Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/7AOMTQOkRZU5MgY06BSzFpQJC1Q.roa
File:                     7AOMTQOkRZU5MgY06BSzFpQJC1Q.roa (raw, json)
Hash identifier:          FdinUDDfbyJekdxz8gCUZ0fJc2tRXTI7IV/XmSg4gi4=
Subject key identifier:   EC:03:8C:4D:03:A4:45:95:39:32:06:34:E8:14:B3:16:94:09:0B:54
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       18832FA0
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/7AOMTQOkRZU5MgY06BSzFpQJC1Q.roa
Signing time:             Sat 01 Jan 2022 10:04:34 +0000
ROA not before:           Sat 01 Jan 2022 10:04:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47674
IP address blocks:        185.61.136.0/22 maxlen: 24
                          2a02:7a60::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411250592 (0x18832fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Jan  1 10:04:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec038c4d03a4459539320634e814b31694090b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:f1:4d:ab:ff:cc:11:be:6d:23:93:23:df:
                    f5:3d:3e:c2:6b:3a:d9:25:f5:c4:3b:31:72:c7:0a:
                    d5:a4:84:02:6a:7b:68:b1:62:9f:4e:da:b3:e8:7c:
                    8b:96:62:9e:7d:9c:e6:80:41:3e:da:9b:03:2e:12:
                    82:8a:38:6a:c7:36:43:ae:84:9c:3f:d7:aa:75:7f:
                    13:49:28:68:97:11:a9:c2:32:94:d7:cd:41:f9:03:
                    0e:0a:19:d1:02:ee:49:cd:fc:a0:a3:cd:63:05:ca:
                    f1:b1:64:1f:2f:e6:4b:fa:d7:ff:3d:69:c2:80:93:
                    76:bd:a8:52:81:2a:43:f7:ff:de:39:99:ed:fa:7d:
                    3e:80:d8:04:4e:13:4f:08:4b:e3:16:19:4c:e4:d8:
                    17:23:f6:7e:ed:c5:d2:8b:6b:f9:6b:d6:1f:97:6d:
                    d8:6f:10:b8:4d:58:62:93:b8:da:49:50:2b:8b:41:
                    c6:94:81:95:49:d7:11:77:c5:a2:d7:56:da:10:09:
                    e5:64:42:b8:30:8f:d9:78:f9:09:02:c6:73:04:5c:
                    92:6c:c9:1f:90:05:76:9b:99:36:6a:db:b8:ae:33:
                    c8:5d:01:49:86:61:d1:d6:bd:b3:33:3a:67:0d:82:
                    7a:7e:f8:d3:8f:56:a8:8f:55:f0:8c:66:17:c9:f7:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:03:8C:4D:03:A4:45:95:39:32:06:34:E8:14:B3:16:94:09:0B:54
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/7AOMTQOkRZU5MgY06BSzFpQJC1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.136.0/22
                IPv6:
                  2a02:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:90:54:dc:f9:61:07:44:47:9c:4e:a2:3c:71:27:22:06:
         c6:2a:08:19:20:5f:45:4a:c3:44:c2:1f:35:fa:9e:e1:39:7c:
         9f:5c:9a:28:63:34:5b:b5:8f:6b:1c:b3:e3:67:83:33:20:a5:
         f3:b3:e3:ce:fb:30:22:6e:76:3a:69:a4:1e:bb:bf:7c:0b:f1:
         e2:53:3f:3f:49:c7:94:3d:04:00:5c:e4:79:db:e3:6a:0d:41:
         f6:5a:da:7b:83:3d:ff:b0:6e:7d:d9:ab:23:8d:7e:08:49:17:
         59:7b:91:b6:2c:c3:e2:3e:ff:88:65:8a:44:b9:7e:47:c0:15:
         3a:68:e0:d9:c9:dc:91:b9:50:a6:1a:ec:bb:a2:68:32:70:aa:
         a9:9f:3f:96:8e:f5:1d:15:8b:b9:df:a7:ab:58:e2:28:d4:e0:
         4d:16:da:7e:b0:ba:d3:c3:4c:73:55:d8:03:33:c5:48:25:c5:
         df:0b:0d:1d:65:eb:15:54:a4:39:55:17:01:89:6f:c5:07:ac:
         8e:a8:5c:90:22:54:3f:35:ba:04:d1:87:cb:ef:37:8b:36:9c:
         c1:53:d3:5c:0b:bc:77:ba:6e:78:40:3c:33:1a:72:47:38:a2:
         7c:6b:b7:43:32:c6:40:88:e8:c7:e0:65:d2:51:da:2f:a3:cb:
         62:ae:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----