Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/dYVjIdRsmUeu1Te1-C_S20-RCi4.roa
File:                     dYVjIdRsmUeu1Te1-C_S20-RCi4.roa (raw, json)
Hash identifier:          C3Rf/9sAmmw22TkmSlANMAu7BRU54h4jbrxlmvYMz6I=
Subject key identifier:   75:85:63:21:D4:6C:99:47:AE:D5:37:B5:F8:2F:D2:DB:4F:91:0A:2E
Certificate issuer:       /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial:       05CB8973
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/dYVjIdRsmUeu1Te1-C_S20-RCi4.roa
Signing time:             Mon 09 May 2022 20:30:12 +0000
ROA not before:           Mon 09 May 2022 20:30:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        185.154.80.0/22 maxlen: 22
                          2a05:f500:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97225075 (0x5cb8973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
        Validity
            Not Before: May  9 20:30:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75856321d46c9947aed537b5f82fd2db4f910a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:b9:2a:7c:cf:f6:b5:59:56:fe:9f:d1:51:
                    4d:fe:4d:53:75:4a:ba:ad:9e:82:ee:b2:d5:47:68:
                    25:c3:30:ef:b6:f8:18:c1:fb:4a:cf:f5:7c:9c:28:
                    c5:88:44:a8:4f:80:5f:9f:e2:0a:d9:ee:14:72:6a:
                    58:c2:0e:f7:16:e6:08:56:2c:9f:5c:58:b1:a5:ff:
                    b6:27:b4:96:e9:e7:61:14:2a:8a:87:b6:d0:51:4e:
                    9b:6c:d9:6a:d6:8a:f6:5f:4a:60:eb:c2:c5:cd:1e:
                    ce:27:9f:0b:f7:80:99:de:6e:c8:c8:91:53:65:76:
                    f8:42:3b:7f:fa:c5:5c:3d:1d:2b:f8:4d:7b:b6:2d:
                    6a:34:89:13:46:9e:51:65:a1:81:29:e5:31:71:51:
                    a9:4a:8b:b4:ce:b2:73:79:42:9f:f9:78:ed:af:b3:
                    29:28:83:1b:01:ff:1f:e3:fd:46:0a:06:f3:74:94:
                    d6:e2:e6:b4:10:b9:21:73:6d:aa:84:25:71:f6:79:
                    df:0d:b3:9d:5c:00:6a:a4:75:4f:3b:68:fa:6e:c2:
                    86:37:54:79:02:6f:e8:f9:36:b2:af:65:eb:73:a3:
                    76:1e:d4:17:10:d2:d2:f8:ca:d8:4e:74:8c:40:5d:
                    6e:23:e3:b5:bc:03:9f:7c:33:86:8a:f9:e6:1b:e2:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:85:63:21:D4:6C:99:47:AE:D5:37:B5:F8:2F:D2:DB:4F:91:0A:2E
            X509v3 Authority Key Identifier:
                keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/dYVjIdRsmUeu1Te1-C_S20-RCi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.154.80.0/22
                IPv6:
                  2a05:f500:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:bd:b7:0e:9d:60:ce:65:43:1a:77:fe:ca:03:12:0f:80:65:
         38:e4:7e:3e:b8:2c:cc:be:77:cc:42:31:85:a2:b1:7f:73:5d:
         09:10:e8:d7:e8:03:21:54:6f:cf:70:ea:15:01:f0:cd:39:65:
         00:80:09:1d:cb:00:ef:1e:d4:dd:d9:d4:23:a6:e8:59:66:30:
         a2:fe:96:99:19:50:4a:10:b9:13:b3:f3:17:31:2c:ef:fc:31:
         5d:7f:85:e7:1c:3e:6a:df:c8:e3:f8:81:6c:d3:28:0a:ff:25:
         11:5f:d7:20:89:5e:8e:4e:78:52:70:c7:d8:3a:3b:99:30:57:
         e7:b0:94:cd:18:bb:9e:42:a8:87:ed:3f:a1:b3:a1:2a:49:d0:
         b9:ed:fb:a2:fc:e2:00:b3:81:8a:e3:2e:a5:ce:ea:8f:49:b0:
         b0:17:37:7e:73:1f:19:8d:e0:23:d5:bc:e8:25:a9:cb:9b:63:
         be:4d:91:c5:fe:27:40:af:22:58:1e:12:42:83:00:84:84:05:
         aa:9e:e0:6a:d2:a2:86:ab:2c:5a:f3:9a:90:d3:3f:f8:8f:96:
         fa:da:9f:7d:cc:83:f5:5d:4c:be:bc:ed:b2:9b:a6:2f:8c:4b:
         b4:95:17:b9:82:f2:8f:70:a5:ac:a0:f2:bc:e1:8d:80:bd:11:
         13:3b:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----