Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/voSkPmq9sOeXWgZCRCibQpD_xJg.roa
File:                     voSkPmq9sOeXWgZCRCibQpD_xJg.roa (raw, json)
Hash identifier:          1AGyciu7I7zC4NC1fuwPafpntbIV5Av6UDz8F9Psti4=
Subject key identifier:   BE:84:A4:3E:6A:BD:B0:E7:97:5A:06:42:44:28:9B:42:90:FF:C4:98
Certificate issuer:       /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial:       1C5B8384
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/voSkPmq9sOeXWgZCRCibQpD_xJg.roa
Signing time:             Sat 01 Jan 2022 07:02:49 +0000
ROA not before:           Sat 01 Jan 2022 07:02:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203986
IP address blocks:        185.78.176.0/22 maxlen: 22
                          2a00:67e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475759492 (0x1c5b8384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
        Validity
            Not Before: Jan  1 07:02:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be84a43e6abdb0e7975a064244289b4290ffc498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:2d:e9:1c:78:d4:91:c5:27:01:f0:f8:36:
                    46:a1:c3:e8:07:34:60:4a:8f:f9:8f:91:04:e0:4c:
                    15:9c:06:9b:55:74:d2:18:bf:34:50:d9:e4:08:81:
                    47:6f:e8:38:42:39:7c:49:83:73:f3:df:8c:ea:b5:
                    a0:7c:31:07:8e:88:e6:0c:66:13:4b:3b:f4:99:22:
                    3a:a9:fc:e3:d6:95:72:52:12:79:c1:4b:1f:cd:b8:
                    50:ec:56:ac:7b:33:ea:a3:aa:93:3d:2b:03:4f:8a:
                    44:89:13:f5:88:54:3b:b6:76:0f:7d:40:80:c1:91:
                    13:82:6b:27:1e:ad:d4:54:0f:cb:9b:19:e4:7f:58:
                    e8:65:b3:e8:87:2b:a7:87:bb:ef:0b:8f:b3:f0:f9:
                    30:52:7f:a0:3f:71:60:a4:84:ab:67:f5:2f:b7:9c:
                    90:24:8e:22:df:51:8c:57:0a:10:e2:e6:dd:fe:44:
                    28:91:30:b7:30:f0:37:89:24:f8:ef:92:84:37:0c:
                    73:51:b9:99:7b:c6:35:2b:dc:2c:e8:fa:ab:84:a5:
                    b3:c8:5e:46:83:4c:93:7c:89:30:76:49:4d:39:18:
                    bb:23:77:f2:3d:cc:f0:9d:d5:05:e8:75:c9:00:a6:
                    9f:a0:12:90:e1:e6:75:35:36:d4:c9:71:fe:7b:f2:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:84:A4:3E:6A:BD:B0:E7:97:5A:06:42:44:28:9B:42:90:FF:C4:98
            X509v3 Authority Key Identifier:
                keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/voSkPmq9sOeXWgZCRCibQpD_xJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.176.0/22
                IPv6:
                  2a00:67e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:10:8a:fe:a2:14:79:0d:a6:5c:4c:e1:59:e5:a7:78:02:5b:
         4f:c6:aa:47:2d:b8:15:3d:e9:93:9f:c8:83:f8:52:0c:9d:5a:
         fc:be:9d:55:67:8a:51:73:a5:e0:04:3a:96:56:d0:42:f6:1e:
         2f:5a:6d:21:62:ce:06:67:b7:08:38:f2:6e:15:6e:c9:74:27:
         c6:81:b6:96:84:28:bb:0a:91:9b:49:61:5f:74:ef:bd:ed:c4:
         d3:c8:15:cd:a9:20:8e:c2:8a:af:d4:c1:c0:d3:8d:ca:07:7e:
         70:0c:e0:94:f9:c3:3c:94:6f:58:f9:eb:ee:e4:97:2b:fa:7a:
         cb:5e:e1:7c:db:ba:fd:7f:29:3b:f8:85:5b:b3:d4:7e:c2:4a:
         98:a9:46:d0:31:c0:53:0f:ff:dc:d3:a2:b2:73:5f:d5:08:85:
         15:0a:c4:bb:6e:84:b9:6f:c9:93:65:28:68:47:b9:12:be:43:
         f3:4b:ab:0a:e3:5c:42:ac:3e:6f:4b:87:53:95:f3:79:59:b1:
         a6:6c:3e:6b:e4:f4:b0:97:64:32:2a:25:4b:80:5a:5a:79:6f:
         d8:37:6d:9f:9e:5b:c6:ad:a4:e2:c7:4a:41:f8:50:af:4b:3c:
         a3:e5:c4:0c:e9:77:ae:64:aa:51:98:b6:5f:b1:4b:b0:31:0e:
         6f:b6:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----