Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Pl6w6SEe_N8NBddtJZbopVUzMis.roa
File:                     Pl6w6SEe_N8NBddtJZbopVUzMis.roa (raw, json)
Hash identifier:          afrQHO4vEwXIvOxTu4cFDlngfo5JAYJ6vC4jZr6p8wI=
Subject key identifier:   3E:5E:B0:E9:21:1E:FC:DF:0D:05:D7:6D:25:96:E8:A5:55:33:32:2B
Certificate issuer:       /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial:       0B8C898C
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Pl6w6SEe_N8NBddtJZbopVUzMis.roa
Signing time:             Sat 01 Jan 2022 08:56:18 +0000
ROA not before:           Sat 01 Jan 2022 08:56:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3339
IP address blocks:        213.181.68.0/23 maxlen: 23
                          213.181.66.0/23 maxlen: 23
                          89.29.186.0/23 maxlen: 23
                          213.181.82.0/23 maxlen: 23
                          89.29.188.0/23 maxlen: 23
                          89.29.212.0/22 maxlen: 22
                          89.29.208.0/22 maxlen: 22
                          89.29.216.0/22 maxlen: 22
                          89.29.220.0/22 maxlen: 22
                          185.64.241.0/24 maxlen: 24
                          176.57.102.0/23 maxlen: 23
                          176.57.100.0/23 maxlen: 23
                          213.181.64.0/24 maxlen: 24
                          89.29.230.0/24 maxlen: 24
                          89.29.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193759628 (0xb8c898c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
        Validity
            Not Before: Jan  1 08:56:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e5eb0e9211efcdf0d05d76d2596e8a55533322b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:4e:71:b1:66:5b:81:fc:e0:d8:c1:bc:ca:
                    93:a7:6f:67:68:3d:36:c2:17:c1:f7:f5:94:2e:2b:
                    89:55:f4:30:05:41:44:bd:52:6b:d0:3c:69:83:5a:
                    1d:cf:bf:77:9c:ef:89:3d:9c:ea:ee:4d:0b:e2:88:
                    97:45:7d:c0:d0:69:d3:80:0a:90:0f:9e:c5:77:32:
                    c9:28:1a:b3:04:5e:13:f4:54:e9:a4:0a:85:9a:d7:
                    1e:8a:4a:eb:36:84:81:65:3c:7a:eb:a1:cf:e5:03:
                    f0:94:2c:54:54:05:75:1d:ac:9d:0d:9f:bf:97:08:
                    d0:a6:fd:0f:15:03:27:e1:d9:3f:56:52:4e:17:eb:
                    a5:e3:28:ae:53:3d:de:a7:9f:af:7b:b9:09:18:5d:
                    a5:1b:3e:bc:5d:8b:b6:bc:5a:02:c2:1f:a4:37:d8:
                    c1:1f:49:c6:6c:de:8c:e1:71:a8:f8:4f:30:64:d8:
                    8d:ee:4d:2b:90:5d:55:3d:42:2d:4d:a5:b8:36:f0:
                    02:27:58:5b:76:3e:a0:f8:57:79:46:15:03:c3:7d:
                    e9:1a:01:a4:ae:45:92:fb:dc:49:93:ac:09:6a:f5:
                    73:b8:6e:ab:f4:2b:ac:cf:57:51:ea:84:c3:89:7b:
                    2e:fa:9e:05:cb:e3:5d:69:d1:33:3c:8a:ed:fa:ab:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5E:B0:E9:21:1E:FC:DF:0D:05:D7:6D:25:96:E8:A5:55:33:32:2B
            X509v3 Authority Key Identifier:
                keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Pl6w6SEe_N8NBddtJZbopVUzMis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.29.186.0-89.29.189.255
                  89.29.208.0/20
                  89.29.230.0/24
                  89.29.240.0/22
                  176.57.100.0/22
                  185.64.241.0/24
                  213.181.64.0/24
                  213.181.66.0-213.181.69.255
                  213.181.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:95:80:c4:33:7b:4b:4d:f5:34:a5:10:72:f9:18:e7:81:
         86:17:36:a3:bd:73:e5:b0:98:53:0c:65:bf:e7:b1:35:46:6a:
         81:12:03:24:00:d3:9e:4c:ea:b6:6c:02:b6:3c:b8:7c:e1:fa:
         41:bd:56:20:e1:82:10:c9:48:bc:aa:e2:ce:6b:ea:72:39:67:
         69:d1:ca:16:41:81:fa:d6:1c:29:34:52:83:0d:ba:81:64:4e:
         37:cb:78:ca:72:e9:75:44:1f:62:39:d9:30:56:78:40:72:a9:
         56:99:e8:c3:59:8a:5f:5d:53:80:bb:e4:03:d2:5d:07:22:a9:
         48:a8:04:dd:49:63:e3:24:cf:a7:8d:ef:5f:c6:59:7b:6f:b4:
         c0:5e:ac:fc:68:c7:5d:1a:e5:45:db:15:8e:91:9e:4e:e6:f5:
         e2:fa:1e:75:f0:43:b5:7d:74:63:b6:0b:44:75:64:0f:7f:8d:
         f8:ec:70:85:2d:78:eb:c0:52:47:29:4f:9d:21:62:87:f3:9a:
         0e:6d:2d:f2:77:55:19:78:db:e0:06:5c:50:c5:b5:b3:a9:8c:
         75:66:0b:db:e6:8b:ce:63:4d:53:a8:a7:47:46:d3:d9:3b:23:
         ae:3b:c7:98:30:07:cb:06:a4:5d:40:03:c6:c9:de:13:ca:71:
         c8:2f:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----