Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/rPxDdx_K4zLgoTQ_LMo2Tdp4JnE.roa
File:                     rPxDdx_K4zLgoTQ_LMo2Tdp4JnE.roa (raw, json)
Hash identifier:          vHqD69jgzw5RB9LKE+r/zTZIzosfnQ0+Sj0US1YDxiE=
Subject key identifier:   AC:FC:43:77:1F:CA:E3:32:E0:A1:34:3F:2C:CA:36:4D:DA:78:26:71
Certificate issuer:       /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial:       0F8594CA
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/rPxDdx_K4zLgoTQ_LMo2Tdp4JnE.roa
Signing time:             Sat 01 Jan 2022 06:57:26 +0000
ROA not before:           Sat 01 Jan 2022 06:57:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57075
IP address blocks:        185.104.130.0/23 maxlen: 24
                          2a06:3084::/30 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260412618 (0xf8594ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
        Validity
            Not Before: Jan  1 06:57:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=acfc43771fcae332e0a1343f2cca364dda782671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:90:7d:fc:e8:b1:1d:6f:ff:3b:fd:4c:77:
                    c3:22:52:2f:9f:4a:9c:bc:3e:4a:ce:96:43:dd:8f:
                    d1:5a:66:df:c7:9f:78:0c:ed:41:2d:b7:f8:cd:83:
                    99:a6:f1:53:e4:e6:d8:e8:a6:ed:0d:44:a3:4e:f9:
                    d8:67:b5:cf:fc:41:0b:e5:af:c0:db:83:02:41:b3:
                    53:08:78:ed:35:ff:d5:d1:e0:7d:c8:88:db:1c:dc:
                    88:61:ed:c6:4b:cf:8f:fb:d2:8d:10:36:f1:18:d4:
                    ef:88:05:fd:2e:6e:a2:f8:eb:52:2e:12:7d:f3:9a:
                    06:55:17:ef:a6:94:bf:b3:f7:c0:e9:79:b7:98:bb:
                    c0:22:58:c4:e4:cb:95:88:1b:ce:03:2e:2d:c9:2b:
                    b5:50:80:89:e8:09:ed:d4:d1:02:ea:e3:6e:df:91:
                    52:e7:4c:e9:37:d4:de:f7:1e:59:25:ad:83:c4:95:
                    13:24:5d:61:0c:f5:00:72:66:77:71:24:03:05:ad:
                    85:12:b9:8c:8d:1a:8b:14:37:7e:35:26:bb:4d:94:
                    36:fe:5d:f2:52:18:d3:63:7f:5a:ef:7f:37:55:09:
                    d5:8d:4c:ae:a5:b7:9a:1d:cb:df:a5:f5:09:c2:19:
                    25:1c:4d:a8:a1:19:aa:84:15:70:21:a3:84:2d:2c:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:43:77:1F:CA:E3:32:E0:A1:34:3F:2C:CA:36:4D:DA:78:26:71
            X509v3 Authority Key Identifier:
                keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/rPxDdx_K4zLgoTQ_LMo2Tdp4JnE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.130.0/23
                IPv6:
                  2a06:3084::/30

    Signature Algorithm: sha256WithRSAEncryption
         7d:a2:e0:1b:47:0b:44:f9:5d:fa:68:9c:9e:30:bf:a0:63:31:
         11:16:39:e4:ab:16:c3:44:1c:5d:71:14:1f:85:66:92:1d:8b:
         90:75:cf:03:60:70:22:81:2b:8b:85:7a:17:09:ce:61:e4:aa:
         eb:38:90:aa:94:e7:9a:d1:21:26:4e:88:30:47:d6:d7:e7:9f:
         08:08:ae:a6:3f:06:1f:bf:40:38:08:60:3e:37:59:8a:b7:c3:
         93:dd:98:90:34:74:d6:57:d6:49:3d:34:d1:d1:53:ec:e0:50:
         53:23:73:6d:12:14:5a:a5:9e:34:a9:44:8e:58:b9:fb:bf:13:
         49:35:43:98:d1:77:ec:3b:d9:2c:c5:7e:67:bb:0e:7b:73:be:
         12:66:5b:34:f4:82:87:82:5c:04:b8:4e:1d:fd:02:90:04:92:
         16:5d:e9:39:d1:50:b3:83:78:b4:eb:e3:b6:79:47:83:31:4e:
         7f:63:09:fa:64:71:d8:a0:d6:88:6b:57:54:af:82:b3:38:c5:
         cc:e7:91:2e:8f:b8:11:d5:d0:29:01:98:3d:d5:11:ca:3b:dd:
         f6:15:28:87:f9:a4:68:6c:53:63:90:3f:92:a6:ee:1c:df:30:
         01:31:bb:ac:75:54:d5:fe:86:f1:02:95:ae:fa:89:ec:a0:73:
         18:8e:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----