Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/ToAFR0-jjVQQjoFrcdQzdEbj2WA.roa
File:                     ToAFR0-jjVQQjoFrcdQzdEbj2WA.roa (raw, json)
Hash identifier:          2mbtaUDrrbwPXJVZ6jZuJOQbVzQ3Ggc4jsLOt0y5ptk=
Subject key identifier:   4E:80:05:47:4F:A3:8D:54:10:8E:81:6B:71:D4:33:74:46:E3:D9:60
Certificate issuer:       /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial:       17E1A1EE
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/ToAFR0-jjVQQjoFrcdQzdEbj2WA.roa
Signing time:             Sat 01 Jan 2022 02:55:47 +0000
ROA not before:           Sat 01 Jan 2022 02:55:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201659
IP address blocks:        185.61.160.0/22 maxlen: 22
                          2a02:7ae0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400663022 (0x17e1a1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
        Validity
            Not Before: Jan  1 02:55:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e8005474fa38d54108e816b71d4337446e3d960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:e5:95:98:6a:eb:c1:57:c9:0f:5b:1a:a5:
                    d8:4e:58:e2:75:0d:a7:40:13:7e:1e:6b:cc:60:8b:
                    5e:3c:3a:84:ef:f1:0d:40:ef:75:36:00:d9:80:27:
                    1c:70:bc:55:41:43:28:fd:1b:20:2a:90:d0:9d:e4:
                    9e:eb:80:c1:9c:46:b5:09:81:bf:64:4b:06:1b:ce:
                    c5:a8:3e:f4:9b:fe:ac:32:bf:95:46:a2:33:a3:3e:
                    cd:29:ad:f0:10:d0:e7:f1:56:78:9d:ce:8d:00:a3:
                    f5:ec:3e:1b:1c:42:eb:15:85:8b:5c:f8:70:c6:f6:
                    f5:14:c5:cb:87:c5:ee:71:43:c2:c6:69:5d:36:4b:
                    7c:d5:ea:d3:c7:45:1a:bb:10:46:87:58:83:27:ed:
                    b9:f4:31:1b:8a:f4:d2:9f:3b:8d:37:6d:f5:9b:5e:
                    28:20:ec:29:47:17:b2:65:15:e7:8f:c0:ec:a5:db:
                    06:f8:39:cf:38:e2:63:99:7b:2b:0e:01:5c:ee:9d:
                    7e:49:df:23:63:82:ae:c2:32:e6:18:da:09:24:3a:
                    a2:81:f5:01:d3:9d:08:00:9f:64:7c:22:14:88:7e:
                    5a:15:5b:9d:55:2c:09:48:e6:af:d5:d8:2c:d2:f7:
                    33:25:0a:0a:65:e9:b1:a0:23:bf:c2:da:f8:11:94:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:80:05:47:4F:A3:8D:54:10:8E:81:6B:71:D4:33:74:46:E3:D9:60
            X509v3 Authority Key Identifier:
                keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/ToAFR0-jjVQQjoFrcdQzdEbj2WA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.160.0/22
                IPv6:
                  2a02:7ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:30:b0:f3:19:86:3e:46:a6:9c:f3:0b:86:f9:03:f8:73:dd:
         9c:37:02:52:4b:4c:a3:07:8b:1e:65:71:2e:01:a5:a5:f1:f8:
         48:f9:7c:4d:73:25:59:21:f3:58:70:e8:37:55:dc:71:9e:40:
         e7:43:1e:a3:cc:6a:a8:38:4e:3f:65:08:ba:c9:d4:a8:d0:dd:
         6b:37:fc:d1:8e:ba:42:f3:4a:53:25:82:e6:21:ef:24:cc:60:
         7c:f2:bb:88:3b:bb:a3:43:ea:fa:2e:02:7b:30:e3:ce:67:eb:
         0b:0a:92:cd:d8:8b:d0:9d:a4:e1:7e:c2:fb:4c:03:af:99:06:
         f2:25:aa:63:84:8b:c7:e9:6f:b6:ac:fe:93:d6:ba:21:c3:18:
         9d:d9:7b:76:2b:bc:38:66:31:04:48:7b:81:bf:5a:7a:c7:20:
         41:e0:0b:89:e3:5b:88:8a:1e:57:1b:10:70:70:7a:8f:e3:90:
         c0:31:eb:e3:f4:f0:a7:c8:1f:43:ba:5e:38:62:06:f1:88:21:
         02:f3:25:bd:26:d4:27:8f:cc:aa:82:b1:bb:51:15:8f:77:a5:
         41:8a:56:b7:52:d2:bb:80:8c:8f:67:df:2f:43:84:c8:04:5c:
         c4:59:78:1d:3b:80:18:47:59:27:d1:80:e0:d3:7d:90:4c:9b:
         f4:c2:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----