Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/sqkHKB02xqCwGtMzzJ07JXCoREM.roa
File:                     sqkHKB02xqCwGtMzzJ07JXCoREM.roa (raw, json)
Hash identifier:          3tui1RZBkBiKjwInMrknv+OO8+I0E+q4hTL7trjcwQg=
Subject key identifier:   B2:A9:07:28:1D:36:C6:A0:B0:1A:D3:33:CC:9D:3B:25:70:A8:44:43
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       1355FC48
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/sqkHKB02xqCwGtMzzJ07JXCoREM.roa
Signing time:             Sat 01 Jan 2022 01:53:36 +0000
ROA not before:           Sat 01 Jan 2022 01:53:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12731
IP address blocks:        185.106.86.0/23 maxlen: 23
                          2a02:8001::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324402248 (0x1355fc48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Jan  1 01:53:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b2a907281d36c6a0b01ad333cc9d3b2570a84443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:46:5b:1b:4c:32:56:fa:83:2c:d5:f3:da:
                    8c:07:72:16:be:f8:52:49:4a:7f:c0:3d:00:8e:35:
                    3e:84:1a:31:58:1c:ff:cd:73:12:64:62:64:0b:fb:
                    9c:5f:4b:0f:b4:66:20:f0:e9:be:b8:68:2f:db:0b:
                    ea:ea:7c:cc:9b:f9:28:78:b4:89:48:4a:36:a0:fe:
                    5a:9f:18:29:ee:5f:3d:5e:4a:fa:de:de:bd:55:95:
                    e0:06:b1:f1:fb:61:b8:3f:90:f7:0e:72:5d:3e:b9:
                    bb:d3:00:42:26:83:02:fe:ed:9d:c7:7a:d1:80:59:
                    00:e3:53:30:50:c0:76:68:9b:fa:8f:03:d9:b2:ec:
                    db:67:62:ea:c7:e4:4d:9b:cf:f0:3b:c8:12:32:b2:
                    f4:77:4c:c9:83:1c:e4:01:46:15:0d:86:c1:fe:bc:
                    94:58:a7:e9:4d:00:9f:44:bf:89:b7:af:c6:35:08:
                    bb:e2:8c:d7:e0:e7:84:73:88:f4:f7:6e:d3:35:39:
                    04:8b:fc:c0:70:4f:ed:78:23:7a:e4:7f:4a:fe:6e:
                    77:ab:c6:62:fb:8a:89:4a:d4:e8:f5:d1:7c:4a:6d:
                    ea:7e:49:8e:40:a4:de:84:cb:70:5f:b5:cc:d9:11:
                    c2:a9:e8:d7:f1:43:b7:9d:20:dc:d9:4c:14:cd:6e:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:07:28:1D:36:C6:A0:B0:1A:D3:33:CC:9D:3B:25:70:A8:44:43
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/sqkHKB02xqCwGtMzzJ07JXCoREM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.86.0/23
                IPv6:
                  2a02:8001::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:65:fb:89:91:03:3b:a5:ec:8a:dc:77:40:ec:09:6a:f4:ab:
         65:0d:6d:71:68:16:a8:e4:58:35:64:ed:f8:1b:f5:c4:a4:37:
         d5:fb:ac:d1:b2:e0:c3:f4:d6:09:60:01:c0:80:a0:0f:d9:13:
         cf:6f:40:a0:e6:79:48:b7:b5:3f:1f:38:bc:cd:28:37:dc:f9:
         37:9b:d4:9f:ba:81:28:24:f6:d4:ae:51:58:c9:2f:af:7a:af:
         05:7e:5b:53:91:cb:b2:49:d0:f7:3b:80:49:d4:24:84:fa:36:
         6d:ee:89:9e:fd:ad:cf:d6:81:61:4f:dc:c9:1d:12:d1:4c:ba:
         f2:f5:fb:0e:ee:7a:b1:52:d5:3d:41:b9:7a:db:a3:25:09:8b:
         3d:1a:b7:a9:5d:a8:c0:d8:7d:c8:be:9d:a4:3b:f5:9a:d5:ba:
         a2:47:b4:97:6c:ba:c5:d7:bf:e3:bd:f1:e6:6f:45:05:d9:26:
         56:52:8f:96:54:87:43:55:4c:a6:fb:ee:80:85:14:14:00:3c:
         82:da:ad:f8:91:06:7d:89:d7:45:a2:db:b5:0d:0d:c9:05:be:
         83:50:87:c8:30:48:44:03:b1:da:e1:ce:ea:02:ec:a8:50:cd:
         a9:fb:4a:82:49:f2:2d:9a:99:4a:b4:e1:df:e6:91:dd:3e:27:
         61:70:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----