Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nHapfw1mOKSwWTNfYO2MSf0W404.roa
File:                     nHapfw1mOKSwWTNfYO2MSf0W404.roa (raw, json)
Hash identifier:          0qEjpKtbSsYNpOO/AC3waJGSrYuoEAS31+nPBlNTo84=
Subject key identifier:   9C:76:A9:7F:0D:66:38:A4:B0:59:33:5F:60:ED:8C:49:FD:16:E3:4E
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       091BC2EE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nHapfw1mOKSwWTNfYO2MSf0W404.roa
Signing time:             Sat 01 Jan 2022 16:00:40 +0000
ROA not before:           Sat 01 Jan 2022 16:00:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204994
IP address blocks:        185.186.67.0/24 maxlen: 24
                          2a0b:b87:ffe1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152814318 (0x91bc2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:00:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c76a97f0d6638a4b059335f60ed8c49fd16e34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:86:65:8b:69:b8:44:d2:47:26:db:94:d1:
                    c9:94:e2:58:ba:b0:ae:b1:4c:c5:11:91:c2:fb:33:
                    a0:f1:eb:54:23:7e:b5:d6:41:99:17:21:62:0d:60:
                    ed:f6:6b:67:fa:be:67:91:61:14:0d:ec:1f:08:a0:
                    0c:fb:36:0e:36:ff:f1:b1:e7:d3:22:92:f3:da:b7:
                    a1:e4:dc:c1:84:e7:c1:ac:d2:36:6c:7b:bf:b6:78:
                    64:fc:38:fb:24:9e:15:15:ee:d5:8a:1a:c0:b7:1b:
                    68:b1:cf:25:06:6b:7b:2d:23:bb:6f:a5:6b:e2:a4:
                    5b:ce:3e:98:60:3d:bb:c7:52:5d:93:78:69:c9:5f:
                    10:eb:fe:c0:b1:f6:b2:20:40:58:ce:6e:b7:3b:90:
                    11:e1:5f:49:94:5f:54:b5:8b:33:e3:8b:05:ac:0c:
                    fb:f8:c6:17:14:24:a6:0c:35:cd:dc:a9:8e:b8:ec:
                    28:79:8e:80:26:4a:7e:04:78:48:b1:19:11:9e:76:
                    1c:30:96:00:1a:20:95:f5:c4:1f:1f:e9:99:8a:b9:
                    2e:6f:e9:e8:d5:ee:c4:a1:53:11:d1:28:61:74:ef:
                    9e:a6:4c:8a:59:94:cf:db:aa:24:a0:b1:a2:1d:84:
                    4b:d0:74:2b:95:50:ae:e6:33:1b:21:60:7a:3f:fb:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:A9:7F:0D:66:38:A4:B0:59:33:5F:60:ED:8C:49:FD:16:E3:4E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nHapfw1mOKSwWTNfYO2MSf0W404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.67.0/24
                IPv6:
                  2a0b:b87:ffe1::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:35:fb:25:47:21:40:f5:60:50:d6:ea:fc:8d:80:af:c5:64:
         ed:19:be:aa:9a:f6:23:2b:c7:42:8a:e7:25:38:00:76:b4:3f:
         12:01:30:69:a4:7a:ce:e1:30:65:1a:11:8a:35:69:0c:15:f6:
         ab:eb:e3:a4:7f:20:34:e1:c1:50:ea:94:9c:48:47:06:2e:4b:
         7f:44:17:75:c6:77:9d:ef:e3:26:54:54:a6:3f:53:ac:b5:11:
         8b:75:9c:9c:6d:a8:aa:0e:49:fa:f2:dd:b8:11:b7:a9:b3:3b:
         d9:79:7e:e7:8e:1a:36:ec:43:c0:3e:1a:b3:28:c1:72:a0:57:
         e1:2e:c9:11:e1:88:e8:2c:83:07:23:87:bd:9e:2d:e7:d1:3e:
         0c:e8:bd:d4:de:00:62:b5:42:fb:0d:ef:87:01:54:e9:c5:70:
         a9:88:22:6e:8b:42:4b:c1:6a:20:9e:7a:85:d0:44:94:b4:99:
         a7:c2:75:1d:e7:d8:8d:cb:25:c3:bd:02:4d:24:31:8d:57:ef:
         8b:b6:29:fc:5c:e1:fa:05:d6:52:2b:f9:7c:0e:1c:0f:aa:db:
         cf:bb:58:a1:72:d4:0f:d8:81:89:95:7a:b9:3d:d0:11:8a:c5:
         67:48:fb:6a:b2:2c:a3:9f:d6:65:a7:77:2a:19:c3:f4:cc:9b:
         f4:9d:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----