Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/l4PgTX4OLUia9-cXYKPUfWpFvfM.roa
File:                     l4PgTX4OLUia9-cXYKPUfWpFvfM.roa (raw, json)
Hash identifier:          cI9nLfy2ketm+5Tf07UOzbUcaCnejet8Jcvddca3xXA=
Subject key identifier:   97:83:E0:4D:7E:0E:2D:48:9A:F7:E7:17:60:A3:D4:7D:6A:45:BD:F3
Certificate issuer:       /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial:       061BAA9D
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/l4PgTX4OLUia9-cXYKPUfWpFvfM.roa
Signing time:             Sat 01 Jan 2022 14:57:45 +0000
ROA not before:           Sat 01 Jan 2022 14:57:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        185.98.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102476445 (0x61baa9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
        Validity
            Not Before: Jan  1 14:57:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9783e04d7e0e2d489af7e71760a3d47d6a45bdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:3a:11:7c:21:3a:3b:ff:0f:97:45:e6:18:
                    52:3b:f5:a8:3e:da:4c:a4:be:94:1b:f3:14:2b:d0:
                    19:c6:9e:c0:c4:ad:4e:3c:e2:3d:30:30:25:41:58:
                    52:69:da:e2:0a:a9:4e:96:87:eb:58:ed:86:97:12:
                    67:5f:1a:39:b2:10:f6:60:68:be:cd:03:75:f0:32:
                    e4:1a:43:f3:35:5d:79:5b:c1:c3:40:72:02:03:b7:
                    e9:27:15:9e:35:9e:0a:73:1c:c6:31:dd:55:dc:1e:
                    04:b3:5e:b1:43:c9:2e:7c:b8:e5:ba:ea:4d:e2:e2:
                    5a:9a:2a:2d:f3:30:de:41:30:33:a4:36:1a:48:de:
                    62:1e:54:a8:6e:6c:fd:79:6b:c4:4e:d2:3a:a1:a3:
                    71:b1:03:0c:dc:67:dc:df:60:18:3f:43:64:15:53:
                    fc:9b:15:7d:c2:9f:87:92:fb:73:73:fc:71:09:f4:
                    59:96:5b:d7:7a:e8:df:69:a0:8a:a0:90:ea:01:be:
                    5f:56:9d:cf:e2:b2:ab:6e:fb:e4:ff:c7:a9:ea:68:
                    ef:09:40:fb:70:21:08:87:18:75:a3:84:14:fe:45:
                    bb:7e:4c:74:9c:18:f2:ea:96:80:b1:b8:6b:0e:7c:
                    fd:7c:8e:6e:84:9f:7d:a4:c9:97:6a:8f:1a:df:d5:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:E0:4D:7E:0E:2D:48:9A:F7:E7:17:60:A3:D4:7D:6A:45:BD:F3
            X509v3 Authority Key Identifier:
                keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/l4PgTX4OLUia9-cXYKPUfWpFvfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.98.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:07:f0:53:6e:74:8a:df:aa:6c:1b:bd:74:13:fc:51:d9:
         f4:69:64:9a:16:bf:e3:23:02:69:46:a6:b1:4d:04:24:0a:38:
         be:c0:fb:a8:b3:ea:51:aa:21:c4:3d:72:b7:ec:e7:9e:4d:60:
         57:7b:2e:c1:f2:ce:3e:8d:dc:53:4d:5c:c0:ad:19:9c:0c:5c:
         ed:b5:15:02:dc:0c:95:56:86:4a:00:fc:7b:ee:01:0a:16:4a:
         e5:07:19:8f:b3:48:ad:21:68:c6:77:3c:fd:b9:7f:73:f5:7c:
         99:3f:f6:99:09:6f:95:60:1f:de:f9:d4:c5:cd:74:28:8b:36:
         1b:28:16:ef:66:ff:61:b1:ef:00:75:39:aa:c8:08:fa:ef:f3:
         68:f8:02:66:63:00:05:bc:85:1a:74:e8:32:56:a2:de:52:00:
         15:32:91:be:c7:b2:bc:e3:79:1c:fa:5a:fc:45:a6:ae:1d:6b:
         71:86:11:12:79:69:34:7b:13:b4:04:b7:09:17:48:5c:40:dc:
         48:c3:dc:cc:4d:14:e2:6c:43:48:63:fd:71:db:df:fc:4c:b8:
         56:e3:65:e4:69:7a:77:0a:f0:6a:7a:4d:fa:54:04:98:4f:d7:
         1b:09:93:04:82:f8:e7:90:4f:08:ad:ca:ba:8b:d0:75:bb:71:
         48:6c:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----