Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4UPRBjaHnWuilLrA7JT4WPnK6lc.roa
File:                     4UPRBjaHnWuilLrA7JT4WPnK6lc.roa (raw, json)
Hash identifier:          iF3CHeRZs2DD/7R/dES+IEwrUlzUDw6qP2E1aFP/Hns=
Subject key identifier:   E1:43:D1:06:36:87:9D:6B:A2:94:BA:C0:EC:94:F8:58:F9:CA:EA:57
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       01837A611F9A01C3788EFBF5C6B78646214F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4UPRBjaHnWuilLrA7JT4WPnK6lc.roa
Signing time:             Mon 26 Sep 2022 15:18:48 +0000
ROA not before:           Mon 26 Sep 2022 15:18:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42881
IP address blocks:        185.115.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7a:61:1f:9a:01:c3:78:8e:fb:f5:c6:b7:86:46:21:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Sep 26 15:18:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e143d10636879d6ba294bac0ec94f858f9caea57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:82:68:e8:e3:4e:d7:24:8d:65:87:c3:34:
                    56:24:6f:31:92:61:fa:09:20:75:18:3a:af:f3:1e:
                    6e:7e:d2:91:a3:ae:ff:73:e7:97:7a:92:4b:61:5d:
                    19:94:4a:31:c3:c1:a0:c7:39:73:eb:72:54:cc:56:
                    06:a9:1b:c2:f8:d6:90:b6:f7:77:61:34:1a:b0:d1:
                    c0:21:d8:3b:56:e7:b1:00:8c:77:a8:cd:12:ea:57:
                    14:53:53:94:d3:4d:01:86:9a:2e:f2:f9:b1:cc:d5:
                    af:b4:fa:ee:68:16:73:be:1d:c1:7f:d6:cd:53:c4:
                    78:03:f3:7b:8a:bd:e2:2a:ed:3e:37:e1:9b:3b:c3:
                    ed:83:a6:63:28:99:b0:92:96:e0:15:db:42:5a:37:
                    ff:87:23:d5:ee:3c:58:30:cd:23:12:cc:03:82:09:
                    e7:f7:1f:96:b7:5b:13:a5:94:5a:87:98:23:a3:29:
                    07:9e:46:aa:0a:cb:7e:2c:b3:d5:dd:1f:2e:5d:5b:
                    1d:3e:df:f6:60:03:fe:6b:6d:88:48:20:80:b6:ce:
                    15:69:5f:10:8e:b6:32:09:61:37:f8:0d:de:9c:85:
                    a4:15:f2:00:20:d8:2b:ad:3b:26:27:51:d0:42:e4:
                    b2:2a:5b:6f:e7:c0:32:17:3a:07:90:c7:9d:04:69:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:43:D1:06:36:87:9D:6B:A2:94:BA:C0:EC:94:F8:58:F9:CA:EA:57
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4UPRBjaHnWuilLrA7JT4WPnK6lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:bd:cc:7f:a5:af:16:3a:f7:92:26:bb:dd:19:0b:94:45:
         c4:a0:ef:0b:a7:8c:c3:02:e7:b5:1c:a0:3a:cb:34:ac:55:8c:
         d7:e8:ab:d2:e3:ef:28:09:a7:3c:92:d4:0b:a4:82:2a:08:04:
         f8:26:ea:f6:93:53:1e:0f:43:cd:84:5d:46:4b:18:e8:b7:95:
         cc:7a:5c:4f:47:a0:e8:1c:51:2c:32:54:c2:91:7a:f7:b7:e7:
         86:44:eb:6e:79:4f:d6:31:8b:47:fc:5e:41:bf:98:23:c0:d2:
         40:35:1a:d7:0d:3c:08:ef:33:99:2a:d5:c1:1c:d6:66:59:7b:
         57:90:6a:5d:cc:f5:24:30:f9:7f:bf:c9:1b:e3:d6:7e:9e:0c:
         7f:38:6b:11:7a:c0:75:2a:90:3e:ed:10:54:03:3c:96:44:06:
         f1:17:cb:40:b2:d3:5d:5e:68:ca:16:6e:db:64:c3:ae:37:43:
         ae:5c:e4:5b:5f:a9:4b:b4:28:21:ef:d2:87:60:64:36:6b:4b:
         42:8a:9a:d7:c3:af:52:c0:fc:fd:86:6b:9e:7a:22:e9:74:8e:
         14:de:67:45:94:c7:6d:54:8c:29:c4:6d:7a:c8:f7:be:be:a1:
         c0:f7:11:59:7d:a5:30:90:17:ab:78:5b:80:f0:58:93:dd:2a:
         1a:77:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----