Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/l8CP7jfYtKpUSXs7r7v0HrWmvCY.roa
File:                     l8CP7jfYtKpUSXs7r7v0HrWmvCY.roa (raw, json)
Hash identifier:          F+TOqv8jrX+IO5vyyUQw7lU8SRwtheOz/4c9z8q5q1M=
Subject key identifier:   97:C0:8F:EE:37:D8:B4:AA:54:49:7B:3B:AF:BB:F4:1E:B5:A6:BC:26
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       031B1A54
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/l8CP7jfYtKpUSXs7r7v0HrWmvCY.roa
Signing time:             Sat 01 Jan 2022 09:06:20 +0000
ROA not before:           Sat 01 Jan 2022 09:06:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44334
IP address blocks:        92.61.160.0/20 maxlen: 21
                          92.61.168.0/21 maxlen: 21
                          2a03:4600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52107860 (0x31b1a54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Jan  1 09:06:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97c08fee37d8b4aa54497b3bafbbf41eb5a6bc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:95:5b:87:88:30:38:e6:d4:e9:d5:cc:4d:
                    53:33:02:5d:0c:e1:88:84:48:82:42:fd:5f:f6:72:
                    58:7b:c4:60:6d:57:f2:30:6b:1c:ee:4b:21:41:95:
                    3e:d2:19:82:bf:41:db:59:0a:75:c0:a5:11:99:6f:
                    6c:dd:85:67:61:70:de:b5:b4:26:28:db:be:23:0f:
                    53:a3:3e:fa:d2:de:1f:4d:f3:1c:d4:2f:df:02:03:
                    b5:b9:db:1b:1b:b2:da:f7:f9:05:fc:36:36:ba:f9:
                    2d:ea:83:dc:7a:f1:d0:b8:1d:4d:c8:78:ae:ae:cc:
                    d9:c0:4a:63:de:8e:b1:ef:d8:0c:af:3b:8d:97:51:
                    a0:23:59:08:5b:60:84:da:02:04:ca:09:ff:d4:a4:
                    46:63:94:7f:a8:3b:be:ec:31:f1:5c:c2:ea:eb:3f:
                    c0:05:d9:f2:c9:4d:14:86:e3:51:26:5b:92:fd:da:
                    c1:2e:3b:c5:f3:ec:ea:64:56:40:24:fa:4d:4a:1f:
                    1a:e0:86:73:13:bc:a0:58:49:86:46:9c:bb:1f:9a:
                    69:0e:76:97:96:75:6f:a7:f9:ef:b3:35:4f:18:b5:
                    9e:de:ec:0a:79:61:90:1f:95:30:c3:44:4d:3c:af:
                    e6:d1:01:d1:9e:54:47:dd:96:7c:76:af:fb:c0:ee:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:8F:EE:37:D8:B4:AA:54:49:7B:3B:AF:BB:F4:1E:B5:A6:BC:26
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/l8CP7jfYtKpUSXs7r7v0HrWmvCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.160.0/20
                IPv6:
                  2a03:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:82:89:b9:02:07:bf:cb:8d:45:a6:39:e9:b3:25:82:00:d7:
         04:48:90:41:55:26:af:6f:9d:62:1e:9a:e6:8c:26:3b:95:ae:
         84:97:b9:fd:f6:96:e3:de:68:94:76:c1:1a:9e:fc:7a:ba:e3:
         5b:54:45:2d:41:d0:9b:1c:56:ba:35:9a:b4:d1:54:4b:5d:c8:
         12:91:c6:02:0e:31:1e:eb:c6:4c:fe:7c:45:0e:67:5c:98:49:
         00:2f:ed:aa:4d:d2:89:4c:f4:9d:49:36:84:64:3c:ce:05:09:
         60:8a:25:e1:bf:5b:c3:3b:b5:5d:e8:88:9d:09:b1:72:e2:69:
         eb:61:cc:cf:1b:04:d2:a3:70:d9:13:c1:8e:6f:34:90:f8:c2:
         ef:21:26:22:ef:6e:01:2b:61:29:2b:85:8e:7e:03:6d:4f:a3:
         75:63:1e:79:74:49:c6:67:9c:1b:92:1a:5b:6f:97:31:14:62:
         91:ab:29:4c:2b:13:c0:60:17:6d:52:51:ef:1d:e2:23:37:89:
         e1:34:32:7f:95:5d:21:bb:87:c1:fc:96:6e:8d:cc:59:f5:c2:
         85:e9:df:09:0a:ca:66:41:37:f2:de:8d:34:09:74:fc:ee:fe:
         21:cf:26:d1:8e:c5:ca:e3:85:bf:70:c6:54:9e:a7:17:c5:08:
         c6:19:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----