Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fc2f9M3F1zskOGvfp9h3YrkR7dw.roa
File:                     fc2f9M3F1zskOGvfp9h3YrkR7dw.roa (raw, json)
Hash identifier:          DzXPOOzIqFHHlJDJH56dAz4vrMYsUMtYZZ5osRxOd8g=
Subject key identifier:   7D:CD:9F:F4:CD:C5:D7:3B:24:38:6B:DF:A7:D8:77:62:B9:11:ED:DC
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       14BF41C0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fc2f9M3F1zskOGvfp9h3YrkR7dw.roa
Signing time:             Wed 20 Apr 2022 09:55:22 +0000
ROA not before:           Wed 20 Apr 2022 09:55:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209868
IP address blocks:        5.253.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348078528 (0x14bf41c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Apr 20 09:55:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7dcd9ff4cdc5d73b24386bdfa7d87762b911eddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:ac:8a:8c:f0:b8:0c:44:4a:39:e2:a6:3c:
                    27:09:76:03:7f:b5:32:cb:05:1b:d8:94:fc:7f:90:
                    a3:4a:95:03:fb:62:8c:ee:22:be:06:4d:7d:d6:86:
                    62:cd:37:8b:f2:5a:a0:44:a4:16:48:a1:48:97:f9:
                    47:ab:c4:dc:b8:77:65:b8:53:38:2e:8c:78:95:87:
                    7b:3a:b1:4e:1f:18:93:be:36:1a:28:12:17:09:9e:
                    8c:5a:e2:25:a3:c6:48:45:bd:46:cc:ad:80:dc:a0:
                    d6:1a:5f:40:86:95:d7:ee:16:f2:95:3b:9a:ce:5e:
                    4a:7f:06:1e:f8:ed:ff:13:1a:fe:f9:3f:1a:47:2f:
                    79:85:41:b6:0e:23:d2:19:72:16:52:cf:bd:7a:6d:
                    01:e0:09:e2:e8:77:99:01:d2:d7:11:8a:c5:a7:42:
                    0b:dd:48:22:e1:f0:97:61:16:ee:98:85:4c:9d:3b:
                    7e:09:c6:a2:68:a3:b4:1e:04:ad:6e:ac:f1:9d:d3:
                    9a:5d:5e:51:8e:a0:3f:87:19:db:28:74:d3:6e:8e:
                    ec:81:37:3e:9e:87:fc:60:19:58:4d:fc:86:42:73:
                    67:7a:3c:8d:a9:1c:11:30:b6:64:39:65:ec:d1:db:
                    af:f5:e8:60:4f:e9:83:c1:4b:eb:7f:4a:35:66:ff:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:9F:F4:CD:C5:D7:3B:24:38:6B:DF:A7:D8:77:62:B9:11:ED:DC
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fc2f9M3F1zskOGvfp9h3YrkR7dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:62:d8:3b:63:de:21:69:d9:f1:fc:ce:aa:95:d3:c9:01:05:
         e0:6a:d9:62:43:7a:c9:eb:ef:56:73:15:ce:3c:26:ea:41:15:
         c2:24:06:ad:7e:c3:89:b5:df:6b:52:01:40:12:55:88:f0:45:
         0f:40:93:53:0b:9e:3e:24:e4:d3:f7:8e:47:1d:40:3f:39:1e:
         6d:c6:54:04:e0:c4:66:85:e5:87:7a:08:0f:44:59:a7:7a:5b:
         68:d2:b4:8f:50:3a:ca:e3:0f:23:46:46:12:dc:11:ce:6c:03:
         06:74:46:7d:db:e8:69:fe:9e:77:b4:ae:1d:3b:69:88:3a:87:
         7d:fc:0c:08:e7:34:76:d4:23:b5:18:a6:6f:cf:15:d8:21:e4:
         ce:06:50:46:fa:80:9e:82:61:6f:cf:70:25:b0:6d:89:2d:2d:
         e1:45:fc:78:d7:11:2c:3c:cc:d0:08:1f:83:a0:41:f6:db:0d:
         5d:b8:30:7b:7a:e0:29:ec:3c:28:4a:7a:b6:18:a1:a4:5e:ef:
         e1:f3:3c:fc:aa:1c:33:8c:85:dc:3f:5d:c3:0e:57:91:c2:3e:
         8b:06:4b:65:e8:da:c7:34:c9:76:ce:95:39:0f:f5:0e:21:e6:
         57:b8:c8:da:db:6f:3d:de:24:6f:2e:e5:2b:1f:ab:07:73:8a:
         7f:2f:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----