Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/6y-BtYVOdqIcGY9_TrRbLCKGQfY.roa
File:                     6y-BtYVOdqIcGY9_TrRbLCKGQfY.roa (raw, json)
Hash identifier:          5D75bqa7lBbpdIeCU6kOqgfiTp+eHcozxyvMfX2aFio=
Subject key identifier:   EB:2F:81:B5:85:4E:76:A2:1C:19:8F:7F:4E:B4:5B:2C:22:86:41:F6
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       A6ABBF
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/6y-BtYVOdqIcGY9_TrRbLCKGQfY.roa
Signing time:             Thu 05 May 2022 08:25:53 +0000
ROA not before:           Thu 05 May 2022 08:25:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        185.244.106.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10922943 (0xa6abbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: May  5 08:25:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb2f81b5854e76a21c198f7f4eb45b2c228641f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:2d:9d:26:fb:50:ad:de:7e:3d:a7:32:46:
                    a3:73:7f:21:50:5c:de:a6:16:46:14:ea:18:e9:cd:
                    02:25:9d:7e:2d:e0:c6:87:9d:ce:40:51:be:0a:bc:
                    84:f6:ef:98:9f:81:a8:af:c2:30:09:9a:0c:d6:3f:
                    6a:16:e4:b6:1d:da:c6:c5:34:9f:65:4e:84:85:c1:
                    05:bd:47:bd:f1:3f:bf:7d:33:6f:5e:be:9f:6d:7a:
                    eb:a5:14:ac:f8:9c:43:4c:c3:ed:e9:3f:ba:3d:b6:
                    5f:46:48:da:b9:9c:37:31:8c:0b:8a:e3:6e:82:83:
                    66:f9:b5:64:80:a4:72:db:c7:90:f1:ac:7c:68:0c:
                    33:37:03:21:6c:14:72:dc:01:f8:ca:22:41:ee:c2:
                    0e:b1:f8:91:cd:fb:88:7a:e6:18:9d:7d:aa:2f:0d:
                    ef:3e:c0:40:93:92:00:b0:f3:2d:d9:7d:96:e2:ae:
                    b3:a1:be:92:f1:06:15:f8:44:ef:a1:68:bb:24:02:
                    92:df:4f:e1:29:0a:7a:cd:2f:72:3d:3c:24:7f:b8:
                    9e:60:f5:1e:49:cf:e4:06:4f:73:72:26:52:76:76:
                    81:18:5d:6a:f3:d8:5b:87:dc:7a:8d:ec:08:32:d2:
                    ea:46:fd:2c:61:24:ab:54:83:ff:cd:75:15:b5:9b:
                    f9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:81:B5:85:4E:76:A2:1C:19:8F:7F:4E:B4:5B:2C:22:86:41:F6
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/6y-BtYVOdqIcGY9_TrRbLCKGQfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:22:e4:1e:21:20:b0:46:60:4e:12:14:8e:f0:4e:64:90:
         d2:b4:11:21:09:51:cd:90:f3:cd:6b:78:1d:9b:6a:20:ad:b5:
         cf:ba:ae:5f:52:69:bd:f1:d2:37:81:50:a5:3c:37:b1:0b:ac:
         fb:f4:59:4f:2d:19:68:9a:5d:22:a5:af:24:70:88:57:e8:6d:
         40:68:24:13:78:e2:43:de:35:a1:ab:ad:92:3f:b2:eb:c6:bc:
         f4:b6:6b:c6:73:20:4b:b4:b9:1b:ea:dc:bc:e7:3a:91:eb:f3:
         dc:8d:fd:e4:6c:da:de:43:98:3a:6c:7c:ab:15:52:cf:b0:0f:
         6f:22:20:63:df:e5:90:6f:28:a1:d8:aa:6c:cd:2c:23:20:ff:
         c5:ff:3a:52:7f:d3:ae:80:04:b7:14:c4:6b:fb:f9:20:60:a4:
         df:e4:27:c6:99:8e:13:9f:6d:5b:bc:00:5d:56:27:b9:62:86:
         77:64:20:55:0c:08:af:02:3e:9b:f2:32:82:a2:3e:55:72:ea:
         95:6b:b2:f0:ba:96:92:83:aa:36:4c:5a:ea:82:0f:46:3f:83:
         fe:9d:ab:28:e0:07:90:8d:13:24:ef:2f:38:11:55:fb:dd:22:
         a0:aa:4b:e9:67:d1:e4:51:2b:c1:30:1e:5c:6e:71:04:6c:e6:
         dd:60:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----