Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/v7y9AolRLS_dY5RFR9nxrtH2RSk.roa
File:                     v7y9AolRLS_dY5RFR9nxrtH2RSk.roa (raw, json)
Hash identifier:          UiGf3orqEadFjRNcTnyH8iOI6IAf1+i5isGTb8CGUwg=
Subject key identifier:   BF:BC:BD:02:89:51:2D:2F:DD:63:94:45:47:D9:F1:AE:D1:F6:45:29
Certificate issuer:       /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial:       018234951A9542BE19C0800D313D59DF4F5E
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/v7y9AolRLS_dY5RFR9nxrtH2RSk.roa
Signing time:             Mon 25 Jul 2022 08:59:23 +0000
ROA not before:           Mon 25 Jul 2022 08:59:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200678
IP address blocks:        185.99.176.0/22 maxlen: 22
                          2a00:8e80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:34:95:1a:95:42:be:19:c0:80:0d:31:3d:59:df:4f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
        Validity
            Not Before: Jul 25 08:59:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bfbcbd0289512d2fdd63944547d9f1aed1f64529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:a9:76:6c:09:f2:70:27:b2:c6:f1:80:0b:
                    c5:69:78:14:e1:53:11:9a:1f:7d:28:02:86:93:9f:
                    b0:ac:df:ff:3c:ad:6e:65:d5:7b:f8:53:79:f5:a6:
                    5e:ee:6f:82:fc:f0:75:d3:6e:e4:9a:c8:9f:d5:7a:
                    6a:6f:7e:5d:a3:41:bf:85:03:67:70:c2:80:f6:00:
                    5b:eb:81:46:62:0d:f1:9f:e1:e0:8e:da:29:f4:8c:
                    aa:2c:ba:61:81:c5:3c:18:5a:d7:dc:89:78:85:5e:
                    c9:1b:f5:6b:00:e8:9b:18:83:fd:9c:db:5d:91:6f:
                    f9:94:b5:3c:c8:9b:b8:a8:e8:f4:73:8f:b3:83:b2:
                    a9:2d:02:de:a3:1b:59:b8:88:9a:63:42:56:41:ff:
                    4d:59:1b:89:b9:1a:8e:15:b4:92:e6:59:35:94:30:
                    d5:64:61:42:3d:0a:24:1b:cd:1e:58:16:bf:b4:9c:
                    fe:4e:c4:0a:f0:6f:4b:ce:db:26:3c:e6:8d:2b:68:
                    b4:54:6e:db:0f:ba:09:7f:ba:0b:7b:c2:26:5d:4c:
                    88:cf:ac:01:ba:91:1a:b4:2e:43:1f:37:19:d1:0d:
                    66:ec:b4:58:22:d7:df:50:bf:d3:63:63:e6:6c:be:
                    f3:be:12:0f:b4:66:f8:30:a6:bc:fa:13:e3:30:92:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BC:BD:02:89:51:2D:2F:DD:63:94:45:47:D9:F1:AE:D1:F6:45:29
            X509v3 Authority Key Identifier:
                keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/v7y9AolRLS_dY5RFR9nxrtH2RSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.99.176.0/22
                IPv6:
                  2a00:8e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:38:4f:d4:7b:72:07:8f:9f:82:90:35:1f:ce:f0:0d:12:
         e0:a8:86:66:f8:eb:02:bd:b8:2c:b1:5a:38:dd:80:92:d1:14:
         12:b5:31:86:6f:10:4d:87:47:8a:d3:cd:25:df:ff:d9:a2:e4:
         34:ff:b3:da:41:90:9b:8a:76:4e:60:b8:68:8f:45:b5:ec:fb:
         aa:c0:ce:3b:93:3d:4c:cd:1d:df:f3:63:de:a9:24:97:36:e7:
         d7:5d:07:ed:28:23:e0:46:91:87:04:00:ca:cd:6b:9e:de:e5:
         d3:dd:cf:37:3d:1b:dc:f4:ba:0e:a8:55:7c:58:17:db:69:82:
         71:a9:33:69:92:6f:c3:54:64:c0:6d:03:25:4c:e9:63:73:72:
         80:59:27:eb:2f:49:9e:7e:56:1f:02:a0:98:03:f0:9b:19:d0:
         dc:b1:67:01:aa:7e:7f:b3:1b:dd:26:fa:40:03:6f:54:2d:47:
         30:71:2f:d5:85:02:2c:5f:10:43:84:da:dc:57:44:21:32:6e:
         73:b0:5b:0e:9c:1a:0b:3a:0f:61:2c:ea:dd:15:0d:4e:61:46:
         d3:45:bb:82:b9:94:27:a2:b0:c6:ed:20:c9:97:b0:a2:09:ce:
         51:f7:ad:84:bd:a2:69:c3:ae:01:33:d9:38:07:01:fc:5c:86:
         76:21:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----