Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/0yx4hZNC2M_mUVnD88lxl5ikOTo.roa
File:                     0yx4hZNC2M_mUVnD88lxl5ikOTo.roa (raw, json)
Hash identifier:          88oiQA8xwo9rDqlD/ypya8LzuFteB334mx8/RRtNsx8=
Subject key identifier:   D3:2C:78:85:93:42:D8:CF:E6:51:59:C3:F3:C9:71:97:98:A4:39:3A
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       01BCBB6C
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/0yx4hZNC2M_mUVnD88lxl5ikOTo.roa
Signing time:             Sat 01 Jan 2022 09:01:42 +0000
ROA not before:           Sat 01 Jan 2022 09:01:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212576
IP address blocks:        185.196.62.0/24 maxlen: 24
                          2a10:74c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29145964 (0x1bcbb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Jan  1 09:01:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d32c78859342d8cfe65159c3f3c9719798a4393a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:96:f0:39:54:b1:fd:1e:34:c7:9b:92:06:
                    ab:dc:6e:bf:72:06:12:07:c8:c6:f6:a6:b3:80:ee:
                    fd:c8:f9:70:0a:4b:9e:d2:96:79:ef:08:93:e7:63:
                    9a:c5:9d:88:03:8d:06:68:8a:1c:24:03:41:36:b6:
                    c0:c9:f9:79:e0:0d:72:8d:f8:35:79:28:ea:4a:43:
                    e6:56:78:c3:fc:44:ed:33:47:95:ec:21:9e:c2:da:
                    00:c9:38:a9:33:0e:81:e6:36:90:9e:c8:e9:ce:68:
                    dc:cc:9d:5d:a3:5e:82:b4:2f:08:b4:ec:bf:29:d8:
                    27:da:4e:6c:a0:85:aa:45:e9:f7:5e:d4:63:80:03:
                    9b:79:d2:dd:94:45:62:61:ca:31:9d:da:ca:4c:bb:
                    3c:71:d0:09:a8:c3:19:72:d2:c0:5e:c5:f6:94:a0:
                    c4:0f:1c:08:fb:a1:35:a3:2e:2f:47:aa:35:58:69:
                    83:13:c2:15:85:b4:fc:7f:2e:78:05:4c:9f:75:a5:
                    4c:95:e8:26:7e:ae:0f:7e:36:92:9b:09:58:19:1e:
                    d9:62:33:2e:2b:6a:f3:10:a6:ac:2f:71:23:1d:f8:
                    5b:c7:b5:1f:0c:d4:4f:d1:42:2e:32:90:29:1b:7e:
                    15:71:3c:c7:ee:b6:57:60:e3:fa:99:6b:0f:df:75:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:78:85:93:42:D8:CF:E6:51:59:C3:F3:C9:71:97:98:A4:39:3A
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/0yx4hZNC2M_mUVnD88lxl5ikOTo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.62.0/24
                IPv6:
                  2a10:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:2e:27:7b:35:dc:cd:d4:8f:fe:a2:1f:0b:a6:d9:36:ac:cb:
         52:7f:c2:3b:36:db:b2:4f:27:db:67:a7:e8:76:b3:22:c4:de:
         c6:82:6f:c1:7e:7d:5d:b2:f1:f0:72:ea:30:38:44:0c:f5:1b:
         9c:b5:f0:8c:bc:9b:2a:36:a8:da:85:1c:cc:ba:b9:25:ae:3a:
         47:f1:45:73:24:0c:b1:08:c2:aa:59:7d:0b:6f:6e:eb:0c:f9:
         5a:69:e6:84:ba:43:80:ba:73:9d:07:64:1a:2d:93:13:ef:9e:
         28:63:cc:da:6a:2c:ab:75:85:c1:ad:83:2b:50:cf:ef:e7:49:
         8d:6c:24:88:bf:ed:c5:66:80:19:86:04:15:6f:f3:68:3e:14:
         fc:97:01:41:e6:16:df:e5:e2:68:66:34:b6:14:0d:f5:60:1f:
         3c:68:cd:77:a6:fd:b7:46:32:29:7a:f6:0d:65:a4:7d:f9:83:
         65:9c:01:73:ea:50:c0:39:5c:02:42:fd:3f:62:e6:74:1e:4e:
         f8:b8:b2:34:62:60:e8:1e:ba:78:fb:92:6e:7c:aa:96:c2:c8:
         de:e4:08:c7:0a:dd:1b:d8:12:99:ed:01:e2:5d:d6:5b:52:40:
         71:32:da:2e:91:57:59:dd:46:3f:c5:a9:a6:0c:5e:83:6d:c0:
         a1:f1:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----