Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/aGSEbRfDy-NSjDD8k_XOHd83Kq8.roa
File:                     aGSEbRfDy-NSjDD8k_XOHd83Kq8.roa (raw, json)
Hash identifier:          Q4GxwJff8Bm86TBZeTJNyTkAO3wsPRQK7Z+suXkpEgs=
Subject key identifier:   68:64:84:6D:17:C3:CB:E3:52:8C:30:FC:93:F5:CE:1D:DF:37:2A:AF
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       1270EE06
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/aGSEbRfDy-NSjDD8k_XOHd83Kq8.roa
Signing time:             Sat 01 Jan 2022 14:08:34 +0000
ROA not before:           Sat 01 Jan 2022 14:08:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62136
IP address blocks:        185.46.112.0/22 maxlen: 22
                          2a01:86e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309390854 (0x1270ee06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jan  1 14:08:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6864846d17c3cbe3528c30fc93f5ce1ddf372aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:9b:d7:08:9d:82:df:4f:38:7f:b3:c9:69:
                    ae:4b:f4:1e:cc:25:d8:17:8e:7d:21:44:79:ea:13:
                    c7:50:fa:c4:44:09:04:f5:fe:11:4b:39:45:85:73:
                    96:8c:5c:69:00:6b:d0:37:15:1e:f4:76:3f:b2:98:
                    78:37:bd:98:65:e8:eb:03:5b:7b:b3:e8:58:e1:c6:
                    aa:d6:05:6e:34:d6:95:b9:c9:62:08:10:cb:fe:13:
                    29:31:83:d4:66:f5:9a:ee:08:49:ba:cc:c4:a2:a9:
                    03:d4:80:78:f4:3f:af:47:c2:f7:20:37:0f:98:59:
                    0a:37:d3:55:26:21:35:d3:0b:33:3e:0f:0d:24:70:
                    db:64:88:d1:10:66:d4:83:2b:f5:cf:99:ff:d5:42:
                    fb:bd:d0:62:7e:26:85:a6:b6:a2:71:50:66:52:8c:
                    e1:77:90:15:1f:e8:79:77:59:05:cf:b8:d3:47:c3:
                    ee:a9:36:60:d7:eb:75:44:45:18:57:9a:62:a7:95:
                    d9:bb:71:6f:49:b4:e6:6d:33:a1:d7:a8:2c:33:f2:
                    1e:a6:7d:7f:e1:97:85:f5:3c:2c:40:57:a1:c1:98:
                    45:03:95:22:78:94:b4:49:ab:36:9e:c5:2d:0c:e7:
                    8d:a8:28:34:4b:5b:05:19:8e:e3:df:bf:a5:60:61:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:84:6D:17:C3:CB:E3:52:8C:30:FC:93:F5:CE:1D:DF:37:2A:AF
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/aGSEbRfDy-NSjDD8k_XOHd83Kq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.112.0/22
                IPv6:
                  2a01:86e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:49:d6:04:79:fa:b6:9a:d2:db:65:64:37:fa:9b:05:b2:
         d0:d5:33:24:ce:00:d1:cf:bb:1f:06:ea:ab:16:05:3c:c5:2a:
         08:a4:3c:c8:63:78:bf:3a:68:ef:92:e5:cf:78:24:10:dd:3d:
         7b:24:49:8c:cf:47:e8:b9:36:17:f2:c6:2d:33:4d:d6:97:79:
         3e:93:5b:cc:92:47:0b:e0:8a:d4:3f:7a:6a:1c:0b:7f:85:3a:
         77:7c:b9:64:c3:f1:88:00:ee:3b:d6:56:73:79:c4:e0:25:3b:
         af:5c:d7:40:58:1b:c5:ed:3a:bb:7e:70:36:39:83:3e:15:81:
         91:bb:dd:99:a7:b2:4e:6c:23:09:4d:05:44:5d:96:c3:33:1c:
         1c:4a:1e:35:a6:97:cb:18:07:d3:6a:5d:b4:45:e5:20:1d:87:
         8b:f7:e8:5d:3d:84:7a:35:04:e0:16:bc:31:33:b5:4f:2e:64:
         e1:80:8f:c4:c0:e4:96:dc:fd:46:1c:24:a0:d3:01:d5:a8:07:
         2a:48:2e:e6:06:a9:0b:0f:b6:43:7c:7f:0b:6d:87:be:be:a5:
         b1:71:f0:ba:90:2f:92:ca:93:86:db:40:12:7a:aa:12:dc:d1:
         0a:ad:c6:78:dc:8d:db:f6:59:89:26:37:2e:55:74:22:7e:cb:
         d3:83:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----