Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/MTuBmJNbYES_OUB3KywjYjPcQOE.roa
File:                     MTuBmJNbYES_OUB3KywjYjPcQOE.roa (raw, json)
Hash identifier:          EvcyDyvvVEoB871fPhksjSilYLf5+1se/pGhAACUwxY=
Subject key identifier:   31:3B:81:98:93:5B:60:44:BF:39:40:77:2B:2C:23:62:33:DC:40:E1
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       028F6A42
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/MTuBmJNbYES_OUB3KywjYjPcQOE.roa
Signing time:             Wed 12 Jan 2022 10:32:15 +0000
ROA not before:           Wed 12 Jan 2022 10:32:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211941
IP address blocks:        185.197.236.0/24 maxlen: 24
                          2a0a:7fc0:4::/46 maxlen: 46

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42953282 (0x28f6a42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Jan 12 10:32:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=313b8198935b6044bf3940772b2c236233dc40e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:e8:08:55:f4:a7:d3:28:4a:ec:dc:3c:b9:
                    fc:7c:f2:17:a3:50:b4:03:ec:d5:b3:f6:ad:55:d1:
                    00:f8:86:01:f5:34:2d:2e:ac:3f:9b:0d:c4:7c:26:
                    df:c4:09:d7:86:a0:94:37:d9:77:39:51:c7:41:0a:
                    be:ed:da:68:21:cb:34:52:ee:ae:60:4a:19:c6:e4:
                    dc:2c:f2:a3:30:15:a1:5f:40:7d:61:e2:a4:19:22:
                    17:02:4a:e8:de:3d:74:b2:db:26:62:62:b0:c5:21:
                    04:a1:92:1a:1d:5f:5a:a3:fa:a6:3f:86:39:cc:1d:
                    73:04:07:29:6e:8b:6c:91:e4:8b:72:cc:6d:3e:4e:
                    ef:c2:47:bb:07:f5:21:a8:8b:27:d9:03:d1:3e:57:
                    65:b7:7d:5e:c2:4d:9d:3f:e2:3f:89:7a:31:8b:f1:
                    ae:ad:07:29:b5:b6:a4:8c:b0:ac:b8:31:f0:23:b1:
                    a7:a3:fb:98:87:33:80:78:9b:9f:d7:ec:4e:fa:b9:
                    95:2c:fe:04:93:b3:9d:24:61:c2:7d:64:25:63:c0:
                    02:1a:69:63:57:8a:69:8a:47:a6:87:47:98:a8:68:
                    82:01:40:8d:f9:d8:ef:08:02:95:73:61:30:91:eb:
                    fa:17:86:7a:06:0a:03:67:a4:0f:b5:65:b2:1a:8d:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3B:81:98:93:5B:60:44:BF:39:40:77:2B:2C:23:62:33:DC:40:E1
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/MTuBmJNbYES_OUB3KywjYjPcQOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.236.0/24
                IPv6:
                  2a0a:7fc0:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:9f:07:a0:1c:59:45:85:d4:a4:e8:b6:7b:ca:a2:ff:45:
         b8:25:1b:97:08:be:fd:5d:70:7f:f6:04:8e:d5:f5:d4:1c:e8:
         76:12:a6:08:bb:e3:58:c8:6a:54:bc:6f:5d:84:70:74:6b:63:
         97:24:c9:cc:f6:2c:87:d1:92:5d:37:2d:49:e7:45:66:fc:28:
         5d:4a:1e:aa:bc:fa:d7:75:b5:42:33:00:2b:84:87:77:5c:a5:
         b9:d5:3c:d8:b5:d4:1d:58:84:3e:43:6b:55:fb:6a:4a:df:e7:
         d4:d7:e5:47:c5:ed:33:6b:29:6d:60:4c:b7:ad:52:eb:42:7d:
         1d:5e:34:c4:8a:82:64:52:1f:3f:77:6b:b8:05:85:a1:78:8d:
         03:8f:1f:84:b1:4e:2b:d2:1c:2e:84:cb:c7:ba:6f:df:1e:76:
         f7:8e:0e:bf:e9:3d:05:63:1c:57:1f:22:9c:14:1b:90:11:5e:
         c1:4d:38:2c:8b:62:c6:ab:e9:6b:b7:c1:f6:11:2a:3c:dd:0b:
         86:33:bb:73:cc:e2:2c:6d:34:0c:29:65:6e:4d:94:a0:02:f1:
         54:f4:78:a8:12:1e:57:47:a9:eb:d2:42:f4:97:7a:f4:b3:da:
         37:73:b8:81:00:70:bc:bc:4b:7d:4a:fb:e3:de:29:b6:e2:92:
         fb:8d:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----