Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PKtk_R77IX4olv-uLvostsFVXL0.roa
File:                     PKtk_R77IX4olv-uLvostsFVXL0.roa (raw, json)
Hash identifier:          SKTNcjLjYTElgT05cuJX7/nS/cXKUcI2a9baOTkGT10=
Subject key identifier:   3C:AB:64:FD:1E:FB:21:7E:28:96:FF:AE:2E:FA:2C:B6:C1:55:5C:BD
Certificate issuer:       /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial:       1244FC7F
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PKtk_R77IX4olv-uLvostsFVXL0.roa
Signing time:             Sat 01 Jan 2022 01:53:08 +0000
ROA not before:           Sat 01 Jan 2022 01:53:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48360
IP address blocks:        185.77.104.0/22 maxlen: 24
                          2a05:62c0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306510975 (0x1244fc7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
        Validity
            Not Before: Jan  1 01:53:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3cab64fd1efb217e2896ffae2efa2cb6c1555cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:41:f0:62:32:18:d0:02:13:7c:2e:d9:59:
                    1f:a4:98:0c:ac:f2:ba:dd:ff:36:33:7a:1d:77:23:
                    72:42:ed:86:c2:41:64:2a:3a:51:4a:26:cd:f5:03:
                    ab:81:c2:18:1d:7a:44:8d:35:b5:cd:8a:cd:3f:8b:
                    b7:e4:99:8f:dc:6f:65:95:d5:a8:20:1b:fc:4d:85:
                    db:07:08:bc:91:39:cf:8d:4c:3d:84:2c:3c:33:61:
                    69:c1:28:94:c5:0f:09:df:07:46:b2:6e:39:66:66:
                    ad:53:9a:8e:5b:9c:2d:bb:10:6c:d4:d4:42:07:1a:
                    3b:5e:a5:39:ce:50:dc:5e:1d:f5:2e:a6:cb:97:1e:
                    0e:e1:e7:0c:c7:dc:2d:c0:6f:cd:f7:0a:de:75:1a:
                    f3:4c:81:9f:1b:e5:32:da:a9:dc:7a:a9:9e:8d:24:
                    6c:2f:55:d3:ed:59:73:79:a4:60:aa:9f:8b:e6:17:
                    f3:fb:a6:51:3b:b9:62:7b:63:8c:d7:91:da:3f:29:
                    fe:78:d1:ff:57:e7:7a:25:33:86:0f:28:3e:d2:22:
                    82:71:a8:56:36:f0:b1:93:dd:55:b1:bb:f4:c1:c5:
                    ab:5f:fd:42:49:8d:27:2c:c6:fc:38:dc:b5:69:07:
                    4e:33:ad:9f:a6:55:1c:d7:7f:6f:51:64:1a:d8:a1:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AB:64:FD:1E:FB:21:7E:28:96:FF:AE:2E:FA:2C:B6:C1:55:5C:BD
            X509v3 Authority Key Identifier:
                keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PKtk_R77IX4olv-uLvostsFVXL0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.104.0/22
                IPv6:
                  2a05:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:83:24:1e:43:af:e2:09:88:7e:84:63:b3:24:55:a3:f9:
         a7:0c:03:95:db:06:d6:0e:fb:7c:58:d0:8a:78:b8:96:71:b3:
         91:77:52:73:43:15:f3:21:43:e6:b3:d9:93:05:1d:25:ef:7a:
         56:fc:55:8c:ec:c0:8d:ee:fd:36:5b:23:75:8c:c5:8e:e8:50:
         2d:6b:a8:10:0e:0c:dc:61:16:97:b8:ed:9b:b0:b6:23:ec:e2:
         23:e2:ee:c5:ec:b7:6b:c1:13:18:2b:28:9d:16:21:b4:80:91:
         2b:e0:70:7b:9c:d7:a4:62:68:f0:65:37:d6:97:55:d4:91:66:
         8f:98:90:b1:1f:e1:a9:f6:5b:44:e4:fc:bd:ce:b1:01:61:14:
         8a:a4:43:7f:77:68:22:b2:f0:66:7f:b6:9b:ca:84:b7:85:ea:
         50:13:70:13:99:94:d5:22:df:a3:14:f8:a8:20:75:c8:6a:0c:
         a4:09:38:a8:98:d6:d0:2d:2d:c0:55:65:40:99:a2:c0:09:d1:
         87:69:b7:f0:8d:8f:bc:93:1b:3e:c5:c8:b0:d5:4c:7c:f3:37:
         94:71:ec:67:22:7d:fa:4d:d3:0f:dd:21:d7:3a:4b:f9:bb:0f:
         df:4f:b5:d6:53:23:e9:c7:e6:0d:e6:23:64:f9:08:3e:f8:9d:
         1b:5a:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----