Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa
File:                     H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa (raw, json)
Hash identifier:          WK4OsNmaLlxAVR4d0SeUm1xZ/6+ZrDJu+lg/skV2TJI=
Subject key identifier:   1F:C5:61:DF:37:2A:7D:DF:F3:F0:BB:92:28:FD:51:69:6D:CA:F2:19
Certificate issuer:       /CN=71ed7ba32e16b552184e665579e8874b74a1ca9b
Certificate serial:       095764EA
Authority key identifier: 71:ED:7B:A3:2E:16:B5:52:18:4E:66:55:79:E8:87:4B:74:A1:CA:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ce17oy4WtVIYTmZVeeiHS3Shyps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa
Signing time:             Sat 01 Jan 2022 07:01:05 +0000
ROA not before:           Sat 01 Jan 2022 07:01:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41390
IP address blocks:        195.3.144.0/22 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156722410 (0x95764ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ed7ba32e16b552184e665579e8874b74a1ca9b
        Validity
            Not Before: Jan  1 07:01:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1fc561df372a7ddff3f0bb9228fd51696dcaf219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:f6:cd:11:60:45:a9:c0:50:91:88:c2:88:
                    32:b2:da:d4:ef:16:44:8e:ea:d2:25:6e:12:d2:7c:
                    bd:2d:f0:f4:3e:0e:fe:7b:f3:00:de:ad:2b:63:5d:
                    6f:8d:ec:c2:e1:e4:da:85:6c:97:f7:74:5d:d4:d2:
                    fb:34:ce:30:04:3e:c7:40:20:d7:0b:c1:f2:ed:52:
                    f8:3d:13:09:6b:f4:9d:09:d6:00:78:cc:ed:a1:c5:
                    c0:b8:fd:91:37:83:30:2f:c3:56:97:4c:00:c8:ed:
                    ef:2e:7e:d4:d8:d6:0a:93:4d:c1:93:65:68:45:0e:
                    09:32:36:d0:11:6f:5a:de:8a:03:af:58:25:a1:dc:
                    a8:54:6b:17:28:22:a2:e3:63:ad:90:e4:35:4d:b0:
                    ff:22:0f:ff:5c:4c:49:e2:93:28:07:18:66:13:51:
                    63:71:2c:bf:8c:47:da:c5:13:a3:01:3d:89:56:20:
                    17:b7:95:ab:f5:1c:de:08:c9:56:d7:cc:88:c9:71:
                    77:9e:b0:ea:56:9e:a8:52:d0:33:3c:24:65:40:79:
                    08:e4:09:c6:63:a7:3f:69:1b:e0:72:b6:ce:b1:6f:
                    1b:02:21:51:57:0b:2a:22:2d:bc:79:38:7e:7b:8b:
                    e0:de:8c:43:34:9e:2b:b8:ae:13:c6:13:a6:a4:94:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C5:61:DF:37:2A:7D:DF:F3:F0:BB:92:28:FD:51:69:6D:CA:F2:19
            X509v3 Authority Key Identifier:
                keyid:71:ED:7B:A3:2E:16:B5:52:18:4E:66:55:79:E8:87:4B:74:A1:CA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce17oy4WtVIYTmZVeeiHS3Shyps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/ce17oy4WtVIYTmZVeeiHS3Shyps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.3.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:91:ce:08:e3:bd:a0:66:3c:72:01:ce:d8:5d:bb:f9:d6:6e:
         c0:ae:ee:2a:fa:7d:72:49:26:da:63:a5:66:c8:07:db:65:f0:
         46:d7:3a:70:66:aa:39:84:16:03:de:ef:66:d3:c3:aa:b0:c1:
         fa:8a:a0:4d:51:21:3e:26:48:68:f0:0f:aa:c0:71:a0:37:c8:
         06:ad:1b:01:ac:31:af:b4:6f:0f:aa:49:c6:8d:48:14:44:95:
         63:05:34:74:5e:ff:2b:db:7c:9e:39:db:a0:d8:05:a9:96:75:
         b7:ad:c6:96:7e:a0:b2:b3:9e:73:b1:f3:45:42:68:3e:da:27:
         a6:e4:93:72:9a:6b:15:d3:5a:c5:d0:3c:14:46:b7:30:48:b3:
         92:77:9a:a4:4e:70:0a:2d:43:6b:f2:6b:e2:eb:12:2e:65:59:
         1d:4c:58:4c:7c:32:43:18:b8:35:7d:22:b0:6d:71:88:e1:fc:
         d5:ae:f7:57:fe:cd:14:d4:1d:fa:66:a5:2b:c3:a6:48:25:66:
         da:5e:e9:6b:2f:79:16:f4:ce:63:90:58:8b:22:ac:a7:de:35:
         ef:2f:67:4f:25:7b:dd:2f:77:6d:d1:fc:1b:9e:86:a7:50:06:
         2c:c2:41:35:09:1c:40:5f:35:ce:dc:d1:f6:ea:f0:8c:01:15:
         d6:95:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----