Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/pXgPKgJGwrFRlyq8S3rTW49tijg.roa
File:                     pXgPKgJGwrFRlyq8S3rTW49tijg.roa (raw, json)
Hash identifier:          e6cofLn+F3Gg+kT6Qy9Sb2tBPaknAqEGpWmESVChbjY=
Subject key identifier:   A5:78:0F:2A:02:46:C2:B1:51:97:2A:BC:4B:7A:D3:5B:8F:6D:8A:38
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       083635B3
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/pXgPKgJGwrFRlyq8S3rTW49tijg.roa
Signing time:             Sat 01 Jan 2022 07:56:12 +0000
ROA not before:           Sat 01 Jan 2022 07:56:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51559
IP address blocks:        212.22.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137770419 (0x83635b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  1 07:56:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5780f2a0246c2b151972abc4b7ad35b8f6d8a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:c7:c5:42:e0:72:5c:3c:93:57:ab:11:4e:
                    5e:d6:4b:d0:36:00:22:52:94:c1:c7:69:ca:e9:7c:
                    c1:31:bf:14:b5:95:70:7a:a7:1a:c7:13:ab:4f:b8:
                    34:fc:29:54:07:ff:d6:ad:7a:7c:2b:60:20:f9:72:
                    ef:50:4c:d3:c3:83:0c:96:e6:df:f0:a9:ab:4b:0d:
                    94:3d:24:e1:ef:0a:15:61:34:62:63:f4:49:bc:d5:
                    8d:ad:d9:8b:fd:88:11:ba:df:ec:d7:21:16:bb:45:
                    49:09:17:db:ff:0b:44:81:5a:a8:53:37:ef:68:6b:
                    b8:00:f1:4f:3b:e5:89:2e:78:58:ee:34:37:34:86:
                    a2:38:dd:c2:3d:2a:9a:9c:cf:37:05:65:0b:80:5e:
                    75:54:b4:95:cc:59:7b:06:8e:f1:16:cc:03:98:4e:
                    b7:05:06:c1:c0:a3:a2:56:52:e3:54:22:81:44:43:
                    17:9e:8a:53:6a:67:96:5f:09:50:40:30:55:b9:83:
                    84:88:eb:f4:a3:25:63:0b:8b:71:cf:20:8a:2d:ae:
                    8c:a0:70:64:9a:33:ab:85:7b:08:f7:ca:b4:ca:33:
                    ff:44:0b:23:16:17:4c:64:22:d0:e1:7b:61:86:6d:
                    a0:be:f8:c6:e1:29:bc:1d:ba:71:92:d3:3b:dd:37:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:0F:2A:02:46:C2:B1:51:97:2A:BC:4B:7A:D3:5B:8F:6D:8A:38
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/pXgPKgJGwrFRlyq8S3rTW49tijg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.22.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:dc:2b:f1:df:d7:00:b8:26:d1:a9:23:b8:6f:b1:31:07:cd:
         79:b8:79:02:9b:5a:e5:52:0a:c9:f6:f1:04:74:d9:3e:0e:c5:
         24:ef:b4:45:32:56:a1:cc:39:ee:d1:82:6f:6d:3e:b3:72:5b:
         1b:01:3f:f3:83:be:7b:18:2b:44:4c:96:66:64:93:1e:0b:2b:
         54:b1:54:11:7d:9e:1b:c3:80:bc:cc:69:de:21:43:8a:17:df:
         ae:ea:c9:a5:38:d9:cd:01:81:f1:70:9d:51:84:b3:c5:fc:17:
         28:81:e9:7f:ab:79:25:bd:da:03:86:9b:61:d4:07:17:a4:bd:
         6f:03:6c:72:c4:99:e1:9b:bf:71:6b:71:ba:b1:bf:7a:63:c8:
         4c:d3:6b:73:b6:c9:db:fe:d3:52:89:54:83:15:0c:2d:f2:eb:
         36:95:53:80:68:d8:88:b9:ce:c9:1c:c8:81:64:49:fc:00:cf:
         19:4f:40:51:86:3c:3a:c5:f2:9d:0b:b6:2b:2f:07:e9:d9:b1:
         d3:a9:e5:5f:7d:74:8c:a3:b6:33:4a:de:da:ac:4e:30:ff:da:
         1b:c5:83:62:8c:94:a3:2f:42:9c:e2:f7:93:d8:84:99:39:47:
         8b:29:ba:3f:b6:67:b5:da:d1:81:5f:ce:43:7f:a9:c8:b4:7e:
         22:4e:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----