Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/cq6p_IYIhjzeLh6PqFZjasUp1Nk.roa
File:                     cq6p_IYIhjzeLh6PqFZjasUp1Nk.roa (raw, json)
Hash identifier:          2s8YYYrZQPcMWdcmBm6YoaJkDPjmCovXy6HmqcJJXxA=
Subject key identifier:   72:AE:A9:FC:86:08:86:3C:DE:2E:1E:8F:A8:56:63:6A:C5:29:D4:D9
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       03E856CF
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/cq6p_IYIhjzeLh6PqFZjasUp1Nk.roa
Signing time:             Sat 01 Jan 2022 14:00:51 +0000
ROA not before:           Sat 01 Jan 2022 14:00:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21032
IP address blocks:        193.58.88.0/22 maxlen: 24
                          2a0c:94c0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65558223 (0x3e856cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Jan  1 14:00:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72aea9fc8608863cde2e1e8fa856636ac529d4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:1e:94:77:74:68:80:0f:34:b1:e8:0f:fb:
                    2c:aa:d4:a7:93:7e:3f:86:d1:1f:be:b4:af:19:ab:
                    93:f7:ec:a5:28:ab:e7:91:d5:50:40:43:27:b0:bf:
                    07:ab:1a:ed:45:85:dd:a7:c3:7b:39:1b:ea:e8:0e:
                    dd:2c:83:53:82:51:ce:cd:b2:e7:b4:1c:d5:5d:b8:
                    12:60:e9:d5:9b:eb:bd:f5:d9:a6:c7:9d:ce:b8:8b:
                    d2:ae:c6:9e:72:a3:38:73:4c:6c:10:c3:13:8c:ed:
                    d5:d2:aa:92:47:63:5d:97:da:3a:b8:03:15:26:97:
                    cd:11:d0:7d:e5:c5:b9:88:1d:86:0a:ce:95:54:3f:
                    c7:13:37:14:63:9a:5f:fe:41:dd:87:40:e2:b1:c5:
                    e0:f5:a4:c7:d7:34:f2:49:02:b5:ac:1b:0a:19:26:
                    21:1e:0d:53:36:57:30:b2:7d:ec:67:1b:61:0f:41:
                    a3:08:14:72:56:d8:87:1d:ad:e5:6b:6f:25:ae:84:
                    05:92:29:4f:92:8e:72:2f:4b:85:a9:15:7e:c0:21:
                    2d:e5:30:ef:d5:d5:86:21:49:65:ed:71:e3:e7:2b:
                    c2:58:81:72:b7:6f:de:59:51:59:08:63:5b:2a:63:
                    12:5c:7e:b3:a5:ec:58:5f:12:54:f6:75:15:78:71:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AE:A9:FC:86:08:86:3C:DE:2E:1E:8F:A8:56:63:6A:C5:29:D4:D9
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/cq6p_IYIhjzeLh6PqFZjasUp1Nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.88.0/22
                IPv6:
                  2a0c:94c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:64:81:62:66:56:54:ef:7e:9d:d5:fd:22:e9:0b:59:04:16:
         61:f9:93:9b:3d:1f:6e:a2:1e:9a:44:d7:99:8a:48:d3:ed:91:
         ba:8a:d6:a0:0b:08:8d:12:53:28:c5:06:1f:6f:f0:59:bd:50:
         0c:cc:b4:91:cf:5b:ef:c7:60:03:18:e6:02:48:79:21:c2:e6:
         d5:e3:2a:a4:98:98:74:7d:68:52:8c:b2:3d:93:ce:78:6d:96:
         ce:96:24:ba:25:98:d0:77:ba:5a:eb:d4:42:88:08:6c:ef:83:
         2b:f4:e0:2c:72:2c:3f:dc:51:b1:06:c9:3d:97:22:d9:87:32:
         80:a3:60:92:d9:5f:22:34:23:69:63:b9:2a:69:c7:03:02:b4:
         1e:f2:ee:35:f6:3d:97:f6:70:30:d4:51:18:44:ae:05:e2:67:
         44:02:16:ed:8f:21:46:de:52:e2:63:c1:1c:60:e8:aa:c5:36:
         ad:98:00:a2:e5:e5:2a:d3:a6:57:63:21:b2:e1:33:5b:2c:80:
         74:84:9c:97:3b:38:d1:1d:a1:e4:40:59:ba:9a:6b:aa:ae:26:
         53:b8:13:97:da:20:65:1f:02:ea:0c:e5:65:98:03:9c:df:0e:
         fc:ef:5e:bd:5a:a1:bb:ad:01:40:77:31:bf:1f:03:70:52:ba:
         95:15:17:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----