Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/biNOH4-9qOMB_3NXjfi1EU_vrdY.roa
File:                     biNOH4-9qOMB_3NXjfi1EU_vrdY.roa (raw, json)
Hash identifier:          08D7MFo5ilwsuUPK8AR2HHRExcs7lqG/96jpaVb+zH8=
Subject key identifier:   6E:23:4E:1F:8F:BD:A8:E3:01:FF:73:57:8D:F8:B5:11:4F:EF:AD:D6
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       083AB95D
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/biNOH4-9qOMB_3NXjfi1EU_vrdY.roa
Signing time:             Sat 01 Jan 2022 07:56:15 +0000
ROA not before:           Sat 01 Jan 2022 07:56:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206435
IP address blocks:        185.126.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138066269 (0x83ab95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  1 07:56:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e234e1f8fbda8e301ff73578df8b5114fefadd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:c7:cb:06:55:8e:cc:d5:45:fb:19:49:5a:
                    3b:37:8f:87:f1:0d:89:63:f9:e8:f5:36:d4:79:1b:
                    50:32:17:aa:1e:c6:aa:c8:cb:5d:de:16:05:b4:88:
                    03:33:a4:a1:85:13:3e:a5:22:f6:e6:21:dc:9b:ba:
                    68:bf:6a:bf:c8:d3:d9:37:d0:bf:96:ca:1a:d8:7e:
                    87:3e:f6:28:5c:89:cd:39:38:22:83:7a:58:d7:81:
                    68:6d:bf:e6:b0:54:8f:bf:53:11:b7:35:1c:35:f0:
                    12:1a:aa:f6:a0:64:4d:b3:48:4c:c1:0d:f8:e6:9d:
                    15:27:49:37:63:ad:87:4d:48:8f:43:eb:fe:da:d0:
                    bf:71:2f:ae:4a:68:a5:5a:80:af:7e:aa:0a:26:26:
                    37:bd:75:fa:e0:b6:8e:4e:ac:7f:c7:e5:60:ea:77:
                    4b:cc:84:ef:a6:1b:c4:4b:1b:6b:d1:17:e6:5c:b4:
                    fc:c3:46:5d:4c:15:21:3a:6a:e7:ca:b6:b5:12:0f:
                    1c:52:ef:3a:8c:2f:41:9d:cb:cb:fb:e3:23:4a:c8:
                    75:36:7c:f4:30:92:41:bd:fe:5c:6e:c2:a3:c2:dd:
                    89:88:b5:0e:ff:01:73:22:3c:aa:fc:a1:b3:31:e4:
                    08:db:5d:e5:1d:35:f1:54:48:75:81:2a:df:05:ad:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:23:4E:1F:8F:BD:A8:E3:01:FF:73:57:8D:F8:B5:11:4F:EF:AD:D6
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/biNOH4-9qOMB_3NXjfi1EU_vrdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:bf:9c:18:6e:eb:39:b8:c0:b8:9c:5d:e0:63:2a:af:e1:
         f1:38:11:6e:d8:fb:3a:ae:fe:04:b7:1b:1a:5e:45:04:65:83:
         b9:35:8e:da:f3:62:fe:24:5c:ec:44:6f:40:d1:f0:d3:6c:46:
         85:74:4c:e7:8d:98:84:e0:88:0f:d4:3a:53:76:10:48:3b:55:
         71:4c:9f:a6:22:5f:07:56:c7:c3:ea:46:8e:3b:c2:fe:4c:73:
         41:22:e8:58:80:91:c3:28:e6:46:d4:a3:7d:e4:1c:77:71:29:
         4e:7e:d0:28:64:44:3a:8c:62:a9:ee:fa:43:c4:eb:73:ff:5a:
         3c:92:e4:98:cf:98:b9:6e:17:bf:55:c9:f5:a3:bd:4b:03:74:
         c4:9c:23:48:ae:f3:c0:01:b3:ee:e8:e2:a9:c6:e3:a4:bd:d1:
         a3:47:e9:8a:11:96:c3:71:9d:5c:cb:dc:d9:ce:87:8d:60:e0:
         57:d8:63:48:96:20:f3:07:41:4e:7b:25:ef:f5:ca:c6:e4:1d:
         1c:a1:c9:69:3c:c5:7b:d9:5d:b0:a7:26:ac:08:10:c8:cd:50:
         29:3a:f9:c0:3b:0a:2d:0a:6f:3e:70:69:5d:5b:5e:9e:75:1a:
         31:b3:68:7d:ce:8b:d3:50:43:39:b2:1b:a8:15:a1:f2:b0:7f:
         db:98:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----