:
                    5c:3a:43:6a:40:64:d3:c6:70:9a:dd:07:4d:b2:6a:
                    c9:31:c8:4a:3b:37:21:fb:c4:39:07:78:1f:15:71:
                    8b:dd:be:b2:a0:cc:b9:bc:57:c3:ca:2c:5d:a3:8f:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:BE:48:68:D7:AF:4D:47:35:93:BB:F3:93:7E:13:33:A0:B5:51
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/xdu-SGjXr01HNZO785N-EzOgtVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.64.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:53:c1:14:ed:83:7a:34:46:5d:85:4e:a3:85:5e:5f:3d:
         f9:6f:6b:e4:a9:dc:44:fc:c4:f3:5d:21:bb:3e:2d:5a:2e:b9:
         40:7b:cf:37:ba:77:06:23:1a:17:f6:70:ee:a6:b1:fd:b0:d7:
         ec:8a:43:18:8c:df:ba:4a:a0:f2:b4:e9:bb:19:14:f8:98:59:
         76:77:8e:76:6b:09:ff:56:a1:59:b8:81:e5:29:14:31:7b:35:
         46:e0:d7:5c:be:f7:47:a7:67:af:68:7a:7d:19:71:58:ed:dc:
         1e:54:ad:f5:50:77:27:38:54:01:2e:0c:62:eb:1d:4e:28:12:
         37:9a:e5:5a:f1:f6:2d:9b:51:c2:d5:99:14:8e:93:b4:5a:5c:
         e7:d0:35:53:a1:b3:8a:dc:e1:ea:e3:81:19:45:ff:f7:94:68:
         ea:4b:51:52:d8:42:b3:1e:57:db:b5:26:1a:f0:62:48:5d:8e:
         b9:92:e3:a3:ca:6c:a2:f3:bf:98:3e:d0:d9:67:f8:8f:a4:65:
         a7:48:fd:b7:d0:04:49:a7:49:60:99:4b:d2:dd:79:d0:3c:d9:
         af:74:81:4c:45:00:f9:b0:49:6a:dc:30:37:a9:09:ef:32:9c:
         90:d6:d9:46:44:1a:cf:66:21:5d:ef:e6:e5:ed:5c:03:7f:0a:
         b8:90:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----