Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/9N0owkG11_hLEG5qrbTLxgcAwF8.roa
File:                     9N0owkG11_hLEG5qrbTLxgcAwF8.roa (raw, json)
Hash identifier:          gnniG31B3KZX8yIy83k1deV5SWGKF/d46MPD8/00ogk=
Subject key identifier:   F4:DD:28:C2:41:B5:D7:F8:4B:10:6E:6A:AD:B4:CB:C6:07:00:C0:5F
Certificate issuer:       /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial:       0E8592B2
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/9N0owkG11_hLEG5qrbTLxgcAwF8.roa
Signing time:             Fri 20 May 2022 10:09:29 +0000
ROA not before:           Fri 20 May 2022 10:09:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44794
IP address blocks:        185.235.80.0/24 maxlen: 24
                          2a0d:4d00:80::/48 maxlen: 48
                          2a0d:4d00::/48 maxlen: 48
                          2a0d:4d00:3::/48 maxlen: 48
                          2a0d:4d00:1::/48 maxlen: 48
                          2a0d:4d00:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243634866 (0xe8592b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
        Validity
            Not Before: May 20 10:09:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4dd28c241b5d7f84b106e6aadb4cbc60700c05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:53:7f:27:60:b9:e1:5d:14:ab:43:ab:8c:
                    f6:3d:04:84:ce:55:4b:d0:15:be:8d:6c:20:0b:5a:
                    6d:68:77:b8:99:5d:30:3d:c7:25:83:0c:47:cc:e5:
                    ad:7b:86:92:c7:95:aa:af:7b:34:d0:60:40:09:35:
                    e2:09:77:de:37:26:26:53:de:5e:ee:5f:7a:e3:f1:
                    ae:9c:75:cf:90:67:1a:2e:5f:5a:6f:ac:ad:77:6f:
                    8a:18:d4:17:11:6f:e1:e5:bb:d6:1f:e2:df:a5:9b:
                    a3:5d:50:6c:87:be:a9:d8:bb:bc:e7:cc:5a:53:f5:
                    3a:50:fa:d9:9d:14:fd:35:92:61:12:b1:ac:8f:d2:
                    4e:0e:81:2b:cf:42:f7:04:1b:e5:1f:c7:01:0e:58:
                    cf:92:d3:c7:15:48:a7:0c:66:20:91:bb:6f:6b:33:
                    ed:d8:d6:90:a9:6c:cb:20:c7:80:63:57:7e:9e:50:
                    88:43:df:cf:4c:f4:77:53:15:da:96:77:61:a7:a4:
                    5d:4a:48:50:c9:5b:60:79:ad:01:f2:0e:49:f6:1a:
                    61:42:db:d1:3b:41:0a:90:68:ad:4e:68:07:d6:94:
                    8e:2b:a8:88:c9:67:c4:c0:5d:98:d2:5f:7d:f7:d6:
                    8c:81:91:13:6e:c1:48:e1:81:8c:a6:5e:f2:cf:c4:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DD:28:C2:41:B5:D7:F8:4B:10:6E:6A:AD:B4:CB:C6:07:00:C0:5F
            X509v3 Authority Key Identifier:
                keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/9N0owkG11_hLEG5qrbTLxgcAwF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.80.0/24
                IPv6:
                  2a0d:4d00::/46
                  2a0d:4d00:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:62:ed:34:91:3b:90:94:1f:f6:fb:c6:78:08:b3:28:80:cb:
         d1:67:bc:a0:74:d4:ac:a8:e3:47:61:88:c3:00:56:d0:04:f1:
         15:14:fc:c0:c1:ba:d0:12:93:e1:7c:fa:42:65:b7:86:74:b2:
         0f:1c:19:77:c5:42:5a:b3:32:40:53:ca:11:86:e6:ec:9c:1d:
         29:5a:b4:9a:f8:ca:bc:48:e9:61:d5:42:b5:f4:35:4c:db:9a:
         99:3d:e7:d7:86:46:dc:83:17:a3:ca:f8:56:f1:f6:a4:15:cb:
         c8:99:41:d1:ff:98:29:cf:ea:b4:38:31:cf:5c:e3:04:48:e1:
         18:2a:f8:18:0b:d5:16:17:8c:ce:57:7e:df:24:a5:59:c7:83:
         98:96:0c:83:f9:42:c0:69:20:da:47:c3:c1:8d:89:10:26:31:
         31:56:0c:86:72:52:93:eb:22:38:69:52:e7:33:7a:78:ea:6f:
         ed:a4:ae:e3:27:d5:aa:eb:64:3e:68:f2:60:8c:73:40:8a:34:
         90:71:f9:6f:4f:0a:f2:fe:a9:a5:b3:cb:b4:73:63:7f:18:02:
         b0:c5:df:14:00:bd:e0:2d:16:c7:df:84:5c:fb:91:10:c8:ec:
         5a:4f:5a:22:93:12:3a:f3:56:eb:6a:00:f8:2c:54:2f:9d:02:
         fd:df:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----