Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/3z9HrtF5CImG3D_HO64FF4rNglM.roa
File:                     3z9HrtF5CImG3D_HO64FF4rNglM.roa (raw, json)
Hash identifier:          JpqUZ0JEbsitsG25LQ0reSVKAgAl5VfqaTiK9eJ3J48=
Subject key identifier:   DF:3F:47:AE:D1:79:08:89:86:DC:3F:C7:3B:AE:05:17:8A:CD:82:53
Certificate issuer:       /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial:       0DC8E7CE
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/3z9HrtF5CImG3D_HO64FF4rNglM.roa
Signing time:             Sat 01 Jan 2022 12:05:29 +0000
ROA not before:           Sat 01 Jan 2022 12:05:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205930
IP address blocks:        185.169.68.0/22 maxlen: 22
                          2a0b:40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231270350 (0xdc8e7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
        Validity
            Not Before: Jan  1 12:05:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df3f47aed179088986dc3fc73bae05178acd8253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:61:45:e8:a0:69:70:00:bf:75:5a:c5:98:
                    08:91:17:46:5c:93:17:fe:32:ed:bb:f4:0f:fe:3e:
                    8c:d6:c2:e8:58:9d:71:9a:a0:8e:2e:18:08:b8:e5:
                    5b:2c:8d:b9:b1:c0:96:5c:8a:25:70:53:83:c3:7b:
                    34:61:3c:89:36:08:cb:5b:5a:97:c8:52:98:34:db:
                    5d:a8:7f:96:49:1c:00:28:4e:fd:b2:5c:30:65:6d:
                    96:10:87:e9:0c:dc:ed:42:36:7a:e9:b5:77:9f:be:
                    be:30:0d:9f:1f:8c:c4:26:e6:4e:fd:2a:01:f5:df:
                    8c:67:4b:b4:62:c5:7b:3c:7a:c8:54:32:f1:1a:9d:
                    63:d3:fa:4d:45:57:4d:64:17:82:d8:92:b6:5a:2d:
                    6b:e8:02:76:e0:dc:57:f8:e8:b1:79:aa:97:4a:b3:
                    8d:67:d6:d2:20:84:bf:81:19:80:ed:d1:76:1f:ba:
                    36:d2:71:7b:64:17:71:63:05:d3:73:f2:ad:0d:a1:
                    f8:4e:bf:b1:35:84:27:74:79:a9:fc:db:33:a4:51:
                    c7:71:bd:c5:49:15:64:a1:5f:7a:4f:b2:f2:9a:fc:
                    05:b4:a1:22:47:f1:9f:22:a6:c6:e4:b7:ec:8a:86:
                    82:65:ea:bb:9e:5c:ef:a2:b1:21:bb:f5:fe:93:c6:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:47:AE:D1:79:08:89:86:DC:3F:C7:3B:AE:05:17:8A:CD:82:53
            X509v3 Authority Key Identifier:
                keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/3z9HrtF5CImG3D_HO64FF4rNglM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.68.0/22
                IPv6:
                  2a0b:40::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:ee:88:6a:9b:c5:dd:12:4c:d3:cb:73:5f:7a:43:64:51:
         fa:e6:2d:c1:c4:51:77:03:e0:de:c1:18:d7:f6:42:0b:99:e1:
         d7:de:77:a1:c9:80:09:23:c5:8f:4e:91:28:2d:a4:c7:f4:08:
         a3:b7:4b:7d:a6:87:cb:02:ee:46:a9:d3:5e:e5:a8:25:33:a2:
         0a:58:b8:8d:3c:6a:12:71:b3:46:a1:2a:b2:55:bf:39:38:9c:
         cf:8b:12:fd:df:2b:b0:c0:7a:03:33:1f:8e:5b:5b:e2:f0:f3:
         9b:26:28:40:1a:a7:06:f5:60:23:5d:e5:04:9c:59:0d:8c:1e:
         6b:c0:fe:02:6b:78:15:ea:51:72:ce:93:39:66:9d:cf:94:04:
         9d:8a:eb:c9:51:98:a7:0b:8e:8b:97:83:1e:af:4d:0e:08:8e:
         60:3c:50:dd:2b:71:d5:e8:e5:da:d2:67:53:bc:a1:96:1b:d6:
         21:cb:95:60:0f:f8:56:0e:8b:52:10:9e:e8:70:75:2a:60:bd:
         28:3d:38:97:09:24:b8:2f:c1:16:a7:11:7e:ce:ed:21:06:38:
         a7:c9:3c:e2:0b:d3:36:d3:b3:75:39:40:bf:0b:83:ad:92:22:
         28:75:af:4a:b7:58:13:63:16:de:6a:1d:82:81:d7:75:69:15:
         9a:ee:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----