Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/qvL1NFAaKowl0EfGbVaGtCoJadU.roa
File:                     qvL1NFAaKowl0EfGbVaGtCoJadU.roa (raw, json)
Hash identifier:          Cd+zwzSMZ2RfO0Q1UlEcbVUnFyAGKhWBK4cD7xhtBf4=
Subject key identifier:   AA:F2:F5:34:50:1A:2A:8C:25:D0:47:C6:6D:56:86:B4:2A:09:69:D5
Certificate issuer:       /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial:       18CB2501
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/qvL1NFAaKowl0EfGbVaGtCoJadU.roa
Signing time:             Sat 01 Jan 2022 13:57:42 +0000
ROA not before:           Sat 01 Jan 2022 13:57:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5483
IP address blocks:        185.51.188.0/24 maxlen: 24
                          2a01:b5e0::/104 maxlen: 104

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415966465 (0x18cb2501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
        Validity
            Not Before: Jan  1 13:57:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aaf2f534501a2a8c25d047c66d5686b42a0969d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:04:1e:ab:63:2c:1b:69:70:66:36:70:37:
                    6e:58:73:3c:e2:37:c9:1c:fc:fa:e2:72:ba:8f:af:
                    af:7f:9d:e1:f7:8f:eb:4a:a7:e8:71:bb:e0:5b:c9:
                    56:36:02:7a:6e:be:32:30:a9:cd:b0:7c:cf:68:28:
                    fb:75:9e:80:88:0b:68:0e:17:21:94:8e:4f:2f:9b:
                    24:1d:fe:13:91:48:a2:a1:8b:62:9f:7f:c4:78:59:
                    70:2c:5a:99:46:37:f0:8d:a2:3d:ec:fd:cc:50:4b:
                    f9:b3:82:59:36:3b:4b:5c:57:80:a8:36:bd:29:6f:
                    c9:64:13:21:50:26:d0:d7:ba:4c:51:8d:d2:e1:cb:
                    48:c2:fb:50:13:23:0b:f2:6e:5a:d2:a8:34:91:b9:
                    2a:db:60:33:a2:58:f8:92:ea:d3:e9:1e:88:a3:ab:
                    80:c0:65:58:cd:a7:e2:8d:b0:31:a3:c4:c9:fb:54:
                    19:7a:26:22:f4:4c:83:cd:1b:8d:16:0f:62:21:7e:
                    0e:51:80:68:4e:7e:68:37:84:d4:4f:12:dd:3a:50:
                    67:23:16:ea:e2:9a:ef:c1:c0:de:69:13:03:00:4e:
                    9a:cc:52:4a:e0:f3:22:eb:36:ef:e9:61:44:86:8f:
                    5e:6d:4c:02:05:06:2f:1b:01:de:fc:60:80:e8:f2:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:F5:34:50:1A:2A:8C:25:D0:47:C6:6D:56:86:B4:2A:09:69:D5
            X509v3 Authority Key Identifier:
                keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/qvL1NFAaKowl0EfGbVaGtCoJadU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.188.0/24
                IPv6:
                  2a01:b5e0::/104

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:2c:2c:8a:3b:19:36:f6:05:5b:fd:ba:20:7a:78:ea:93:
         e1:df:1c:db:59:14:6c:99:36:24:8b:9d:24:74:2f:58:fe:33:
         d5:82:98:2e:ed:00:3f:04:0d:91:60:0b:6a:a4:c0:d6:aa:ff:
         ed:66:67:4a:41:9c:e8:96:f3:2c:94:89:33:a9:a0:ae:c6:23:
         dd:75:a8:99:0c:ad:86:80:7b:9f:e4:c3:9a:8d:a6:33:62:a4:
         43:56:45:d4:67:b0:24:1b:47:0e:78:ff:1f:fb:fa:62:88:38:
         f8:ac:ee:ce:2b:99:96:73:07:77:a1:e4:73:fb:0a:c1:9e:28:
         8e:b6:b6:88:61:74:e4:cd:0d:32:01:d3:e1:3a:fd:49:4f:be:
         eb:d3:88:32:77:76:5d:fd:ff:ff:da:82:aa:d6:4c:53:e1:11:
         79:8a:a5:8a:c5:68:59:93:2b:75:0b:83:00:15:ce:17:62:12:
         f5:46:f9:75:68:8b:20:1d:b5:70:28:71:71:ba:0a:65:1f:e0:
         42:cf:de:66:53:b2:a9:8f:ee:fd:68:00:2e:b1:cb:43:fc:ad:
         ca:22:8d:74:9c:fe:ff:53:f5:f9:fc:82:c3:7a:fa:e3:33:95:
         62:9f:2c:ee:ce:22:5d:5c:5d:4a:5e:0e:9c:47:69:8c:44:57:
         56:b5:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----