Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6K0Cgrm-ZeH_emflsZpSvsuZUeY.roa
File:                     6K0Cgrm-ZeH_emflsZpSvsuZUeY.roa (raw, json)
Hash identifier:          cU/3+LArG2GOy9oy7ygJfqHEbGOLA5ZNOAA5DZxGnfw=
Subject key identifier:   E8:AD:02:82:B9:BE:65:E1:FF:7A:67:E5:B1:9A:52:BE:CB:99:51:E6
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01839998C1134C46F14A9EC48D62C39DD576
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6K0Cgrm-ZeH_emflsZpSvsuZUeY.roa
Signing time:             Sun 02 Oct 2022 16:47:48 +0000
ROA not before:           Sun 02 Oct 2022 16:47:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59432
IP address blocks:        185.84.160.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:99:98:c1:13:4c:46:f1:4a:9e:c4:8d:62:c3:9d:d5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Oct  2 16:47:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8ad0282b9be65e1ff7a67e5b19a52becb9951e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:2e:cf:d2:22:78:4d:56:31:1f:43:c6:87:
                    e4:25:bb:86:82:c7:83:56:a7:42:fb:4a:39:b2:2e:
                    b1:77:f0:0f:be:25:ce:f9:85:4c:4c:cc:72:4f:a2:
                    24:06:c5:95:0d:5a:c3:62:bf:d1:de:0b:cb:31:f3:
                    3d:9e:e1:f9:7c:47:3d:14:b2:d3:2d:78:0f:5f:2e:
                    e0:03:32:f2:c4:e2:73:8b:43:8c:cd:86:5f:75:6d:
                    07:41:e4:aa:c5:33:87:84:43:8f:a8:ad:e8:d6:a6:
                    e3:a3:d7:f7:f7:9a:d5:c0:a5:10:e7:25:69:b5:a1:
                    0b:77:54:0c:ae:59:f3:51:48:f3:cb:7f:03:87:6c:
                    34:55:f7:fb:89:34:5a:ef:6a:cb:c0:42:99:ed:fb:
                    87:74:8c:1b:9a:0e:f1:35:da:a6:65:7b:23:9c:ba:
                    fc:5c:50:41:64:d9:9e:1e:7b:e1:b7:12:23:cb:08:
                    34:6b:70:6c:24:90:5a:c1:59:7f:a1:d5:5b:a2:6a:
                    35:f7:5c:33:8c:74:0f:ba:9c:d8:f0:81:e2:5f:21:
                    95:20:34:ec:68:b0:b1:61:97:11:fb:80:87:1c:42:
                    37:12:b1:5b:05:29:5e:56:9f:ef:33:ca:40:42:64:
                    4c:b4:32:89:51:c2:36:3b:4b:bd:6e:66:1f:bc:51:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:02:82:B9:BE:65:E1:FF:7A:67:E5:B1:9A:52:BE:CB:99:51:E6
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6K0Cgrm-ZeH_emflsZpSvsuZUeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:b7:a1:3d:0c:c7:f1:30:76:92:f6:5a:2a:44:4d:35:9c:e3:
         66:c7:d2:aa:b8:ed:47:7e:a8:fd:6c:40:9a:a8:28:46:7f:55:
         a5:96:31:9b:4f:19:b0:3c:36:33:ac:01:b9:80:e7:f4:ee:df:
         2a:20:52:6e:be:67:62:eb:d5:cb:ff:70:30:c8:ac:32:d1:6d:
         47:d7:4f:b9:2b:29:de:5a:83:05:71:04:c6:92:d0:d4:cf:69:
         8a:4f:a0:de:96:03:5a:16:49:17:53:ed:4d:86:9b:10:23:29:
         30:fc:1b:b8:7b:17:64:93:13:0b:9f:2d:73:4f:ea:78:26:3d:
         85:b6:d3:e8:83:82:d8:d4:91:08:b5:1c:f6:99:44:e9:a7:8b:
         e7:35:08:f1:e5:b0:0e:9b:54:18:87:20:66:4a:7a:b5:e6:9a:
         de:71:b1:c3:33:de:ed:69:61:ee:f7:a6:58:e8:57:09:80:73:
         bc:16:f8:85:0a:6e:2f:06:6f:6a:04:a7:17:7f:02:14:f1:d2:
         f4:b0:7a:67:cc:fb:e2:84:79:9b:a3:db:0c:c8:00:5f:16:f6:
         ae:1d:32:2f:80:4a:b7:40:70:21:0b:c6:b3:f3:91:a2:1b:b7:
         86:1f:bb:21:2a:ec:ac:8a:ba:c9:60:be:4c:62:83:ad:c9:52:
         e4:79:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----