Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7l6ANx8UbpF21A7yJ3D1FbR-2OM.roa
File:                     7l6ANx8UbpF21A7yJ3D1FbR-2OM.roa (raw, json)
Hash identifier:          MjuE73tsja8N6nhMn6MmG0zAvrWG2WGCfmOAGyazw5E=
Subject key identifier:   EE:5E:80:37:1F:14:6E:91:76:D4:0E:F2:27:70:F5:15:B4:7E:D8:E3
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       280F3C73
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7l6ANx8UbpF21A7yJ3D1FbR-2OM.roa
Signing time:             Sat 01 Jan 2022 16:09:30 +0000
ROA not before:           Sat 01 Jan 2022 16:09:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62165
IP address blocks:        95.46.158.0/24 maxlen: 24
                          2a02:128:5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672087155 (0x280f3c73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee5e80371f146e9176d40ef22770f515b47ed8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:8d:92:87:7d:7d:09:a5:4e:f7:18:0f:51:
                    3c:c2:5f:b7:e1:b5:e5:14:35:50:61:c3:70:da:cd:
                    fc:2d:95:39:56:ac:54:e7:59:5f:3a:d9:86:d7:65:
                    46:8e:bd:0a:3e:0d:af:53:57:02:b2:f5:63:20:cf:
                    17:45:99:5a:37:a5:4c:ba:5d:76:69:a1:68:fb:f9:
                    d9:54:3d:d6:95:04:94:1c:47:6c:b1:01:1b:0a:ea:
                    2c:33:46:cb:c1:a3:63:b0:26:b0:ef:05:d7:60:4b:
                    8e:a6:0b:81:78:d2:5d:fb:35:5e:4d:73:77:21:70:
                    81:82:56:f5:46:44:6e:e6:5a:80:49:4b:25:e5:6c:
                    60:99:d9:97:5a:60:01:75:a4:0f:f3:89:fb:ab:6b:
                    57:13:0f:af:e0:ba:29:a1:f0:63:43:cb:1e:c6:e0:
                    82:3c:6f:17:0a:20:b0:2f:6f:63:4c:a8:2f:2e:28:
                    3a:bb:4e:91:cd:12:f3:5f:a0:98:4c:20:35:ba:1c:
                    be:f3:d1:c2:d0:bf:4a:e6:13:82:81:83:3b:72:fe:
                    36:aa:96:71:9a:b0:f7:20:5a:5b:10:89:9d:54:14:
                    0e:c2:c6:01:d3:dd:6f:cb:ec:87:7f:fe:44:30:ed:
                    b7:26:8d:5f:d2:0c:f1:53:0e:0b:8b:05:07:aa:94:
                    74:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5E:80:37:1F:14:6E:91:76:D4:0E:F2:27:70:F5:15:B4:7E:D8:E3
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7l6ANx8UbpF21A7yJ3D1FbR-2OM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.46.158.0/24
                IPv6:
                  2a02:128:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:13:61:5d:bd:64:95:e2:c6:a6:13:80:54:1b:39:1e:09:
         e2:c5:f1:04:ea:2e:73:d9:d8:d3:92:26:57:cc:51:45:bd:5f:
         13:39:af:a3:79:0b:74:65:8b:7d:f2:bf:f7:cd:14:47:a3:e2:
         d9:13:41:43:8c:aa:db:bb:d9:55:79:a6:37:0d:96:e9:01:4d:
         5c:5e:a3:b5:38:e8:d2:10:5e:2e:f0:52:7c:68:21:bc:bc:fe:
         f0:19:4d:bc:c6:c6:97:d4:f9:19:da:00:04:27:a2:27:59:07:
         e7:60:3e:cf:69:aa:c8:b0:a9:59:c4:d5:a7:b7:47:f4:ea:f1:
         5d:3c:53:fd:e3:65:31:d5:12:b8:e8:fd:5d:0b:42:bd:43:c2:
         b6:2b:1d:ba:dc:2b:c8:8a:e9:89:de:ad:44:3b:dd:f5:98:de:
         37:96:a7:1e:41:14:ad:6d:de:35:4f:19:00:c1:74:59:ef:b4:
         ae:92:1e:fc:2d:16:5e:91:f0:31:75:82:95:ba:68:36:a7:50:
         de:58:b4:e6:75:80:58:73:04:71:a1:b7:b6:77:f5:4f:59:fc:
         9c:22:7c:c0:68:8d:67:c0:8f:e8:6c:d9:29:90:db:54:4e:ae:
         cd:94:15:e4:11:5b:08:a3:05:34:20:5b:dd:12:d3:3f:01:7e:
         af:53:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----