Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/3_jXwXZATeGKGiuaCa7vYfKsxfk.roa
File:                     3_jXwXZATeGKGiuaCa7vYfKsxfk.roa (raw, json)
Hash identifier:          LsKMQ9qskSrNF2YgqD1dOaBzPggxd1IOw/1nZysPMTY=
Subject key identifier:   DF:F8:D7:C1:76:40:4D:E1:8A:1A:2B:9A:09:AE:EF:61:F2:AC:C5:F9
Certificate issuer:       /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial:       031DAA96
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/3_jXwXZATeGKGiuaCa7vYfKsxfk.roa
Signing time:             Tue 29 Mar 2022 16:29:36 +0000
ROA not before:           Tue 29 Mar 2022 16:29:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211541
IP address blocks:        185.244.226.0/24 maxlen: 24
                          2a10:c640::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52275862 (0x31daa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
        Validity
            Not Before: Mar 29 16:29:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dff8d7c176404de18a1a2b9a09aeef61f2acc5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:01:37:5a:7b:72:cc:fc:ef:24:a6:bd:b1:
                    3a:7e:a1:a9:92:fc:38:8d:7b:8e:07:60:4c:a0:27:
                    39:cb:1c:fc:2b:97:cb:1d:1e:89:34:28:a9:d9:17:
                    15:ec:6c:7a:15:cf:b7:a9:cb:be:4c:e9:bf:7d:8e:
                    0e:92:91:78:9c:b8:6d:39:0d:96:94:75:f2:b0:5c:
                    7e:63:bd:8a:39:79:ce:7b:9a:6e:28:1a:cb:37:5f:
                    89:92:ae:f3:28:0e:56:66:20:ee:b6:5d:6b:b8:ec:
                    db:57:82:9f:94:4a:c2:b1:b5:83:c2:6d:c5:a9:9b:
                    c3:80:cb:bd:17:66:88:51:8c:f7:13:b1:ea:35:8c:
                    d4:d3:54:d8:58:05:43:e0:09:3c:79:51:b5:ac:56:
                    85:5b:92:2c:28:61:4c:10:a8:07:b0:b5:9e:da:5a:
                    ad:1b:e3:75:18:42:47:53:18:c8:6f:43:cb:d6:83:
                    7b:84:a2:86:53:89:5d:6a:c0:ed:18:4d:3e:f7:f1:
                    ea:7c:e1:b3:d1:d7:76:44:bb:80:2b:fb:25:68:47:
                    16:08:5b:32:20:0d:8e:78:99:ca:23:eb:fd:5a:99:
                    f7:4d:2d:15:2c:26:ce:6b:3c:92:06:06:75:61:fd:
                    58:e8:b8:9c:6f:23:54:0b:36:f8:fa:d1:2a:5e:cb:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F8:D7:C1:76:40:4D:E1:8A:1A:2B:9A:09:AE:EF:61:F2:AC:C5:F9
            X509v3 Authority Key Identifier:
                keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/3_jXwXZATeGKGiuaCa7vYfKsxfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.226.0/24
                IPv6:
                  2a10:c640::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:eb:b1:b7:c2:45:f5:ba:ed:50:50:c5:2f:dc:2a:83:38:
         a6:8c:a2:62:c7:82:c1:d8:34:86:c9:9b:85:8f:61:10:bb:c8:
         44:5b:8d:23:f9:f2:3f:64:bf:a8:e1:1d:c5:9a:e8:ab:58:bd:
         e4:12:22:e3:a4:42:36:26:f7:d1:a3:44:4b:64:3c:e9:ff:c1:
         49:46:5f:f6:5a:f2:0c:b2:aa:61:4e:13:d3:1c:64:87:69:33:
         7e:db:7e:36:cf:a3:18:ab:ab:db:aa:4f:16:a9:be:7b:89:97:
         74:a3:04:30:29:cb:2d:a0:bf:3b:37:6c:d1:08:16:ad:b0:10:
         97:b0:fd:f8:ba:5a:12:ed:89:c5:20:a9:15:b1:24:d1:ef:ce:
         2a:6e:e3:6b:b8:48:f4:9f:c4:ae:bc:9c:f5:f1:75:02:e4:86:
         49:13:77:51:95:ec:9c:5a:c2:3d:4d:a8:5a:9b:2b:ab:23:db:
         de:b9:3b:91:c2:0d:52:de:4e:21:4c:6e:78:fd:e5:cf:85:31:
         bf:16:22:ab:59:73:35:9d:e1:9b:eb:a7:50:8a:7a:52:fe:9f:
         e1:6a:51:43:c8:ed:0d:ce:27:c3:00:98:40:7f:3b:0e:5d:ff:
         97:70:a5:24:74:16:c2:66:a9:14:49:37:fe:d1:86:4a:2b:d4:
         c3:3b:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----