Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/elnKjcgHDy5BO-_X1muQFxK_P1M.roa
File:                     elnKjcgHDy5BO-_X1muQFxK_P1M.roa (raw, json)
Hash identifier:          pYvHnYHzgPFO+KnG/k71kf+zE2CtVyE6Y0/1mCFT3L0=
Subject key identifier:   7A:59:CA:8D:C8:07:0F:2E:41:3B:EF:D7:D6:6B:90:17:12:BF:3F:53
Certificate issuer:       /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial:       18708503
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/elnKjcgHDy5BO-_X1muQFxK_P1M.roa
Signing time:             Sat 01 Jan 2022 09:03:43 +0000
ROA not before:           Sat 01 Jan 2022 09:03:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201905
IP address blocks:        185.60.116.0/22 maxlen: 22
                          2a02:71e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410027267 (0x18708503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
        Validity
            Not Before: Jan  1 09:03:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a59ca8dc8070f2e413befd7d66b901712bf3f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:8d:4d:9a:f8:dd:ec:96:fd:24:79:7a:76:
                    65:28:14:7b:35:b4:f7:b0:d4:69:59:e1:42:97:ce:
                    86:52:83:df:ce:01:38:d1:25:60:03:93:bd:7b:b3:
                    92:39:90:1a:0b:85:6b:52:ad:42:81:c7:c5:65:48:
                    0d:40:97:b9:af:ec:a9:c2:59:19:01:32:79:52:48:
                    57:25:42:c4:d9:0b:f2:59:59:c0:7e:5c:0a:ce:05:
                    ac:27:79:90:d2:74:2e:7a:8d:3c:2d:23:d1:82:65:
                    69:49:95:e6:0a:7c:65:ef:ac:3c:0c:06:43:48:b0:
                    dc:8c:f0:c3:bd:7e:ec:d0:b6:38:96:21:31:aa:a1:
                    a5:4c:c5:81:c1:f9:66:c4:79:70:d3:67:c9:6b:78:
                    e2:33:6e:d1:0e:4a:09:ff:e8:0e:b5:b5:c1:4d:c0:
                    07:a5:95:b2:b9:49:12:57:a0:bb:ab:c9:1d:e1:bd:
                    34:98:f0:1c:be:c8:ce:44:dc:89:46:aa:35:57:b6:
                    d9:0b:ed:cf:4d:c4:95:af:0a:49:03:c2:38:c6:33:
                    6e:5e:9c:98:2a:be:8e:f8:e3:de:1f:a5:86:17:74:
                    5c:4e:89:d1:e5:3c:dc:1e:bd:fe:cd:f7:4d:7d:e1:
                    d0:82:77:3d:c3:0f:ca:5c:39:03:70:55:f7:14:6c:
                    68:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:59:CA:8D:C8:07:0F:2E:41:3B:EF:D7:D6:6B:90:17:12:BF:3F:53
            X509v3 Authority Key Identifier:
                keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/elnKjcgHDy5BO-_X1muQFxK_P1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.60.116.0/22
                IPv6:
                  2a02:71e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:7c:10:3a:77:6d:21:1f:93:98:09:81:ab:b0:4f:f2:52:
         95:09:ea:1d:25:89:46:ac:e2:f7:ab:08:a4:6e:04:c0:02:f0:
         4e:2b:63:59:97:34:40:38:cf:f7:04:24:64:c6:d0:0f:ce:88:
         42:8b:b6:04:61:a9:73:e1:76:f2:c9:46:65:80:cb:0c:58:4a:
         46:f8:0d:d6:a9:df:68:1f:8a:98:47:b0:c5:68:ed:a7:b4:53:
         20:70:5d:35:34:9a:42:f6:39:b2:13:09:ee:bf:33:00:25:b0:
         77:0a:5c:b2:d0:84:14:5a:31:8b:14:c8:36:2d:07:8e:ca:14:
         25:5e:61:dc:4a:ed:aa:e5:99:a5:ae:3b:24:07:7c:ed:b2:17:
         c1:d3:e4:3e:a4:4e:50:69:1d:51:c9:29:3f:0a:df:3e:49:cb:
         64:d8:75:f7:4e:11:8d:81:5a:2e:d5:a9:42:38:e3:a9:aa:5f:
         22:b3:58:17:82:f7:80:da:23:b3:5a:5e:31:17:5a:d7:8e:df:
         99:9e:91:f3:72:0d:4d:da:7a:f7:f6:e3:37:2e:e1:03:93:96:
         2a:c6:12:44:5d:de:45:54:a3:a8:31:46:00:95:ab:17:74:ff:
         39:88:2a:2b:03:7c:45:43:27:38:7a:3d:82:39:4a:b1:7e:63:
         9a:8c:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----