Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/tDXcADNyeqEh9fy3ku1j1h__Op8.roa
File:                     tDXcADNyeqEh9fy3ku1j1h__Op8.roa (raw, json)
Hash identifier:          X+zcAOt8vc9w/po6nZA64pFQAU8D5aXkTAqecGbeLyM=
Subject key identifier:   B4:35:DC:00:33:72:7A:A1:21:F5:FC:B7:92:ED:63:D6:1F:FF:3A:9F
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       0B4B717D
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/tDXcADNyeqEh9fy3ku1j1h__Op8.roa
Signing time:             Sat 01 Jan 2022 00:53:44 +0000
ROA not before:           Sat 01 Jan 2022 00:53:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204668
IP address blocks:        185.175.8.0/23 maxlen: 23
                          2a0d:180::/31 maxlen: 31

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189493629 (0xb4b717d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Jan  1 00:53:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b435dc0033727aa121f5fcb792ed63d61fff3a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:95:82:33:a1:7f:f8:07:a3:42:df:6e:9e:
                    70:40:6f:1f:b3:e1:9b:d3:67:f7:41:f7:24:40:8c:
                    4f:9c:db:23:fb:23:ea:76:a5:ae:9c:8d:18:9e:6b:
                    94:2a:e6:6a:5d:a2:41:03:7e:f9:9f:69:94:f6:fa:
                    7d:9e:33:86:f8:a7:15:19:bd:ca:30:41:ab:6c:58:
                    e9:c7:1b:f7:9c:88:49:b4:1a:ec:13:b3:d0:6a:12:
                    0e:f2:18:37:af:1b:b8:5e:37:53:e4:b6:61:a4:f7:
                    6d:79:90:d2:82:a0:33:76:48:47:3a:1a:25:1a:a5:
                    cb:6d:79:7f:50:f5:03:c2:a2:23:d8:f9:30:ad:53:
                    a7:93:2d:88:fd:3c:e7:99:46:2a:53:a2:72:5b:ad:
                    d5:93:93:3e:2c:2b:96:18:8f:be:ab:93:29:5d:b1:
                    3b:dd:4f:9e:24:f8:c8:0e:2b:f6:70:ed:e7:9a:1c:
                    ed:5b:62:66:6f:1a:10:b0:ef:df:e5:a3:fa:14:16:
                    2f:27:91:4b:0e:41:59:27:4c:e1:f8:a1:35:bd:03:
                    55:f6:ff:89:4d:46:86:d4:60:94:b1:18:f6:d2:19:
                    0b:ba:51:a5:f1:5f:95:e7:e1:d7:65:c5:fb:99:46:
                    1e:47:f2:a0:b7:fa:cd:6d:8d:c4:52:e4:98:e2:c3:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:35:DC:00:33:72:7A:A1:21:F5:FC:B7:92:ED:63:D6:1F:FF:3A:9F
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/tDXcADNyeqEh9fy3ku1j1h__Op8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.8.0/23
                IPv6:
                  2a0d:180::/31

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:21:6c:c1:cf:84:5d:51:d5:81:8c:32:0a:58:a3:8d:1e:
         5f:b2:96:df:96:04:85:39:0b:30:b3:dd:44:a5:c4:73:3c:e2:
         14:f8:08:da:d7:fb:00:6a:d9:82:1c:8b:6c:d9:0d:e1:62:8e:
         21:e6:d6:87:fd:cf:cd:74:b8:0d:51:b7:de:fe:33:47:97:a6:
         f5:9a:a6:77:0b:f3:ca:71:12:3a:37:ae:ae:aa:95:af:9c:99:
         5b:f5:59:1b:d9:4f:cd:11:2b:8b:30:39:77:0a:f2:63:ff:aa:
         10:10:2b:f5:04:de:57:e6:c1:83:19:b5:d7:08:90:b9:c0:12:
         b2:43:4a:68:47:c7:98:5d:86:57:fd:c1:81:f2:4e:e0:a4:60:
         b3:42:b5:63:cc:f1:83:e4:a4:01:59:b2:a9:39:81:0a:24:21:
         b0:0e:83:f1:4d:9e:39:21:e7:30:9c:f2:a4:be:cb:d8:ae:d0:
         84:eb:b0:49:2e:40:bd:f8:09:b8:e1:fd:6b:54:f9:49:f0:92:
         60:d5:b8:a5:36:9e:1b:8c:fb:62:7b:ef:7a:44:ad:28:0a:48:
         58:35:2d:1c:f7:85:81:3f:fb:6f:83:dc:b6:4d:13:89:ee:2d:
         cd:b3:7c:4b:78:95:79:e8:ab:b9:8f:d9:c4:37:43:40:32:e8:
         e5:67:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----