Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sHbdIduHjuNywGEaauDY9rFonRQ.roa
File:                     sHbdIduHjuNywGEaauDY9rFonRQ.roa (raw, json)
Hash identifier:          ZYajWt1wFSMl4z8NvQ9fM+Hk4Dnin1yvuJ0sgejbKcY=
Subject key identifier:   B0:76:DD:21:DB:87:8E:E3:72:C0:61:1A:6A:E0:D8:F6:B1:68:9D:14
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       093749F8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sHbdIduHjuNywGEaauDY9rFonRQ.roa
Signing time:             Sat 01 Jan 2022 06:00:27 +0000
ROA not before:           Sat 01 Jan 2022 06:00:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31472
IP address blocks:        185.132.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154618360 (0x93749f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 06:00:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b076dd21db878ee372c0611a6ae0d8f6b1689d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:16:39:c7:4e:87:5e:40:5a:1b:79:66:9f:
                    0a:de:f8:b7:26:57:76:70:85:9e:26:cd:5e:bf:a1:
                    00:be:6c:e1:7f:e3:57:48:eb:5c:99:4e:71:55:31:
                    99:7a:c3:e1:b6:c1:e1:62:71:4b:a8:40:f7:e3:f9:
                    ce:7f:59:c6:77:35:29:a8:a9:27:f2:71:f8:56:c6:
                    57:26:83:74:24:9a:d6:0d:17:61:86:3c:d6:47:7c:
                    4a:9a:e6:8a:d4:10:7d:b1:90:fd:ce:49:3f:48:b9:
                    c4:e8:9a:46:57:af:cc:48:c1:3c:b6:9c:90:38:1b:
                    67:94:e5:31:18:03:8f:63:12:2a:8d:d5:b1:9c:28:
                    52:3b:8a:61:3c:79:78:72:2f:44:ff:e0:21:a2:fa:
                    26:f0:ca:56:a3:17:50:0f:2b:2a:d5:5b:51:a3:91:
                    c5:51:57:e5:2f:55:62:f8:b1:8a:1d:1e:33:a7:31:
                    e1:b5:05:5a:49:88:db:bc:d7:b4:d6:62:3e:8f:bf:
                    ca:7e:c1:ea:7a:8b:0e:46:b2:75:0a:20:cd:22:1f:
                    fe:bf:2c:54:31:73:ae:ac:eb:17:85:da:fb:20:48:
                    34:67:ea:67:7e:19:b5:b4:98:9e:dc:de:a1:ed:6f:
                    78:55:69:5f:c5:6f:6f:e0:5f:b0:3d:73:15:35:aa:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:76:DD:21:DB:87:8E:E3:72:C0:61:1A:6A:E0:D8:F6:B1:68:9D:14
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/sHbdIduHjuNywGEaauDY9rFonRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:4b:85:e6:8d:a9:ed:5f:de:d7:69:3f:3f:e9:a4:9a:5f:
         e5:88:a1:ee:32:f5:3e:f6:81:e6:cb:3c:79:41:f8:05:ef:b7:
         c8:3b:c0:66:6f:f6:c4:56:c7:9b:4c:db:68:62:5c:25:a3:b1:
         2a:c7:66:eb:7b:68:01:b5:7a:5b:07:e1:67:9e:9b:f2:16:92:
         e1:1d:7d:a6:cc:52:13:a6:18:48:0c:94:bf:9f:ce:93:28:e1:
         7c:09:17:b1:43:6b:90:47:3b:70:2c:98:18:f6:2f:36:e7:87:
         19:62:32:f4:10:39:86:f6:6a:a2:20:1f:01:14:f7:56:c2:cf:
         48:78:b6:ff:b0:61:86:76:7a:02:92:41:cb:a7:07:b5:1e:2b:
         ab:14:bb:59:03:4e:2c:3a:56:b1:84:ff:0c:ce:be:7f:e5:92:
         6f:52:36:52:a0:9d:cf:c9:bb:56:50:64:f4:de:fe:1e:11:35:
         71:a5:96:56:c6:94:ee:bf:3d:93:1d:86:82:c2:de:21:e3:4f:
         a6:6a:a1:da:10:d0:33:1c:6d:90:89:29:0e:0c:89:59:23:6b:
         9e:98:1e:c4:ff:e2:14:78:45:20:f4:a1:ed:a5:93:5b:62:1b:
         16:6d:dc:95:fd:e1:13:96:d9:89:6f:f6:86:61:fc:ed:9d:61:
         fe:26:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----