Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/7qZZUHQKwUGl_buMw8EJ2PONRF8.roa
File:                     7qZZUHQKwUGl_buMw8EJ2PONRF8.roa (raw, json)
Hash identifier:          z3XP2hZlQPH8gUnFXTlTsCGRHVvIj7VtaDM7PNn7K14=
Subject key identifier:   EE:A6:59:50:74:0A:C1:41:A5:FD:BB:8C:C3:C1:09:D8:F3:8D:44:5F
Certificate issuer:       /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial:       07B39843
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/7qZZUHQKwUGl_buMw8EJ2PONRF8.roa
Signing time:             Tue 14 Jun 2022 11:44:47 +0000
ROA not before:           Tue 14 Jun 2022 11:44:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56457
IP address blocks:        176.119.210.0/24 maxlen: 24
                          2a06:5780::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129210435 (0x7b39843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
        Validity
            Not Before: Jun 14 11:44:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eea65950740ac141a5fdbb8cc3c109d8f38d445f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:93:fc:ba:bc:23:ae:c6:c2:f0:c5:02:b8:
                    88:c1:79:d0:13:58:cd:03:93:dc:c3:b7:aa:ef:51:
                    8f:e7:92:6a:77:29:6e:f4:ea:5d:a3:60:02:9c:24:
                    e0:6c:93:bf:75:51:70:79:47:79:30:92:a1:d9:d3:
                    42:20:04:38:22:c1:c3:81:9b:5a:10:c8:33:2a:08:
                    47:21:43:4a:04:6b:42:39:ab:e4:ae:2c:d1:3f:be:
                    57:35:d6:a8:88:33:8a:91:5c:c7:45:27:d6:2a:38:
                    a7:34:ba:74:d8:56:b2:43:a0:1d:b8:d2:d7:f4:bc:
                    9e:30:28:c0:ed:bb:ae:86:72:4d:4b:79:bf:af:fe:
                    73:08:14:76:68:6d:d7:25:7b:3e:e3:9e:d5:de:30:
                    2c:f5:f7:ba:ee:cb:34:13:1b:21:e0:43:e8:74:af:
                    0e:5f:8a:66:62:b9:67:94:75:65:fd:b6:16:3c:79:
                    59:5c:ea:2d:52:6b:2e:2f:bd:25:5b:0d:75:86:f8:
                    ae:13:cf:98:66:46:f8:39:7a:fe:cc:92:0a:6e:8b:
                    87:d7:af:47:64:32:06:39:43:32:3a:ae:21:de:f2:
                    31:4c:4b:68:c6:80:80:1b:ae:d6:44:e2:e7:ad:4b:
                    55:20:75:51:6a:f0:46:a0:17:89:b8:16:9c:e5:95:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A6:59:50:74:0A:C1:41:A5:FD:BB:8C:C3:C1:09:D8:F3:8D:44:5F
            X509v3 Authority Key Identifier:
                keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/7qZZUHQKwUGl_buMw8EJ2PONRF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.210.0/24
                IPv6:
                  2a06:5780::/29

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:20:bd:29:07:2e:e9:aa:20:fe:4c:6e:fd:ad:ec:1b:d2:
         3c:17:35:32:32:ba:08:26:e2:d7:52:46:c1:d8:fc:f8:cd:d6:
         83:ca:0f:06:06:44:d1:32:0e:36:ee:a3:48:bb:ea:f1:a3:3b:
         3e:56:c2:e5:2c:25:80:50:7f:55:e4:14:ad:bc:34:fb:57:ea:
         52:5f:18:1c:aa:01:1f:de:1c:55:09:00:44:0d:04:5c:a7:56:
         16:f8:af:8f:2a:14:e4:57:c2:82:f5:6e:58:7a:af:f0:dc:ac:
         f1:99:38:96:d9:78:00:04:22:85:08:86:ef:ed:50:2a:d0:40:
         97:47:db:84:6f:0a:a0:cf:05:d9:95:49:fa:86:24:9a:1c:b3:
         3f:e2:ba:76:30:27:1a:55:dc:b4:df:77:95:65:fc:58:ab:d9:
         4f:4e:74:59:2e:06:7d:23:13:72:a3:01:27:25:f5:aa:1e:20:
         65:26:da:6e:b3:d7:c3:22:07:98:fb:4c:26:57:c6:8b:19:c9:
         79:98:f4:b6:3a:97:81:7c:bd:08:53:14:91:97:38:63:d3:04:
         65:bd:70:05:68:53:48:15:31:85:47:8d:b5:54:77:44:77:05:
         0a:3d:b2:ba:b1:92:de:a9:c2:e8:de:a9:d5:71:c2:be:79:88:
         89:95:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----