Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/FULLZ9I8CAMsbYoz9pq0BzPeWpw.roa
File:                     FULLZ9I8CAMsbYoz9pq0BzPeWpw.roa (raw, json)
Hash identifier:          aNuBRfnicgwsys0Ms8+zuMRgsdyezQyO7nJj8N3fFFs=
Subject key identifier:   15:42:CB:67:D2:3C:08:03:2C:6D:8A:33:F6:9A:B4:07:33:DE:5A:9C
Certificate issuer:       /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial:       12D25E88
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/FULLZ9I8CAMsbYoz9pq0BzPeWpw.roa
Signing time:             Sat 01 Jan 2022 03:53:07 +0000
ROA not before:           Sat 01 Jan 2022 03:53:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1221
IP address blocks:        185.144.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315776648 (0x12d25e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
        Validity
            Not Before: Jan  1 03:53:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1542cb67d23c08032c6d8a33f69ab40733de5a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:bc:d2:02:d0:f6:2a:ba:2b:04:2d:1c:ea:
                    4e:f7:da:d0:73:55:b9:73:36:49:cc:26:82:3c:a5:
                    1f:24:88:b9:39:40:dc:2e:38:b1:a3:2e:a3:d6:4f:
                    26:43:99:31:b0:68:f3:19:f8:0b:24:8c:33:8f:20:
                    0a:50:52:15:79:dd:90:b5:fd:06:63:a9:4a:a0:6c:
                    ae:5f:18:19:7d:71:b6:ef:c6:ab:c8:af:48:2c:01:
                    b0:ee:de:72:fa:01:97:f9:0d:90:90:61:2a:95:a7:
                    81:63:db:2b:7c:43:22:f5:3e:c3:36:25:86:b4:e1:
                    b8:ef:b5:29:84:5d:a1:29:33:9f:6a:dc:ed:c9:62:
                    07:c6:51:b9:77:18:10:19:37:dd:ee:c6:b5:24:11:
                    29:96:36:04:c9:9d:72:57:ce:09:01:51:e4:26:59:
                    27:c3:79:e0:4c:32:0f:81:cf:9e:ec:db:d9:f5:cb:
                    e3:03:6a:90:36:b7:65:5f:df:a5:68:17:32:ea:14:
                    84:9d:0a:5b:05:e3:01:ff:58:2b:30:a7:44:ed:77:
                    18:01:9c:f2:d7:d6:2f:94:f3:e1:b8:ec:40:ac:8f:
                    ec:f0:91:dd:4b:16:60:3d:e6:74:b1:d0:ae:a3:68:
                    f6:4c:b7:1c:50:e5:64:90:61:0c:30:cd:0c:9a:bf:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:CB:67:D2:3C:08:03:2C:6D:8A:33:F6:9A:B4:07:33:DE:5A:9C
            X509v3 Authority Key Identifier:
                keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/FULLZ9I8CAMsbYoz9pq0BzPeWpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:ee:2e:a7:ef:43:7f:9f:c9:33:dd:77:02:f7:9c:15:e9:
         a3:30:d2:ac:46:cf:45:de:b8:ef:8e:ed:ab:79:45:62:0c:e8:
         b5:7e:1b:dd:8a:fe:1f:fc:db:6c:05:0f:87:90:48:d7:a4:60:
         e6:9a:da:3c:7d:9e:8a:93:42:d3:7d:20:34:a7:69:da:f9:32:
         ec:60:0b:73:7c:6e:10:7f:60:e1:25:d4:e2:49:21:5a:40:cf:
         3b:36:0f:bc:a8:f2:00:08:a5:f1:15:fc:64:35:2b:e0:77:78:
         5a:e5:c0:3e:54:d3:33:20:74:13:d4:8d:f7:6a:db:90:51:fd:
         93:d0:57:10:f2:e8:51:10:96:1e:74:64:25:fb:d4:42:6b:b1:
         e4:95:22:47:23:5c:4d:67:8c:9b:ed:c9:e8:2b:26:15:d5:3c:
         d1:b1:83:b9:95:b0:96:de:fd:01:67:8d:29:53:c6:ba:58:79:
         06:cf:1c:c8:a7:21:02:f6:9f:66:48:c7:20:a5:7a:00:46:db:
         b9:c3:76:a5:1b:34:09:46:07:0b:90:30:77:32:41:b6:b3:7d:
         16:18:0b:a1:83:35:24:04:1a:5f:99:8e:30:74:09:a1:2d:07:
         35:63:20:dd:6e:08:eb:4c:c6:70:6d:cb:ba:83:17:81:3c:eb:
         7b:dc:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----