Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/lKfFDqpfvkzC6eXkoMn8VR6grJo.roa
File:                     lKfFDqpfvkzC6eXkoMn8VR6grJo.roa (raw, json)
Hash identifier:          UWCgQ/tbgcYtxIIrKAnFHiRTr7aQrPCq2dPW4a1INNM=
Subject key identifier:   94:A7:C5:0E:AA:5F:BE:4C:C2:E9:E5:E4:A0:C9:FC:55:1E:A0:AC:9A
Certificate issuer:       /CN=40064dd8ac6ea56641836d4ed77facca4b22f7e0
Certificate serial:       028E2726
Authority key identifier: 40:06:4D:D8:AC:6E:A5:66:41:83:6D:4E:D7:7F:AC:CA:4B:22:F7:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QAZN2KxupWZBg21O13-syksi9-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/lKfFDqpfvkzC6eXkoMn8VR6grJo.roa
Signing time:             Sat 01 Jan 2022 14:01:34 +0000
ROA not before:           Sat 01 Jan 2022 14:01:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211594
IP address blocks:        185.254.123.0/24 maxlen: 24
                          2a0c:1880::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42870566 (0x28e2726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40064dd8ac6ea56641836d4ed77facca4b22f7e0
        Validity
            Not Before: Jan  1 14:01:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94a7c50eaa5fbe4cc2e9e5e4a0c9fc551ea0ac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:ca:ce:53:85:a4:ef:ba:0d:6f:75:65:d2:
                    45:75:37:e2:56:27:68:b5:ff:38:19:df:5a:f2:8d:
                    57:48:29:36:96:92:45:34:50:84:13:96:6f:6f:86:
                    de:39:e3:02:a7:e6:2c:8c:9e:eb:f6:5e:85:49:a4:
                    4f:1f:e6:f6:a3:04:0b:32:e0:31:74:03:17:c6:69:
                    58:6e:26:60:0a:86:fa:1b:80:ae:36:5e:30:50:92:
                    36:47:9d:f4:9a:00:39:51:ca:f9:25:0c:71:99:78:
                    2c:8f:e0:2b:59:88:b2:0c:0d:df:f8:21:65:7e:18:
                    f1:15:02:8a:3e:af:9c:5a:4e:f6:65:c0:c8:f0:f0:
                    92:18:d7:97:c7:8b:25:62:76:18:d8:07:b6:08:1d:
                    ab:d0:85:42:c6:b1:ef:16:bc:23:e9:5c:8f:b2:8f:
                    c6:3b:7d:66:0e:62:c1:7f:b0:7d:a6:80:a3:3b:91:
                    60:dc:20:06:89:76:94:22:c0:cf:ae:98:f1:c4:c5:
                    ef:23:4a:2e:12:a1:a4:7d:4e:c6:c9:41:b3:59:a7:
                    ad:37:6f:92:e3:f5:eb:2d:1d:4c:f3:5e:b9:1b:47:
                    38:da:f9:94:fe:82:2a:fe:27:02:16:35:f2:3c:68:
                    fd:33:28:7b:5e:95:f0:45:af:b0:ca:d3:31:a4:28:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A7:C5:0E:AA:5F:BE:4C:C2:E9:E5:E4:A0:C9:FC:55:1E:A0:AC:9A
            X509v3 Authority Key Identifier:
                keyid:40:06:4D:D8:AC:6E:A5:66:41:83:6D:4E:D7:7F:AC:CA:4B:22:F7:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAZN2KxupWZBg21O13-syksi9-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/lKfFDqpfvkzC6eXkoMn8VR6grJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/QAZN2KxupWZBg21O13-syksi9-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.123.0/24
                IPv6:
                  2a0c:1880::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:d0:76:93:ff:6f:99:17:be:0d:a9:dc:04:b3:be:a8:cd:8f:
         ac:4a:0d:88:8a:62:7b:3f:22:f0:e7:f6:6c:be:48:62:3d:05:
         11:c1:c9:bb:da:43:ea:cc:ab:17:9d:6a:0e:10:a5:cd:52:34:
         fd:d6:ca:69:24:77:a9:4a:1a:41:9f:8c:36:7f:a4:a5:c0:4f:
         cd:9a:d6:e3:e1:2e:15:5d:30:7f:da:5d:55:f6:54:d3:c8:e4:
         4d:97:00:52:b4:26:ba:e4:1d:1a:95:c6:7b:ab:18:13:57:cd:
         75:81:d6:6e:39:d3:11:6d:72:44:86:cd:37:df:bb:39:f8:bd:
         a4:35:70:be:83:fc:5a:37:9f:3f:cc:13:75:90:4f:be:26:55:
         0c:d5:a5:b8:61:83:68:b8:8b:39:5e:56:d6:2e:ab:84:82:a0:
         a3:47:36:ad:4d:fe:7f:6a:4a:db:46:74:91:98:d7:73:cb:3d:
         a1:1a:e0:6f:de:24:6f:21:43:d9:64:03:40:e9:39:a8:c3:ea:
         1b:43:44:c7:a4:b3:d5:34:90:af:95:20:74:33:9d:6b:d7:0a:
         6d:4e:fd:36:7e:fb:55:53:da:8d:07:ac:ee:e0:32:d8:52:3c:
         b2:17:ca:76:a1:e7:10:4b:bf:64:eb:f4:3b:c3:58:21:6e:e4:
         12:b3:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----