Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JXx4qF7qd9IKTAIWiy4D1z1BguE.roa
File:                     JXx4qF7qd9IKTAIWiy4D1z1BguE.roa (raw, json)
Hash identifier:          4AKHyt+UdRzlSkvEIEoIU11qLA3XS28o6Wv1eewFESg=
Subject key identifier:   25:7C:78:A8:5E:EA:77:D2:0A:4C:02:16:8B:2E:03:D7:3D:41:82:E1
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       0A191789
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JXx4qF7qd9IKTAIWiy4D1z1BguE.roa
Signing time:             Sat 01 Jan 2022 06:03:47 +0000
ROA not before:           Sat 01 Jan 2022 06:03:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42926
IP address blocks:        185.220.58.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169416585 (0xa191789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Jan  1 06:03:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=257c78a85eea77d20a4c02168b2e03d73d4182e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:c2:ce:55:b6:b8:dc:42:81:60:94:c8:52:
                    af:dd:e0:ad:88:da:7e:c4:78:34:47:52:01:08:aa:
                    a8:b7:72:18:07:63:6f:e8:44:f3:e9:8f:d8:ce:b1:
                    37:01:e5:f1:c9:06:aa:b9:f7:12:80:d4:17:c5:64:
                    7d:69:89:8c:92:ae:61:68:70:c6:9d:39:fd:0b:0e:
                    32:f8:59:49:30:65:97:fc:8b:19:0f:d3:96:e3:e5:
                    b0:b6:71:cc:27:69:15:ae:02:e6:38:e9:35:45:f0:
                    97:de:58:78:5d:72:cc:2e:20:bc:d9:7a:0e:e2:8e:
                    4f:1b:e1:4c:4a:cc:1b:e2:b3:04:db:1d:60:0a:b6:
                    6d:ee:81:9d:0c:65:99:e7:d1:a2:e7:73:57:6f:76:
                    d0:e0:70:02:4e:03:15:98:d5:54:a9:a6:f6:e1:81:
                    14:e1:c6:b5:b9:9d:8b:4e:69:43:f1:1a:80:8d:31:
                    92:33:91:a3:6c:5f:0e:40:ac:5c:84:fb:46:b4:c2:
                    3d:6e:05:64:eb:b7:ac:ca:38:da:d2:f7:2d:1e:69:
                    82:82:cc:59:7e:bd:36:18:09:fa:bd:a4:18:25:fa:
                    78:d7:53:dd:af:19:2f:c6:c1:45:8d:df:a1:1f:fd:
                    00:b5:01:60:4b:f5:7a:8d:22:ce:fd:9e:dc:2b:af:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7C:78:A8:5E:EA:77:D2:0A:4C:02:16:8B:2E:03:D7:3D:41:82:E1
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JXx4qF7qd9IKTAIWiy4D1z1BguE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:e7:73:c3:a5:40:13:01:20:90:4d:d3:ee:7c:8a:22:e6:a3:
         3f:d4:8a:af:4c:a4:0f:a9:05:22:2d:14:5c:7e:34:45:90:6c:
         59:ef:44:04:cb:81:01:e1:3c:37:6e:71:33:ef:dc:92:df:c1:
         51:44:46:e2:c1:42:0e:22:24:57:9d:ea:41:ee:0c:fb:9f:0f:
         40:ae:4e:4b:8a:41:aa:c6:f6:9f:6d:89:6d:57:56:d6:15:56:
         76:0a:70:0a:3f:03:59:2c:9a:17:a1:4c:24:c2:6a:be:44:1d:
         16:90:f6:8b:cf:d0:9c:4b:0c:b8:36:af:fe:80:5a:0a:76:72:
         c2:72:3e:a4:1b:4b:b5:f1:a7:35:4c:74:4a:09:5b:09:d7:68:
         8d:d4:61:62:65:3d:67:3f:7b:6e:3d:69:fe:34:c8:5b:6d:2a:
         43:9a:d4:67:ea:a8:78:01:46:d8:a9:43:bd:ea:4f:b7:8f:82:
         b0:90:1a:57:86:ca:1d:5e:a4:59:4b:40:a6:fa:63:3c:a0:78:
         a8:3d:6d:af:0f:09:91:a2:ae:a7:a6:86:44:d6:db:95:bf:85:
         62:f8:0d:1d:19:0b:45:8f:1e:da:1e:b1:76:8b:0e:f0:99:90:
         13:25:88:fb:ec:89:f1:76:9b:e4:4e:d9:d8:63:1f:f8:af:de:
         0f:5d:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----