Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/346Gck6ryxO8W8WoNnRxCgMD3JA.roa
File:                     346Gck6ryxO8W8WoNnRxCgMD3JA.roa (raw, json)
Hash identifier:          uZxlRkJjiT2EKRyDcQEp2aeMitcmDEq1b7MAD49tGsM=
Subject key identifier:   DF:8E:86:72:4E:AB:CB:13:BC:5B:C5:A8:36:74:71:0A:03:03:DC:90
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       03E7EB68
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/346Gck6ryxO8W8WoNnRxCgMD3JA.roa
Signing time:             Sat 01 Jan 2022 13:04:12 +0000
ROA not before:           Sat 01 Jan 2022 13:04:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209087
IP address blocks:        185.227.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65530728 (0x3e7eb68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 13:04:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df8e86724eabcb13bc5bc5a83674710a0303dc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:53:6b:b3:d3:0d:f1:26:b4:8b:1f:39:3e:
                    db:ea:d4:aa:f6:38:3f:17:8f:b0:9c:3d:13:e7:6c:
                    4b:9e:5d:0f:2e:67:46:67:37:ff:9c:93:4e:e6:3d:
                    af:0f:a0:a9:80:c6:ec:6c:48:b0:f8:c4:b6:f1:78:
                    6c:a7:7e:dd:e2:c7:b7:f1:a5:37:e4:2c:4f:f7:8c:
                    f9:70:b9:8e:d1:8a:4c:37:8c:53:b2:36:26:86:a6:
                    30:7b:cc:fb:2c:a6:bb:50:20:e4:8c:f5:4b:2a:f1:
                    26:f6:44:73:99:f7:b5:62:df:d3:e4:1e:6f:85:58:
                    8b:1e:1e:47:c2:8e:1a:3b:3f:cf:60:58:c7:de:d1:
                    67:fc:70:84:e0:27:7a:83:e0:3e:6d:d0:c4:13:e0:
                    1e:f4:22:bb:08:55:c7:06:04:56:31:70:04:44:4b:
                    12:c8:1c:6d:a4:0c:36:c2:c4:3e:1e:c1:5b:71:d7:
                    e0:77:a9:fd:6d:ac:5f:9d:82:bf:ec:af:36:c0:4c:
                    6c:41:39:18:36:c3:13:11:79:62:bd:e8:3b:05:7e:
                    f0:0f:d3:29:5d:78:0e:c5:f1:63:bb:6b:70:cf:be:
                    ef:4e:5e:1a:8d:68:50:d5:01:2b:c5:6e:f2:cf:2d:
                    7c:89:01:ac:4a:4c:76:69:98:d1:27:73:8d:5c:3a:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8E:86:72:4E:AB:CB:13:BC:5B:C5:A8:36:74:71:0A:03:03:DC:90
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/346Gck6ryxO8W8WoNnRxCgMD3JA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:d8:c4:14:34:b6:81:4f:2a:31:da:fb:c2:85:91:bc:33:
         43:86:6e:af:79:9c:95:45:ef:5e:cf:b8:52:26:eb:47:78:8b:
         97:93:dc:a1:ea:bd:45:c1:28:86:ed:76:64:4d:f1:f5:d1:06:
         9b:85:af:a4:84:71:e1:ec:83:5d:0d:78:66:11:3b:29:27:24:
         36:3a:8b:b0:33:5a:5e:0d:44:5f:9b:0e:90:c3:8a:0b:43:d6:
         d9:bb:05:93:39:50:0d:b0:4f:81:b9:ab:21:db:a6:64:7d:a6:
         15:16:39:99:76:e8:71:a9:ed:84:73:6e:11:c3:d0:09:74:48:
         0d:63:54:31:f5:7c:d7:dc:b5:5b:66:09:c6:4b:d9:60:79:46:
         d1:4f:fa:19:a2:60:32:de:f7:5d:09:c7:fa:f0:d8:f6:8f:b6:
         3b:46:30:78:1e:40:db:5b:13:76:ac:3a:e9:76:fa:b0:d6:a0:
         f3:f5:44:58:7b:37:f5:46:48:4e:ea:60:03:9b:ab:24:2d:a3:
         5d:a5:51:4d:f4:30:75:71:9c:46:ae:48:67:f2:f5:8f:5e:12:
         e3:80:e6:53:14:47:73:9a:ed:e1:8a:56:2b:f2:20:23:30:d0:
         82:76:0e:87:a6:d5:02:2e:d3:3f:14:5d:61:63:7d:50:89:1d:
         f5:b6:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----