Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/OX-2SxVWqZwLidRe4WuuvkYXhE8.roa
File:                     OX-2SxVWqZwLidRe4WuuvkYXhE8.roa (raw, json)
Hash identifier:          KB9Uy5tMFBSc68qLwhyC7z4QvjlpwLC5AVgshjTT+9k=
Subject key identifier:   39:7F:B6:4B:15:56:A9:9C:0B:89:D4:5E:E1:6B:AE:BE:46:17:84:4F
Certificate issuer:       /CN=ba051b540188f74aba19a90ab7b5dcc429d47a98
Certificate serial:       01D420C6
Authority key identifier: BA:05:1B:54:01:88:F7:4A:BA:19:A9:0A:B7:B5:DC:C4:29:D4:7A:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ugUbVAGI90q6GakKt7XcxCnUepg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/OX-2SxVWqZwLidRe4WuuvkYXhE8.roa
Signing time:             Thu 10 Mar 2022 11:19:13 +0000
ROA not before:           Thu 10 Mar 2022 11:19:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31732
IP address blocks:        87.236.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30679238 (0x1d420c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba051b540188f74aba19a90ab7b5dcc429d47a98
        Validity
            Not Before: Mar 10 11:19:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=397fb64b1556a99c0b89d45ee16baebe4617844f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:c6:2d:a3:c0:8b:ed:e9:5f:3e:35:32:67:
                    a3:1c:53:f8:c4:f1:e8:63:1d:1e:57:0d:11:cc:83:
                    e0:dd:41:cf:e1:3f:b4:30:46:44:20:8b:38:90:f3:
                    e1:dd:71:c0:06:7f:09:06:3c:78:d5:32:8c:ae:55:
                    9f:6d:4c:c4:24:a0:93:e2:26:d0:fa:e4:ae:bc:12:
                    5a:9e:1b:df:35:aa:53:e3:b3:ec:7d:2d:62:67:b3:
                    2a:d5:f4:89:cc:ea:9b:79:6d:39:3a:08:c1:81:6f:
                    0c:f3:0d:8e:d5:14:47:5c:89:90:0c:bf:8b:3c:c4:
                    b8:8a:7a:dc:38:18:fc:1c:74:7f:04:88:7a:f9:34:
                    86:d6:38:31:bf:20:12:83:91:e4:1d:c3:b5:57:5d:
                    e4:cb:3c:b6:d7:12:db:e5:29:a4:64:6c:ac:8e:1b:
                    07:b1:2c:ac:2b:7a:b9:36:3f:e1:ac:cc:c0:49:8c:
                    36:05:0b:64:4e:47:6a:d5:53:e5:f8:27:42:7b:90:
                    56:e0:ba:04:57:c6:8f:97:29:93:79:e2:7e:bd:20:
                    ec:4f:1e:20:d0:15:90:13:2d:e1:e8:23:4f:bc:8a:
                    da:38:00:f0:8a:c8:c1:3d:d8:d9:43:c1:31:bc:ea:
                    10:5b:bf:09:14:5f:e7:52:b2:ab:bd:42:9d:6b:f3:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:B6:4B:15:56:A9:9C:0B:89:D4:5E:E1:6B:AE:BE:46:17:84:4F
            X509v3 Authority Key Identifier:
                keyid:BA:05:1B:54:01:88:F7:4A:BA:19:A9:0A:B7:B5:DC:C4:29:D4:7A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugUbVAGI90q6GakKt7XcxCnUepg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/OX-2SxVWqZwLidRe4WuuvkYXhE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/ugUbVAGI90q6GakKt7XcxCnUepg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:72:43:68:43:d6:60:7f:d4:b9:b3:c7:da:b7:0d:81:52:
         6c:23:b7:99:0c:2b:b1:63:5a:ff:ad:35:c6:4d:53:3a:3e:22:
         aa:af:8d:df:d2:c5:c0:af:18:f8:31:49:a3:ae:61:10:a9:74:
         51:1c:ae:55:1c:6d:6b:0d:47:ef:73:f4:23:a5:40:d9:ed:24:
         4d:8b:1c:1c:c6:bf:5a:e4:72:2d:34:27:75:b0:a1:5b:7b:c5:
         f0:e5:a7:9a:b0:ba:28:f3:ad:57:ff:e8:51:14:70:c2:fb:2f:
         86:f9:1a:bd:ca:7a:5e:b4:ea:f0:4d:24:c9:31:ef:6b:de:2a:
         ae:ac:aa:49:55:28:96:fa:54:91:c2:96:79:b3:20:36:aa:36:
         29:87:b2:77:8e:22:c3:8c:77:9f:9e:68:a9:3f:e1:36:7a:1e:
         da:25:52:f9:c3:de:28:ce:30:48:e6:6f:b2:3e:12:21:c2:1f:
         f4:23:f0:86:4e:2f:f3:83:55:fa:e4:93:dc:94:38:a2:20:07:
         e4:99:b5:bb:81:d2:78:80:80:3a:5e:9b:0c:7b:4f:69:8e:11:
         5d:5d:86:15:50:3a:66:7d:d2:1c:2f:04:65:a1:c2:70:44:bf:
         19:f0:e2:fd:f6:5c:e3:9b:59:3b:0c:46:6f:62:97:d1:06:9b:
         a5:e4:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----