Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/iagJgbonKhhu0JGuqxYX40rP7ug.roa
File:                     iagJgbonKhhu0JGuqxYX40rP7ug.roa (raw, json)
Hash identifier:          q3MvF90nQ/z+5h0Sa1fWJbau42DgiIlhj2xeY4ZhuiQ=
Subject key identifier:   89:A8:09:81:BA:27:2A:18:6E:D0:91:AE:AB:16:17:E3:4A:CF:EE:E8
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       1654E031
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/iagJgbonKhhu0JGuqxYX40rP7ug.roa
Signing time:             Sat 01 Jan 2022 03:53:40 +0000
ROA not before:           Sat 01 Jan 2022 03:53:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59432
IP address blocks:        185.47.131.0/24 maxlen: 24
                          185.47.128.0/24 maxlen: 24
                          185.47.128.0/22 maxlen: 22
                          185.47.130.0/24 maxlen: 24
                          185.47.129.0/24 maxlen: 24
                          188.213.4.0/24 maxlen: 24
                          188.213.4.0/22 maxlen: 22
                          188.213.7.0/24 maxlen: 24
                          188.213.6.0/24 maxlen: 24
                          188.213.5.0/24 maxlen: 24
                          5.134.112.0/24 maxlen: 24
                          5.134.113.0/24 maxlen: 24
                          5.134.112.0/21 maxlen: 21
                          5.134.114.0/24 maxlen: 24
                          5.134.116.0/24 maxlen: 24
                          5.134.115.0/24 maxlen: 24
                          5.134.118.0/24 maxlen: 24
                          5.134.117.0/24 maxlen: 24
                          5.134.119.0/24 maxlen: 24
                          2a03:c7c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374661169 (0x1654e031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Jan  1 03:53:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89a80981ba272a186ed091aeab1617e34acfeee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:3e:24:55:24:0e:c4:c5:f6:1e:ba:b6:92:
                    b2:d8:9f:d0:87:3b:73:3c:60:6c:20:4e:1d:98:86:
                    4b:e0:bd:66:ec:c7:28:15:1c:0f:17:f4:ce:4c:85:
                    d0:69:c1:d9:10:6b:c7:77:f9:c5:8e:31:8a:43:b3:
                    2b:ab:96:34:97:07:ac:1e:86:c6:cc:fc:95:dd:84:
                    2e:45:5f:a7:2f:e2:ff:64:14:b5:e6:d5:0a:5e:78:
                    06:fe:2d:22:00:bf:f7:95:ec:65:a2:5a:98:4b:7b:
                    98:97:32:17:84:42:4f:38:35:e6:93:ec:44:ca:d5:
                    13:be:e7:bf:87:46:88:be:28:ba:34:db:4b:f9:d3:
                    20:37:73:f3:5d:46:64:bc:f4:7e:c1:1e:64:2b:43:
                    20:5d:dd:d1:1b:7f:d8:a9:bf:d0:ae:9b:73:a8:8f:
                    cb:3c:28:56:0a:02:fc:de:3c:3e:f1:55:f6:a8:9e:
                    65:43:81:5b:38:a6:d9:5b:21:76:74:1a:9c:a7:e4:
                    41:e7:12:3e:ee:21:47:6c:6d:ca:28:c2:e4:a4:3a:
                    2f:fc:08:86:90:b1:92:c6:45:d2:71:c7:c7:60:a2:
                    19:f1:cf:21:f6:c6:9a:4b:f8:9b:aa:4b:e9:ba:ce:
                    47:d2:08:f7:3b:da:1a:0a:b6:b9:d6:86:33:28:5c:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:09:81:BA:27:2A:18:6E:D0:91:AE:AB:16:17:E3:4A:CF:EE:E8
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/iagJgbonKhhu0JGuqxYX40rP7ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.112.0/21
                  185.47.128.0/22
                  188.213.4.0/22
                IPv6:
                  2a03:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:fd:2f:98:29:bd:67:4e:f1:bc:7f:fa:b7:9b:8d:e7:aa:a3:
         01:c0:85:3a:f1:1e:bd:b2:da:c9:7a:cc:99:11:5e:1d:07:cd:
         9b:cf:4e:c6:09:00:69:b1:39:a6:5c:fd:92:20:0e:2a:ab:4f:
         82:44:78:94:4a:71:9c:29:22:bc:c8:65:9f:17:15:b3:91:79:
         cf:f3:cf:26:fb:9e:ee:7d:f0:9c:ec:e4:35:13:d9:b5:ab:1a:
         90:a4:4c:be:10:d0:00:f3:7d:81:a3:2b:c0:fe:fc:e9:03:a8:
         db:15:08:03:b5:64:fa:fb:95:ef:7a:2e:50:58:a3:54:d8:c7:
         8c:b8:16:23:a8:49:c6:41:d5:32:81:5b:0b:c7:74:0b:f4:1b:
         c0:50:f7:74:0c:7b:d6:11:04:35:26:4c:86:24:ec:37:16:c4:
         ca:31:e6:78:e9:2b:c4:43:1c:ac:31:1c:19:df:30:0a:83:3c:
         cf:c8:5e:df:13:3e:06:b2:30:26:60:dc:56:98:3d:d9:4c:07:
         93:15:28:88:19:df:31:90:0a:18:4e:3e:d9:88:30:d9:ba:df:
         61:64:35:d8:dd:58:11:6a:6b:5e:87:70:ca:50:55:b0:66:f7:
         1a:00:38:b4:1d:e0:f7:14:fc:eb:71:33:69:2b:04:4c:26:7d:
         e7:4a:a4:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----