Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/DSaf8eesyeG35Yzl_OA_EFBPeFY.roa
File:                     DSaf8eesyeG35Yzl_OA_EFBPeFY.roa (raw, json)
Hash identifier:          50En/DERcmmq1WKf/G1sB5Uo+GdQ6PEOAUkapswuGGc=
Subject key identifier:   0D:26:9F:F1:E7:AC:C9:E1:B7:E5:8C:E5:FC:E0:3F:10:50:4F:78:56
Certificate issuer:       /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial:       15C35C25
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/DSaf8eesyeG35Yzl_OA_EFBPeFY.roa
Signing time:             Sat 01 Jan 2022 08:01:36 +0000
ROA not before:           Sat 01 Jan 2022 08:01:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        185.1.105.0/24 maxlen: 24
                          2001:7f8:bf::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365124645 (0x15c35c25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
        Validity
            Not Before: Jan  1 08:01:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d269ff1e7acc9e1b7e58ce5fce03f10504f7856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:29:dc:16:75:f5:55:48:3d:14:de:59:30:
                    7f:e3:61:57:ac:2f:1c:b2:c5:f6:55:87:a5:ef:f7:
                    5c:45:93:f0:3b:e9:be:f3:6c:21:3d:fb:0a:98:4e:
                    ab:4a:d1:31:2d:d9:5b:f4:93:53:05:ec:50:88:7c:
                    93:50:5d:44:6a:17:d4:30:03:31:49:c2:17:55:0a:
                    2f:b2:2b:28:08:e1:97:b8:f1:76:58:2d:65:2c:a0:
                    1a:6e:c4:15:29:1f:98:91:c7:d5:8e:04:b1:07:62:
                    74:16:ac:6d:9c:f1:65:b1:f6:7a:42:2e:80:3c:d1:
                    30:2b:3c:1e:dc:d8:15:70:39:c6:f8:b6:3e:b6:7f:
                    b0:ca:c0:e1:99:06:5f:7f:cd:80:ec:9d:24:47:6a:
                    77:55:3c:bc:8d:2d:ee:bc:8a:47:54:dc:4e:b5:74:
                    2f:68:b1:aa:c3:d7:0e:6d:91:ea:b1:28:5d:f2:28:
                    1c:82:e4:09:8d:07:a9:29:65:51:42:71:18:19:25:
                    20:ff:62:53:d5:bf:dc:21:ee:a5:ad:b9:bb:12:3f:
                    7b:f4:b5:2b:c7:d5:4c:0c:be:17:11:38:c1:96:97:
                    ef:e4:4a:fa:b3:c7:49:e2:d0:d5:ca:ba:88:0c:d1:
                    ca:16:6a:2c:ee:5d:53:0e:15:b1:44:3f:9d:c2:bc:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:9F:F1:E7:AC:C9:E1:B7:E5:8C:E5:FC:E0:3F:10:50:4F:78:56
            X509v3 Authority Key Identifier:
                keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/DSaf8eesyeG35Yzl_OA_EFBPeFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.105.0/24
                IPv6:
                  2001:7f8:bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:9b:af:0a:0c:b1:da:be:d4:58:fd:9e:75:13:33:7f:b1:79:
         f0:57:66:a8:8a:b3:c7:a1:21:87:65:13:b6:e4:e1:07:f8:59:
         61:0f:a2:a3:1f:6c:cd:0b:e8:fb:2c:72:92:ac:11:91:dc:71:
         72:62:33:90:e3:ca:25:de:4c:c8:32:24:19:1a:ac:6d:0b:52:
         f5:f4:66:29:8a:ca:fc:49:2f:2a:3c:b9:ee:bb:43:9d:e3:93:
         08:f1:43:89:92:70:4c:1b:2c:d0:01:1b:71:03:98:cb:15:03:
         b1:5b:98:c7:db:bb:8d:33:7d:11:66:db:88:da:c7:de:36:06:
         76:41:d8:9f:50:f0:f6:f1:07:cc:80:1c:ee:43:6f:35:0f:5b:
         5e:c9:ab:4a:c3:0b:21:77:27:46:fc:07:37:ae:c0:6b:a6:dc:
         ed:3b:83:b2:74:ba:66:48:0b:b3:8d:f1:24:97:5c:0e:f1:b2:
         f8:16:17:9f:b4:85:33:09:06:5b:c0:e1:26:b7:b1:fe:93:d6:
         e0:77:4d:57:99:6e:a4:8d:ab:c4:05:4b:d2:ec:d7:f2:2c:f7:
         ef:fc:54:57:17:be:79:55:68:bf:9d:71:45:b5:cd:45:60:a7:
         2a:ed:ac:e1:05:55:8e:20:46:c1:dd:06:56:eb:59:4e:8a:d6:
         86:f7:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----