Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HFaNrL8qVjjuLtqhoQ2EJGc_06E.roa
File:                     HFaNrL8qVjjuLtqhoQ2EJGc_06E.roa (raw, json)
Hash identifier:          P7kmr4mIGH68//E0oL9WYOxyVyoVi9fIFRxkxifC7JU=
Subject key identifier:   1C:56:8D:AC:BF:2A:56:38:EE:2E:DA:A1:A1:0D:84:24:67:3F:D3:A1
Certificate issuer:       /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial:       0426AEB9
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HFaNrL8qVjjuLtqhoQ2EJGc_06E.roa
Signing time:             Sat 01 Jan 2022 12:06:24 +0000
ROA not before:           Sat 01 Jan 2022 12:06:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61209
IP address blocks:        92.114.20.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69643961 (0x426aeb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
        Validity
            Not Before: Jan  1 12:06:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c568dacbf2a5638ee2edaa1a10d8424673fd3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:f3:29:95:8a:41:57:1c:e1:86:14:77:66:
                    67:dd:89:d7:83:bc:92:14:a5:b1:1e:b9:43:25:2c:
                    4d:25:44:4a:aa:af:3e:65:e9:a7:81:3b:82:3c:07:
                    95:4e:7e:4a:34:bb:48:ec:ab:f7:82:b8:fd:72:73:
                    e7:8a:b7:3a:90:6b:64:81:1f:c4:45:3c:72:82:de:
                    f6:40:f4:c6:0e:10:e6:27:53:28:e7:31:ae:c1:c7:
                    dd:97:bb:5a:19:53:57:2e:80:68:79:ea:1e:3c:56:
                    10:e2:9f:85:6f:3d:15:58:21:78:72:2e:39:71:f0:
                    c5:4d:94:0c:a0:39:d7:2e:a0:7e:aa:70:c2:1b:da:
                    12:52:a5:8c:85:a8:a7:02:74:7b:0d:a5:71:02:aa:
                    e0:5c:72:77:de:cd:80:e4:fd:13:c6:0e:da:79:d1:
                    fa:92:d4:26:40:ff:c9:82:96:18:d5:fc:38:29:23:
                    0b:d0:72:31:7e:a8:01:5d:8c:bc:43:9a:66:ed:17:
                    37:2f:29:c1:e5:06:c4:fb:e7:7b:44:3f:14:7b:5e:
                    0f:32:fa:9d:61:16:98:e1:f4:5a:02:89:cc:4c:ca:
                    ca:a0:da:d8:38:9e:1d:d0:83:ed:68:f0:04:dd:8f:
                    a7:75:3a:c2:cc:73:a6:04:fd:33:17:89:b9:78:76:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:8D:AC:BF:2A:56:38:EE:2E:DA:A1:A1:0D:84:24:67:3F:D3:A1
            X509v3 Authority Key Identifier:
                keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HFaNrL8qVjjuLtqhoQ2EJGc_06E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:5c:be:56:22:60:5b:e2:6e:79:cb:40:4b:6d:4c:e2:cc:
         32:7c:91:32:e8:ac:92:9c:87:0a:21:c5:07:ee:02:bf:e7:e8:
         af:3a:1d:0c:12:ab:b6:d1:32:dc:2e:df:ff:dc:3e:93:ec:6a:
         1d:b7:2d:3b:78:68:d7:52:7b:b8:dc:66:aa:64:3b:61:57:4d:
         62:b2:26:35:6e:21:0b:20:0a:02:0a:b3:54:c8:76:dd:28:df:
         59:f6:63:2b:d5:85:cc:7c:85:7e:10:ae:0d:fa:00:dd:21:9d:
         57:be:0e:20:e6:ad:dd:2a:b4:4d:ff:45:a1:b0:7f:d2:7c:94:
         b5:c1:92:da:f1:41:cd:4b:a1:72:11:30:c3:66:e8:fa:8c:51:
         2d:65:94:13:2c:56:fb:74:11:12:ab:01:d3:7c:26:f3:9e:7a:
         3e:c6:b7:d9:bf:23:a9:1f:6a:fd:98:f0:0c:a1:c1:0c:fc:50:
         f6:a1:1b:f9:39:41:dd:95:2e:de:fa:fb:da:78:2f:0c:25:28:
         91:93:6c:4c:3d:91:4c:0e:fe:ba:85:ef:bd:92:0e:07:fa:18:
         b7:3a:94:82:9a:ae:da:6a:df:7f:6d:a5:69:71:b4:44:52:ad:
         be:a9:da:1f:fa:61:d9:32:2c:60:52:a1:f3:fc:86:ca:e1:30:
         66:c1:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----