Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/EuZQVkpNP0-ZMNSuHX3qW9Fc0Yw.roa
File:                     EuZQVkpNP0-ZMNSuHX3qW9Fc0Yw.roa (raw, json)
Hash identifier:          xrnDT+Ki1nibnMRe660ZaxeoRdFvLEfvRYxPeuXw+/I=
Subject key identifier:   12:E6:50:56:4A:4D:3F:4F:99:30:D4:AE:1D:7D:EA:5B:D1:5C:D1:8C
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       047911B5
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/EuZQVkpNP0-ZMNSuHX3qW9Fc0Yw.roa
Signing time:             Tue 07 Jun 2022 12:32:02 +0000
ROA not before:           Tue 07 Jun 2022 12:32:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62005
IP address blocks:        185.123.53.0/24 maxlen: 24
                          193.109.120.0/24 maxlen: 24
                          2a10:1fc0:1::/48 maxlen: 48
                          2a10:1fc0:2::/48 maxlen: 48
                          2a10:1fc0:5::/48 maxlen: 48
                          2a10:1fc0:10::/48 maxlen: 48
                          2a10:1fc0:8::/48 maxlen: 48
                          2a10:1fc0:3::/48 maxlen: 48
                          2a10:1fc0:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75043253 (0x47911b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Jun  7 12:32:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12e650564a4d3f4f9930d4ae1d7dea5bd15cd18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:e2:31:0f:55:2a:eb:7b:86:48:38:d0:c7:
                    e7:70:c8:1c:ac:e5:65:2d:8c:a2:73:cd:d6:7b:e3:
                    16:7a:4e:99:d9:f6:d8:1f:34:17:75:03:a9:aa:98:
                    b1:df:7a:bd:80:e3:51:05:d4:d2:4d:74:1f:e5:bc:
                    b9:09:e7:7c:be:5c:21:90:49:b2:40:f3:c7:24:45:
                    a4:47:d0:38:0d:4f:b2:01:5b:05:21:64:9e:e5:67:
                    a7:47:c3:7b:ab:16:23:7a:ca:43:5e:87:7d:df:a8:
                    36:29:cc:00:6b:99:c7:ff:ff:b5:c9:71:89:7a:ce:
                    7f:41:b8:8e:2f:2e:a0:90:d4:cb:0f:8a:0d:4b:0c:
                    87:88:13:4b:62:41:c2:20:1e:7a:be:8d:10:bd:ea:
                    c1:61:fa:08:da:89:2c:e6:7d:9f:27:0e:3e:67:8e:
                    54:27:b7:08:6e:c7:5f:32:92:68:d2:9a:67:2c:cc:
                    eb:ce:a5:37:84:1f:0c:39:06:98:69:0c:4e:f5:fe:
                    be:aa:0e:f2:75:18:b3:eb:0c:63:c0:af:50:00:b7:
                    cd:39:f6:2f:4e:42:64:2d:55:d2:6b:e1:a5:ae:65:
                    b3:9b:6f:49:e6:f7:f4:80:56:d2:b2:86:4d:55:57:
                    d7:c0:0b:04:b0:b7:8b:d6:4a:1f:c5:6e:12:99:d7:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E6:50:56:4A:4D:3F:4F:99:30:D4:AE:1D:7D:EA:5B:D1:5C:D1:8C
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/EuZQVkpNP0-ZMNSuHX3qW9Fc0Yw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.53.0/24
                  193.109.120.0/24
                IPv6:
                  2a10:1fc0:1::-2a10:1fc0:3:ffff:ffff:ffff:ffff:ffff
                  2a10:1fc0:5::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
                  2a10:1fc0:8::/48
                  2a10:1fc0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:a7:a2:ef:35:d0:0c:33:64:cf:55:81:a9:e7:ae:0d:18:7b:
         de:27:c2:f6:02:79:8e:d6:f4:a6:ac:c5:d2:94:be:51:c3:c3:
         a2:86:6c:ad:11:78:0c:18:bd:47:ae:7e:96:0e:69:ab:45:1b:
         dc:89:12:f6:13:85:3a:fc:15:47:35:20:28:ee:b5:68:e8:2d:
         37:7e:c6:76:f3:5a:00:c5:3a:d5:03:00:9d:85:b9:69:04:bc:
         90:2e:95:3e:73:b0:9a:3d:7e:70:78:e2:f3:84:54:de:f3:be:
         82:cd:62:00:0a:11:c4:84:75:ea:d7:c4:72:5a:b7:79:a2:97:
         f6:c7:5a:d4:59:91:c2:f3:10:a7:2d:cc:ae:3d:fb:eb:17:86:
         81:16:e0:35:ed:71:47:8b:d9:e5:a4:dc:57:75:a8:30:eb:1e:
         dd:4f:ad:92:a1:5f:c8:1d:59:ce:78:58:ad:b1:8b:19:45:22:
         0f:6f:0f:cc:21:fa:32:5a:65:80:d9:7e:a7:6c:92:52:6b:ed:
         6c:bb:df:ea:c1:ee:8b:99:9c:aa:dd:29:49:52:c9:d8:98:86:
         f4:be:9c:29:34:21:fe:db:59:17:b8:be:a1:12:c8:3f:1c:07:
         6e:a3:b1:be:bc:c0:e3:7f:c5:fa:04:d2:32:76:e5:5a:d7:38:
         a3:25:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----