Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/i6DJdVHrkPhoqP89KU2OGd8KkNE.roa
File:                     i6DJdVHrkPhoqP89KU2OGd8KkNE.roa (raw, json)
Hash identifier:          R748n3dpJWbcC+P9SMhcN/YpaiS+stpVbq6qH+ISo0Y=
Subject key identifier:   8B:A0:C9:75:51:EB:90:F8:68:A8:FF:3D:29:4D:8E:19:DF:0A:90:D1
Certificate issuer:       /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial:       0BA92533
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/i6DJdVHrkPhoqP89KU2OGd8KkNE.roa
Signing time:             Wed 16 Feb 2022 08:53:46 +0000
ROA not before:           Wed 16 Feb 2022 08:53:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6453
IP address blocks:        185.150.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195634483 (0xba92533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
        Validity
            Not Before: Feb 16 08:53:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ba0c97551eb90f868a8ff3d294d8e19df0a90d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a8:90:2f:90:ea:fa:a5:66:e7:ec:91:9c:6f:
                    74:ae:52:25:03:86:53:fc:6c:73:2c:d6:54:80:b5:
                    8d:39:e6:96:f7:60:68:98:88:f8:98:30:63:d8:a5:
                    1a:b3:f1:d5:84:8d:91:64:ab:23:99:5a:4b:9a:1a:
                    4b:5f:9c:0d:02:9b:02:c1:a1:4d:99:45:d3:6b:bd:
                    3e:14:e9:a9:44:33:08:eb:dc:38:76:92:87:a9:b0:
                    66:fd:24:4f:4b:2a:45:bf:8f:9c:28:f9:87:e1:95:
                    61:a5:f7:1c:5c:80:5c:d3:c3:48:76:70:d6:3e:d5:
                    93:b2:3c:ee:5b:e9:8b:14:ed:f7:c1:40:83:ab:6e:
                    4b:2e:b7:a2:69:ba:b6:84:a0:44:b7:10:e4:27:33:
                    bb:a6:6a:af:69:a9:38:4d:8e:dd:39:1b:85:3e:07:
                    1b:05:f7:17:d3:8a:08:77:5d:d1:a8:53:82:07:ad:
                    cd:1c:f3:22:11:f9:8f:d6:c0:dc:11:47:4a:9d:ed:
                    44:47:28:ee:ef:d8:7b:65:8a:3e:11:98:44:25:e3:
                    12:22:df:04:b2:e9:c9:15:0b:62:f0:f4:ff:2e:94:
                    02:d7:12:4d:8b:47:39:52:d8:84:87:2c:fb:d6:fc:
                    93:24:92:80:43:b3:a0:73:e9:a4:3c:db:43:65:b2:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:C9:75:51:EB:90:F8:68:A8:FF:3D:29:4D:8E:19:DF:0A:90:D1
            X509v3 Authority Key Identifier:
                keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/i6DJdVHrkPhoqP89KU2OGd8KkNE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:30:a7:ec:50:61:68:a9:f8:ea:68:80:88:b0:bb:df:1c:48:
         94:47:65:4f:e2:68:ba:da:a1:31:b2:94:7a:dc:4b:3d:b4:f8:
         1e:79:d8:92:7a:f6:85:44:3d:1e:c9:e2:4c:06:78:9a:01:f5:
         60:b4:d6:b3:0b:66:4c:68:52:7b:b0:54:de:ee:fc:d0:2a:e6:
         90:93:9d:61:32:e5:50:98:e8:4e:e3:37:95:1a:5e:99:9b:42:
         a3:ac:46:f9:91:20:b6:36:48:28:be:79:74:5c:f2:6c:4f:19:
         84:40:bc:8b:c7:52:68:9b:db:62:ff:ab:44:2c:ad:60:a0:f9:
         9c:02:7b:54:9e:4c:d1:5f:93:26:0b:9f:09:08:69:90:a3:ca:
         4a:fb:59:08:67:ea:6f:f5:23:0d:a8:28:7f:1f:65:ff:00:94:
         1a:49:3d:a0:50:d5:13:5c:f6:f6:64:67:b9:28:7c:81:1b:a6:
         44:f6:ee:48:5a:8b:b8:7d:b8:29:ea:fd:02:56:4b:aa:21:e5:
         cd:13:32:c9:51:d7:26:3a:59:d9:38:05:71:16:f6:62:79:07:
         cd:fb:29:58:df:e7:ad:f1:e9:60:27:89:2c:c2:e9:ce:99:af:
         1a:94:9c:6b:da:d9:5a:19:02:de:9d:01:a7:d2:4f:07:a8:8d:
         ec:39:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----