Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/_bv0BND3TXahInuYxMXhjz-ff6Y.roa
File:                     _bv0BND3TXahInuYxMXhjz-ff6Y.roa (raw, json)
Hash identifier:          dUmtq917TMZvEJ6Qd7mnfc8T5GWBtEdWUE81UT0UbDs=
Subject key identifier:   FD:BB:F4:04:D0:F7:4D:76:A1:22:7B:98:C4:C5:E1:8F:3F:9F:7F:A6
Certificate issuer:       /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial:       06F8B427
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/_bv0BND3TXahInuYxMXhjz-ff6Y.roa
Signing time:             Sat 01 Jan 2022 01:54:14 +0000
ROA not before:           Sat 01 Jan 2022 01:54:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204824
IP address blocks:        185.218.48.0/22 maxlen: 23
                          2a0b:d340::/29 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116962343 (0x6f8b427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
        Validity
            Not Before: Jan  1 01:54:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdbbf404d0f74d76a1227b98c4c5e18f3f9f7fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:cd:4e:10:de:99:2c:36:3f:ac:01:94:3d:
                    c7:bc:c6:4e:35:52:25:0a:7d:91:de:9a:d0:f3:41:
                    32:06:d7:85:29:d8:c0:8e:db:4f:cf:ae:ed:f0:3d:
                    31:b6:b2:29:27:6e:0e:c5:42:c2:0c:3d:a4:23:49:
                    9f:a9:81:15:3c:95:85:5b:60:bf:27:7f:58:8a:de:
                    2c:55:e3:b6:4f:0e:97:b3:20:67:df:f9:ee:16:a3:
                    4b:88:90:5f:2e:d6:02:5e:29:24:a4:ec:06:ba:10:
                    14:a0:df:a4:e8:87:c4:09:55:dc:17:2b:31:1f:e5:
                    76:c4:e8:33:2b:c1:19:bf:77:63:fd:2d:b2:77:16:
                    f4:5a:7c:19:f0:1a:f2:60:f0:05:9e:04:14:a7:ac:
                    c7:02:9d:4f:ac:eb:ce:e0:a6:09:27:c7:1a:e9:7f:
                    1f:76:00:5e:5c:d2:06:5c:0d:26:d9:45:21:1d:f4:
                    bc:a1:5b:6a:e1:43:fc:51:0d:9a:84:35:db:7f:13:
                    f0:89:10:0d:13:cd:a8:45:e1:bb:cc:cc:bc:c2:f1:
                    56:cc:61:0f:f6:30:5f:38:ca:82:99:ca:2d:de:da:
                    ab:3e:f8:04:3e:00:64:45:ea:80:60:77:f4:86:3b:
                    8e:c3:fe:a2:0c:8d:04:51:5f:03:89:e2:28:f4:9f:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BB:F4:04:D0:F7:4D:76:A1:22:7B:98:C4:C5:E1:8F:3F:9F:7F:A6
            X509v3 Authority Key Identifier:
                keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/_bv0BND3TXahInuYxMXhjz-ff6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.48.0/22
                IPv6:
                  2a0b:d340::/29

    Signature Algorithm: sha256WithRSAEncryption
         e2:27:62:21:c9:81:80:98:61:00:02:22:94:a8:71:39:e3:30:
         ed:7b:38:8e:c3:96:a8:ea:bf:71:4c:c3:41:58:75:cb:9a:75:
         6f:c7:f4:d1:70:a2:7e:8d:e8:46:a0:8e:84:3e:7f:02:e5:45:
         1e:41:60:43:b4:63:3e:f7:cb:80:ff:fd:c3:45:b5:6a:ea:4c:
         f9:ea:f8:a9:d5:05:ea:f8:31:8b:f5:d5:53:f3:bd:29:54:13:
         48:b3:36:a8:89:ad:24:ab:bb:11:28:e5:ea:0e:c1:c6:8f:2f:
         d5:d9:e1:9c:64:ad:19:5e:0c:8c:f0:5b:33:74:4e:76:6c:0a:
         e2:98:ec:d5:bf:9e:8b:ce:09:00:7d:17:87:fa:c3:b7:6d:41:
         0b:6f:f9:f4:d7:13:3c:1c:6f:e4:a2:bd:84:12:f0:e0:c3:30:
         05:32:e5:e6:0b:68:18:e0:ae:29:48:96:e4:14:53:dd:84:e0:
         3d:0c:de:ba:cd:cd:09:cd:84:bb:0f:8a:31:92:d4:20:26:5d:
         47:e4:13:48:d6:93:cb:ec:e2:c7:cf:20:50:76:e8:ef:8b:f1:
         29:7f:34:34:3d:fd:46:df:27:9e:0a:4c:5b:c8:df:54:8e:e2:
         8b:e3:75:0d:93:c8:ed:44:97:7f:1a:1a:19:0e:df:84:99:36:
         47:81:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----