Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/Djk8o8_u7n7OGL7gyesCWfJWX00.roa
File:                     Djk8o8_u7n7OGL7gyesCWfJWX00.roa (raw, json)
Hash identifier:          ruoSTTgMWp3nb5sVyhqmn9iwkm4aOjltQDxdhsuJK+w=
Subject key identifier:   0E:39:3C:A3:CF:EE:EE:7E:CE:18:BE:E0:C9:EB:02:59:F2:56:5F:4D
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       1919CAE6
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/Djk8o8_u7n7OGL7gyesCWfJWX00.roa
Signing time:             Wed 16 Feb 2022 13:51:58 +0000
ROA not before:           Wed 16 Feb 2022 13:51:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202032
IP address blocks:        185.54.80.0/22 maxlen: 24
                          2a02:4460::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421120742 (0x1919cae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: Feb 16 13:51:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e393ca3cfeeee7ece18bee0c9eb0259f2565f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:02:e8:7b:64:72:36:4d:e8:fc:75:ee:44:
                    20:c6:c7:18:2a:6c:34:48:4a:14:66:81:08:8e:7a:
                    cd:0c:bf:21:c4:e2:48:12:5b:8c:a3:d8:6d:13:3d:
                    d9:ff:ed:b4:14:0c:72:6b:2b:bc:07:23:f6:f5:17:
                    a0:bf:c7:18:6e:6e:25:93:3b:37:23:d6:24:df:d6:
                    66:ef:f0:05:86:65:0d:71:75:f4:b8:ff:7b:50:13:
                    55:32:ed:82:83:4b:72:14:e7:1b:f5:3b:33:9a:61:
                    ce:a1:80:6b:e1:ae:d6:51:14:33:93:d7:43:66:ef:
                    db:33:9c:39:c9:d6:48:6e:dd:45:04:2a:bf:1c:7d:
                    c2:4f:54:6e:7b:1b:08:4a:ed:39:9e:8b:f1:69:a1:
                    9f:0f:e6:d4:4d:d8:b9:fa:c8:e6:78:7b:dd:f7:45:
                    c5:6e:b9:2f:8a:3b:6f:07:45:3e:bd:b7:c9:2a:51:
                    4f:df:d0:37:d7:8b:cf:4f:f3:f9:cf:40:cc:c7:12:
                    55:8b:e7:c3:62:32:d0:ee:35:c6:13:bd:af:45:23:
                    5e:68:6a:9d:da:2d:f5:b1:49:7e:99:5e:7f:b4:ce:
                    b2:07:28:18:84:7f:9a:ff:86:8c:9f:95:b4:a1:ec:
                    30:e5:e9:fb:49:06:2d:c6:b1:73:89:92:08:13:d2:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:3C:A3:CF:EE:EE:7E:CE:18:BE:E0:C9:EB:02:59:F2:56:5F:4D
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/Djk8o8_u7n7OGL7gyesCWfJWX00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.80.0/22
                IPv6:
                  2a02:4460::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:92:cc:a3:a1:12:de:67:a9:f6:38:bb:f0:0c:8e:9a:61:
         f8:d9:c4:67:93:69:88:28:57:6f:ac:0a:3a:81:e5:b7:6f:aa:
         d6:20:f1:5a:f1:98:db:ef:48:06:a3:0d:aa:e2:50:39:19:2a:
         6c:a5:57:3d:01:1f:04:70:2c:06:01:f3:e4:16:c7:73:40:a1:
         19:8c:19:2d:2c:f3:23:9a:ac:c3:32:10:13:c7:8a:39:6b:5c:
         10:e5:54:9c:07:5c:7d:dd:3a:d7:86:8c:5e:db:63:a8:e3:70:
         0b:b6:3d:d9:f1:8f:2e:5d:82:d8:70:37:25:2d:da:8b:6f:92:
         5a:9d:c3:bc:21:d9:6f:a4:c1:84:62:e3:da:3e:bb:82:6e:f5:
         bf:95:78:4d:61:40:a2:00:24:a0:9e:a4:5b:be:af:28:20:9c:
         57:99:59:77:78:d3:ed:30:1a:03:2a:d2:ca:53:43:6b:90:bb:
         35:01:eb:b9:a4:ed:1f:b8:32:89:fe:59:5f:0e:20:85:52:f8:
         2f:c5:cf:73:89:5b:53:3b:9c:a5:eb:cb:b2:11:9f:d6:d9:0b:
         fb:e1:f1:7c:d3:44:2e:5a:cf:b9:cf:a2:3c:13:23:94:7a:f3:
         90:10:79:39:a7:df:13:9a:65:f3:a0:b0:cb:dd:8e:12:80:16:
         a7:e6:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----