Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa
File:                     wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa (raw, json)
Hash identifier:          ZwPt+QGyhenT0g3Znfri905nHUU0kV0sCZFsDEf4K5E=
Subject key identifier:   C1:B6:38:72:F5:C9:17:EF:F4:3B:E2:E6:B6:4F:0B:92:FA:32:F1:68
Certificate issuer:       /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial:       0F0ED4F5
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa
Signing time:             Tue 08 Feb 2022 09:18:59 +0000
ROA not before:           Tue 08 Feb 2022 09:18:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38917
IP address blocks:        185.24.112.0/22 maxlen: 24
                          109.111.64.0/19 maxlen: 24
                          87.255.224.0/20 maxlen: 24
                          87.255.224.0/19 maxlen: 24
                          87.255.240.0/20 maxlen: 24
                          87.255.252.0/24 maxlen: 24
                          217.175.32.0/20 maxlen: 24
                          87.255.248.0/22 maxlen: 24
                          176.110.208.0/21 maxlen: 24
                          185.86.112.0/20 maxlen: 24
                          2a04:2cc0::/32 maxlen: 32
                          2a04:2cc3::/32 maxlen: 32
                          2a04:2cc5::/32 maxlen: 32
                          2a04:2cc6::/32 maxlen: 32
                          2a04:2cc2::/32 maxlen: 32
                          2a04:2cc1::/32 maxlen: 32
                          2a04:2cc7::/32 maxlen: 32
                          2a04:2cc4::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252630261 (0xf0ed4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
        Validity
            Not Before: Feb  8 09:18:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1b63872f5c917eff43be2e6b64f0b92fa32f168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:5d:f9:42:e7:1e:bd:c2:5e:d0:29:fe:b6:
                    24:c0:a8:cd:93:ba:b0:f9:b0:ea:38:d8:04:8b:a8:
                    31:e2:a3:57:e2:3a:48:71:89:44:db:00:fc:9a:d5:
                    3e:9f:6b:f5:e0:6d:4b:5c:0e:9b:f4:84:bc:e4:30:
                    5a:fb:e5:54:15:67:b5:9f:61:9a:df:c4:21:a9:79:
                    b5:0a:2f:e7:2c:ca:8e:ac:78:34:38:7d:7c:74:ff:
                    c0:c8:b9:2d:2b:1a:53:65:76:b2:ac:fe:ad:34:85:
                    27:2c:10:5b:98:5d:96:1f:13:45:02:1f:c9:77:0b:
                    8b:9d:f9:a3:e7:f8:25:03:6b:5a:47:c5:f7:72:df:
                    40:c0:f3:ce:99:34:b0:57:c4:a0:0d:15:e4:06:12:
                    6d:04:db:9c:29:33:71:ec:e6:8f:91:38:6c:53:9b:
                    94:b8:f4:a6:88:f0:bc:32:64:fc:85:0b:1d:78:c5:
                    cf:96:d8:2f:d7:71:ba:cd:5a:fd:ce:f6:bd:c7:aa:
                    fa:5e:c8:6e:40:c2:1d:20:d8:ab:04:aa:7f:6c:73:
                    b2:42:66:43:30:c1:d2:d1:2b:04:8c:c9:5f:39:8a:
                    71:99:a5:95:a9:37:43:a6:76:62:a0:97:79:a2:3b:
                    1b:95:9b:2c:1e:84:10:4f:9c:08:5f:48:13:03:1d:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B6:38:72:F5:C9:17:EF:F4:3B:E2:E6:B6:4F:0B:92:FA:32:F1:68
            X509v3 Authority Key Identifier:
                keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.255.224.0/19
                  109.111.64.0/19
                  176.110.208.0/21
                  185.24.112.0/22
                  185.86.112.0/20
                  217.175.32.0/20
                IPv6:
                  2a04:2cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         c1:60:89:b9:0b:7d:72:63:5c:c3:bb:f3:5c:25:63:80:a8:46:
         a0:80:0a:7e:44:6b:3b:59:96:d9:5b:60:32:34:f1:20:03:ee:
         02:d6:53:7f:a9:2d:8d:f1:6e:50:46:ac:aa:1e:4c:84:21:9f:
         65:b2:b3:ea:83:75:b3:41:d7:b1:69:bd:f1:99:d8:38:b4:49:
         f3:a4:7d:54:6e:6e:e2:61:32:57:99:a1:da:34:70:f7:9a:4f:
         1f:ac:eb:26:20:6c:7d:52:e6:33:1c:eb:14:8b:de:40:8a:8a:
         68:d5:0d:73:e5:9c:0d:97:ea:a0:d2:18:2a:89:23:4a:2c:93:
         b2:d5:dd:17:56:a2:b7:1a:8b:e2:51:75:33:81:09:9f:bc:2d:
         ea:79:95:85:56:70:5d:99:52:39:99:3f:00:b5:f3:e8:7d:6b:
         4a:02:8f:f0:31:6a:ec:36:e9:b7:18:2a:4b:42:bc:09:36:4a:
         4f:0c:67:0c:58:db:27:f1:19:76:29:3e:be:2f:cc:54:1e:66:
         49:dd:da:78:c7:6a:9d:73:01:4d:0f:5e:af:29:f9:22:c6:26:
         03:0c:af:ca:b6:0f:57:bd:61:79:1b:73:92:3f:00:d5:3f:61:
         20:0a:cd:76:4b:90:10:5a:c8:61:03:fb:e8:1a:24:ac:8e:4f:
         c3:b4:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----