Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/w1Q4dENcUQsDsnTrOqBfQnCsoh4.roa
File:                     w1Q4dENcUQsDsnTrOqBfQnCsoh4.roa (raw, json)
Hash identifier:          o544x7Hr765pYjqmMG3P4P3W0p1GA/UrlazM0Wz6dxY=
Subject key identifier:   C3:54:38:74:43:5C:51:0B:03:B2:74:EB:3A:A0:5F:42:70:AC:A2:1E
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       03FF946B
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/w1Q4dENcUQsDsnTrOqBfQnCsoh4.roa
Signing time:             Tue 12 Apr 2022 07:14:44 +0000
ROA not before:           Tue 12 Apr 2022 07:14:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44334
IP address blocks:        92.61.160.0/20 maxlen: 21
                          2a03:4600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67081323 (0x3ff946b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Apr 12 07:14:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3543874435c510b03b274eb3aa05f4270aca21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:5d:c5:9a:a6:ee:9b:6a:48:93:7f:a0:b2:
                    17:57:1b:3e:94:73:59:52:a1:79:52:d5:74:71:00:
                    09:2a:75:b4:28:9f:61:94:78:8f:73:5a:93:83:df:
                    4e:90:5b:33:e2:dc:71:22:97:f8:d5:c7:29:10:d0:
                    f0:a1:b5:35:40:75:24:f3:29:1f:09:46:61:95:bd:
                    d8:f2:f1:a1:1c:49:6d:e9:d7:49:3d:22:fe:13:25:
                    28:18:30:ec:9f:10:11:b9:22:77:8c:7a:05:53:8b:
                    b1:14:8f:e5:55:8d:1d:c3:74:8e:74:5b:a4:8a:2e:
                    de:e3:59:00:f1:45:79:04:9e:2a:78:18:b2:9d:78:
                    e7:c9:56:b8:20:9e:82:ac:93:df:6c:12:87:87:d1:
                    1a:9d:55:c2:fc:1e:b6:58:6a:f0:80:9c:ea:ec:08:
                    66:5e:14:ef:2b:c1:af:50:0f:ac:d3:3e:c8:c4:69:
                    19:b1:c6:82:03:87:ee:9a:d6:2e:ed:d8:5d:35:41:
                    7a:b1:ef:41:cc:49:86:b3:76:cc:7d:d7:3a:54:5d:
                    5b:0e:ff:d4:08:eb:11:2f:ad:b9:0f:84:a4:6d:01:
                    36:9b:de:10:35:f4:92:b6:37:18:f3:fd:29:a1:e6:
                    41:1e:ca:d9:64:03:4a:ff:8e:06:af:91:ab:db:99:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:38:74:43:5C:51:0B:03:B2:74:EB:3A:A0:5F:42:70:AC:A2:1E
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/w1Q4dENcUQsDsnTrOqBfQnCsoh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.160.0/20
                IPv6:
                  2a03:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:c5:a1:1c:b0:57:bf:50:2c:44:25:5b:f1:44:a3:04:f4:0a:
         91:52:c5:12:8d:44:bd:db:79:20:51:a3:6b:41:8c:f4:ed:4b:
         87:94:74:f7:35:c7:e5:76:0d:9e:a0:d9:4c:91:e4:4a:e5:98:
         e6:aa:aa:cb:da:6d:8c:57:50:7c:92:93:07:79:2c:d4:ad:0e:
         b6:65:bb:83:9c:43:0e:af:e7:91:e9:b1:e6:57:f4:1b:9a:a5:
         48:a5:9d:0d:d4:ca:84:cc:da:40:c8:c8:5d:3b:6c:c6:a2:ad:
         56:41:fe:6d:33:58:fa:d2:52:8d:3c:36:1d:4a:f6:8c:c7:af:
         8f:c3:4c:52:81:3d:9f:85:75:8d:97:9a:8a:9c:e7:30:74:fd:
         af:ed:06:f0:ab:bc:0e:40:2b:3c:71:4b:73:5d:8a:c9:c7:aa:
         b2:1e:c6:d2:b5:d1:53:d4:4f:d4:66:31:f3:5d:b7:70:34:8e:
         61:bc:c8:23:ec:d5:63:0d:42:37:99:94:20:76:09:2f:26:1a:
         37:11:53:05:88:57:ba:f6:e1:d1:9d:91:dc:2a:f3:a2:26:e1:
         47:86:7b:39:3a:90:3f:08:8b:31:21:d0:f8:ab:f9:35:7d:78:
         4a:56:0b:d1:19:fe:eb:71:4c:45:f5:56:f6:ff:e5:51:39:7d:
         1b:c5:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----