Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/aM8rKjuUn8_h-o97jWc1FuPxzzs.roa
File:                     aM8rKjuUn8_h-o97jWc1FuPxzzs.roa (raw, json)
Hash identifier:          iOdFPOkwTEMyomAnCa+yo5Ybx2j/28vJw1eeIBXeRjk=
Subject key identifier:   68:CF:2B:2A:3B:94:9F:CF:E1:FA:8F:7B:8D:67:35:16:E3:F1:CF:3B
Certificate issuer:       /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial:       03A3BE81
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/aM8rKjuUn8_h-o97jWc1FuPxzzs.roa
Signing time:             Sat 01 Jan 2022 16:05:25 +0000
ROA not before:           Sat 01 Jan 2022 16:05:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        194.76.122.0/23 maxlen: 23
                          2001:678:e28::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61062785 (0x3a3be81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
        Validity
            Not Before: Jan  1 16:05:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=68cf2b2a3b949fcfe1fa8f7b8d673516e3f1cf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:8e:05:5d:7f:ca:d5:05:3a:c8:72:c7:49:
                    05:95:cd:dc:f3:0b:2a:eb:0d:c6:7c:91:c9:3f:d0:
                    7d:03:e1:6b:83:b8:e5:4e:60:d5:26:f8:c7:e1:48:
                    13:2c:9d:3c:44:5f:11:e7:ce:39:a6:c9:bd:c5:48:
                    b2:c8:6c:2a:c7:31:b0:d4:fc:bf:07:89:54:d0:7c:
                    cc:b7:05:6e:60:af:7b:ef:c6:91:30:cd:7d:0e:bf:
                    4c:cd:43:c0:cf:61:d4:18:0d:97:d4:1d:bf:89:f3:
                    ca:89:1e:50:bb:bf:6b:4b:96:ca:1f:3a:64:47:fc:
                    ba:75:39:03:0d:58:14:84:b6:8f:77:16:7e:72:9e:
                    7c:c0:7d:27:3e:7d:f1:60:87:dd:20:8a:11:aa:6e:
                    e7:3a:21:d6:d4:9d:dc:df:d2:a0:0e:74:f3:be:8c:
                    f2:31:a4:f9:27:cd:c3:95:43:31:f5:e3:91:9b:6b:
                    00:e3:03:7c:9f:4c:54:3a:bf:4a:84:6e:6d:84:f8:
                    d5:32:b2:63:a7:ae:bf:c9:6e:51:b8:be:5b:a2:32:
                    26:93:5f:e7:da:c8:1d:ac:6d:77:03:3c:f7:22:db:
                    6a:74:e2:44:e9:2b:4a:05:3f:3d:cc:d5:cb:4d:5a:
                    56:32:9e:ba:a6:00:91:1f:72:d5:5b:c5:ee:1d:f3:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CF:2B:2A:3B:94:9F:CF:E1:FA:8F:7B:8D:67:35:16:E3:F1:CF:3B
            X509v3 Authority Key Identifier:
                keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/aM8rKjuUn8_h-o97jWc1FuPxzzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.122.0/23
                IPv6:
                  2001:678:e28::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:81:8e:fa:45:6b:e7:89:13:60:8c:c7:3a:fa:74:a6:3d:
         f6:57:f0:ea:2f:f5:53:b7:c7:36:ca:03:23:0f:0a:bb:7a:ad:
         0a:f6:3c:0d:aa:4b:c6:ff:c8:62:6e:f8:3f:02:44:90:56:0d:
         79:8e:d6:2d:d0:5b:61:0d:6f:81:2b:99:ad:68:e2:c7:74:99:
         01:e3:10:8f:27:8e:c2:8d:5a:5b:a9:46:6e:dc:a7:63:3d:32:
         ce:d0:fe:9b:60:35:a3:9e:bb:8b:84:3e:f5:a1:75:89:4f:f8:
         42:12:45:bf:80:1a:02:3c:b0:d1:88:e9:ae:5e:14:7e:fe:a7:
         9f:b1:ec:dd:75:25:ee:7a:24:1e:04:2f:f9:01:53:24:48:8e:
         56:6d:ae:6f:70:d3:d2:62:6d:19:8d:18:20:d3:bd:e5:06:c6:
         6a:1e:41:0f:5d:97:6d:9a:8e:39:21:f4:ea:14:38:59:a7:8e:
         1e:e6:c8:1b:c9:d5:cc:09:67:6f:3e:a3:2c:cc:d3:b5:0c:3c:
         ac:dc:6a:4e:f7:93:98:3e:5c:93:90:d1:d2:f3:13:0f:c5:cf:
         c7:e9:63:c8:c8:2d:a1:ab:41:a8:a3:33:e9:06:da:e0:e9:fd:
         4d:f9:1a:b6:ab:ab:42:6a:4c:8c:74:ed:45:3c:3b:45:2f:e2:
         9a:bb:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----