Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/yVA1y3IvrWxKlZ2CXLzYzBpw9Ks.roa
File:                     yVA1y3IvrWxKlZ2CXLzYzBpw9Ks.roa (raw, json)
Hash identifier:          bZ1zhgJ3G7GZRvDb5AXo+D6zTg/293TbJ7GmQwiBM8w=
Subject key identifier:   C9:50:35:CB:72:2F:AD:6C:4A:95:9D:82:5C:BC:D8:CC:1A:70:F4:AB
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       078EC51E
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/yVA1y3IvrWxKlZ2CXLzYzBpw9Ks.roa
Signing time:             Sat 01 Jan 2022 15:58:17 +0000
ROA not before:           Sat 01 Jan 2022 15:58:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        185.187.116.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126797086 (0x78ec51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Jan  1 15:58:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c95035cb722fad6c4a959d825cbcd8cc1a70f4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:cc:f1:a9:a3:87:0c:c5:b4:90:1b:37:e2:
                    31:f9:31:fa:07:d1:f3:d1:09:39:57:48:2e:bd:bb:
                    fd:ec:8a:dc:3c:6c:90:9c:5b:8e:c0:34:04:b0:18:
                    df:a5:ee:57:6c:2f:97:21:f2:14:86:bb:17:a2:39:
                    c2:4e:05:cb:52:01:6c:af:08:c5:73:27:47:9a:dd:
                    75:1e:07:b1:ff:b5:6a:9a:13:0f:68:7c:c0:b8:bd:
                    9d:cc:d1:14:5a:8a:ba:bc:b8:ad:a3:a9:ba:7f:2f:
                    c9:6e:88:c8:f8:f9:2b:95:37:a8:26:f3:89:29:ce:
                    3a:09:bc:f8:be:5f:6d:bd:37:01:a6:13:84:f5:f8:
                    c5:5d:98:48:13:b8:0e:91:6f:f4:a1:3d:3e:8a:b5:
                    97:51:22:06:df:7d:76:02:db:d7:7e:a9:f4:68:ec:
                    0b:6c:df:0f:85:8b:22:6e:77:69:92:85:1e:4b:9a:
                    a3:fd:35:2b:13:58:8e:74:57:10:9c:0e:bd:2e:f3:
                    b0:e6:b6:74:5c:9f:60:16:c1:ef:db:19:83:56:e5:
                    b4:de:a2:47:63:9e:14:9b:77:21:ea:1b:ad:ac:c6:
                    30:ff:5e:f5:d0:6a:d5:f9:d9:47:fb:0b:51:00:d8:
                    54:95:eb:1e:6f:55:6f:ea:58:a1:81:14:12:64:e8:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:35:CB:72:2F:AD:6C:4A:95:9D:82:5C:BC:D8:CC:1A:70:F4:AB
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/yVA1y3IvrWxKlZ2CXLzYzBpw9Ks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:c6:5a:23:86:e6:f7:bf:0c:18:06:cf:5e:f6:30:cb:6d:
         51:05:d4:ff:6f:ef:3b:b8:c4:8d:ed:56:0e:80:70:12:e7:e1:
         f8:c6:53:d2:b8:a4:78:2c:e9:ed:d0:eb:e6:f4:b5:d4:ee:ad:
         24:3c:e9:75:7a:6d:63:54:57:7a:41:e4:06:fc:c4:75:76:de:
         df:60:ac:a4:fc:bf:d8:e1:c8:e9:90:24:c2:37:27:fb:19:64:
         eb:07:75:8b:1e:fa:3a:05:74:fa:ad:e7:bd:08:f7:bd:ef:c5:
         1d:d1:e8:be:e3:f0:2b:4f:82:c0:fc:82:9c:9e:13:b3:ac:ac:
         de:86:5d:02:89:08:8d:04:a4:04:86:c1:b2:f9:ac:55:df:65:
         c5:d7:fe:54:42:83:76:34:10:bb:a8:fb:e0:57:fb:c3:62:79:
         a0:3c:70:46:b5:71:6f:c6:f3:6e:e5:30:20:53:6a:6f:1d:c7:
         00:ab:98:b6:fa:61:ef:01:c7:03:42:b2:4f:ff:6a:ac:e3:01:
         d7:dd:bd:4e:de:c3:ce:64:52:07:12:92:89:87:63:91:a3:f9:
         f1:7b:dd:eb:b0:0f:bf:7f:4a:59:9b:20:d7:80:be:39:b5:a9:
         4f:90:3a:45:fc:fe:6c:cd:08:0a:53:0e:59:d5:a6:b4:20:7d:
         f3:ac:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----