Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/1IZguII_C8fC03KTNtCAxfQ-S-E.roa
File:                     1IZguII_C8fC03KTNtCAxfQ-S-E.roa (raw, json)
Hash identifier:          uLDfMfylKJJvzrKKa0uCrz4Xm4cA+g8jh5K3y2XhtGg=
Subject key identifier:   D4:86:60:B8:82:3F:0B:C7:C2:D3:72:93:36:D0:80:C5:F4:3E:4B:E1
Certificate issuer:       /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial:       018355CEF6F6B3EC8E8D524F416075A08A2E
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/1IZguII_C8fC03KTNtCAxfQ-S-E.roa
Signing time:             Mon 19 Sep 2022 12:52:50 +0000
ROA not before:           Mon 19 Sep 2022 12:52:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212808
IP address blocks:        185.175.88.0/24 maxlen: 24
                          2a10:45c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:55:ce:f6:f6:b3:ec:8e:8d:52:4f:41:60:75:a0:8a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
        Validity
            Not Before: Sep 19 12:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d48660b8823f0bc7c2d3729336d080c5f43e4be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:2e:96:7a:19:5c:13:fe:3d:aa:d5:8e:1c:
                    47:f8:5e:cb:4f:85:c5:80:d9:63:57:40:4b:f1:fc:
                    82:3a:34:71:51:ff:a5:d0:50:f5:54:e7:f6:a9:6d:
                    83:5c:37:f9:3a:89:2b:39:21:1c:e4:6c:09:f3:3b:
                    0f:16:4f:9d:da:71:58:86:74:6f:ad:de:8d:fe:d1:
                    61:16:75:97:70:57:aa:a3:14:02:0d:26:c8:2d:84:
                    1c:92:3f:5e:b5:f5:25:a8:5c:2b:c4:ee:5b:e9:e9:
                    f2:66:e8:db:b2:6d:6f:04:3a:c0:4c:91:c2:4a:42:
                    c4:30:2d:a2:96:62:0e:23:4d:14:5a:0c:56:3d:76:
                    53:c5:fe:21:cc:b6:6d:ac:62:97:5f:25:5c:d3:c5:
                    76:fd:1d:eb:14:04:14:ab:a8:f7:f8:1c:96:86:5f:
                    b9:2b:cf:c2:2e:23:5b:5f:e6:f2:41:28:1f:38:16:
                    b3:50:27:c4:71:d5:22:0d:9e:46:c0:80:38:63:b8:
                    22:58:eb:c4:73:5d:a7:c4:15:49:77:f1:8c:17:0c:
                    ac:1b:82:e7:f9:a8:d1:51:1d:cf:e0:9c:ac:d0:c7:
                    69:97:bb:ac:ba:c3:fa:cc:34:03:eb:80:8f:7d:9f:
                    d3:cc:ec:86:1e:de:1f:ab:a9:c8:f6:f7:8a:9a:9d:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:86:60:B8:82:3F:0B:C7:C2:D3:72:93:36:D0:80:C5:F4:3E:4B:E1
            X509v3 Authority Key Identifier:
                keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/1IZguII_C8fC03KTNtCAxfQ-S-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.88.0/24
                IPv6:
                  2a10:45c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:fa:bf:75:4e:26:84:f7:34:94:ec:7a:08:47:93:f0:e5:
         47:95:53:38:ad:70:ce:44:02:98:d1:0d:53:21:ed:9d:0e:8d:
         10:39:55:24:0b:27:b6:da:29:4d:8b:e2:73:11:bb:6e:39:f6:
         6c:ee:c2:63:51:a1:f6:57:9c:bd:57:14:bf:af:66:7c:c8:19:
         2e:36:c9:20:e3:85:52:76:ef:c0:0c:97:37:2d:e3:dc:5c:95:
         75:99:ba:1d:82:ec:36:df:8d:da:12:82:b5:3b:6b:8b:99:0f:
         3a:b3:95:f3:23:6a:7b:ad:a9:c3:8e:c9:d0:b1:a2:8b:07:dd:
         5a:2a:c8:a5:e0:64:1b:33:ee:fb:ea:e1:c3:a4:7c:cb:f2:72:
         ea:b1:9d:5e:10:35:9d:69:db:54:ab:da:79:2c:a2:bd:f9:b4:
         9c:86:75:04:8b:6f:f1:15:5f:8e:a6:20:f3:aa:c6:7f:8b:34:
         79:cb:fa:67:20:6a:8e:94:ab:92:8b:da:60:f0:b7:0e:ac:ce:
         b7:38:04:f0:2c:9f:21:19:8c:6d:1b:d7:ab:d4:c2:c4:90:b0:
         2c:d4:2a:f1:ce:87:bc:75:ba:4e:90:32:a3:32:4c:39:b2:a3:
         23:82:1e:ad:a9:d5:6e:b2:9d:6d:d9:d8:4d:b3:c2:e6:07:fc:
         58:dc:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----