Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/V8FYGbA4KPwh4II_F0z_SZxX8e8.roa
File:                     V8FYGbA4KPwh4II_F0z_SZxX8e8.roa (raw, json)
Hash identifier:          jLsbrg6ZWzbF0Vx0eOEwTlP79Usu+t/gigdR4d43THU=
Subject key identifier:   57:C1:58:19:B0:38:28:FC:21:E0:82:3F:17:4C:FF:49:9C:57:F1:EF
Certificate issuer:       /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial:       34D4488C
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/V8FYGbA4KPwh4II_F0z_SZxX8e8.roa
Signing time:             Sat 01 Jan 2022 13:07:33 +0000
ROA not before:           Sat 01 Jan 2022 13:07:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31441
IP address blocks:        83.173.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886327436 (0x34d4488c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
        Validity
            Not Before: Jan  1 13:07:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57c15819b03828fc21e0823f174cff499c57f1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:2d:a2:53:ad:14:79:72:aa:92:f3:8c:d7:
                    01:6d:d6:f9:49:de:ab:db:28:62:14:49:ce:90:ac:
                    cd:57:28:e6:15:0a:d5:90:2e:f0:f4:01:54:2e:2b:
                    78:32:0b:62:9c:13:4a:c1:d6:cd:77:45:ca:35:77:
                    1d:14:b2:c3:c7:fa:2f:6e:57:5c:77:b8:c6:ac:bc:
                    f5:3b:10:2c:fd:19:76:4d:07:3b:9d:57:30:48:a2:
                    6b:ac:7e:e8:3c:1a:d1:2a:a6:c0:4b:81:bd:0c:f2:
                    70:ad:2a:5f:7a:0c:fc:0a:41:32:a5:71:e4:62:ba:
                    3d:a2:8e:b9:17:70:c6:14:fa:cf:15:3f:d3:87:df:
                    80:07:e0:7c:b6:0b:3b:1f:82:4e:40:8b:33:8b:73:
                    6a:ba:d1:a7:00:16:ba:93:9b:67:78:91:e7:20:d7:
                    04:20:33:be:eb:5e:4b:62:f0:cb:83:75:08:9d:da:
                    cd:fa:6d:42:10:c7:b6:10:7f:2f:96:05:53:80:ad:
                    25:d7:9f:6d:05:4a:e4:38:62:04:c9:f4:4b:ea:80:
                    88:7e:bc:b7:78:46:3e:1a:81:52:cc:73:fb:da:df:
                    a2:09:ed:15:70:d2:27:3f:c6:de:4d:f2:4f:48:de:
                    e2:31:66:8b:a3:aa:b7:e8:90:00:71:e5:a9:51:a7:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:58:19:B0:38:28:FC:21:E0:82:3F:17:4C:FF:49:9C:57:F1:EF
            X509v3 Authority Key Identifier:
                keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/V8FYGbA4KPwh4II_F0z_SZxX8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.173.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:97:d8:a0:69:b6:24:c9:4c:7f:c2:c9:26:1a:20:45:02:
         90:db:83:73:88:6d:0c:8e:45:46:61:e6:09:8d:1e:f2:6d:ed:
         0c:2e:a5:28:7a:54:cd:32:2b:fd:fc:cc:30:44:a6:c0:3f:5c:
         cd:30:e9:ef:3e:82:5b:0a:cb:ef:07:be:79:7f:8f:53:98:7c:
         79:e0:5f:2f:b6:bf:bb:a7:1c:f0:af:4c:70:86:d2:0d:e1:67:
         ec:2b:bc:75:87:dd:4a:82:9b:ca:82:97:71:b7:e0:d4:bb:dc:
         71:21:14:5d:61:35:0c:b3:19:b0:1c:cb:19:7e:d6:65:4f:9b:
         f8:c8:f6:88:b3:1f:8f:de:20:02:fa:72:6c:07:b6:a0:48:6b:
         19:d9:87:bf:84:3f:3e:8a:ca:f5:7b:33:4f:7e:59:df:d0:5c:
         e8:c6:d1:c1:ed:b5:6f:f8:23:71:f1:51:83:17:6b:9c:e6:d8:
         c3:d1:73:6f:bb:a5:9b:4f:8c:de:f7:fa:9c:84:d5:0c:e7:c7:
         b7:15:dc:0f:6b:69:64:6e:07:a4:ea:94:71:18:67:08:de:58:
         ff:0a:0b:42:1c:e8:5b:4a:f7:26:d0:35:76:1d:84:1a:7c:7c:
         8c:2a:1e:4d:8c:96:f6:dc:eb:11:f2:0d:d3:f9:ff:72:31:e2:
         c7:94:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----