Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/trpxOyeo8_TKjzvLay7wcZi78zU.roa
File:                     trpxOyeo8_TKjzvLay7wcZi78zU.roa (raw, json)
Hash identifier:          vdrJWQYizf+3Z10AwcMsu/WHJRpyDLiT17G0OXIZYBg=
Subject key identifier:   B6:BA:71:3B:27:A8:F3:F4:CA:8F:3B:CB:6B:2E:F0:71:98:BB:F3:35
Certificate issuer:       /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial:       0183309179722554006EDED1316CEB8D2BED
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/trpxOyeo8_TKjzvLay7wcZi78zU.roa
Signing time:             Mon 12 Sep 2022 07:19:43 +0000
ROA not before:           Mon 12 Sep 2022 07:19:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203376
IP address blocks:        185.136.200.0/22 maxlen: 22
                          2a06:ffc0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:30:91:79:72:25:54:00:6e:de:d1:31:6c:eb:8d:2b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
        Validity
            Not Before: Sep 12 07:19:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6ba713b27a8f3f4ca8f3bcb6b2ef07198bbf335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:36:8d:f0:a8:b6:68:1e:cc:a8:e8:3a:7d:
                    65:44:ff:e3:34:f9:ca:fe:4f:e2:ee:dd:d4:17:65:
                    7c:90:a2:02:91:3c:d5:35:f4:eb:37:8e:49:e4:02:
                    54:b6:48:f9:2d:c3:39:ff:41:5a:22:8c:bd:23:d7:
                    50:e2:21:9f:b1:34:25:cf:74:26:91:bb:a4:45:f5:
                    be:13:69:2c:4e:e9:15:b9:f9:3a:f6:c5:64:44:32:
                    65:c0:ca:bb:ed:60:87:9f:ac:f6:85:3e:0e:ea:74:
                    f5:cc:b7:2f:e7:28:6c:14:94:65:02:c1:df:d9:19:
                    18:fe:2f:31:cc:45:5d:f0:72:46:f3:d7:a9:d3:b6:
                    c4:dc:75:65:e7:10:46:da:9a:9a:ca:e2:d1:34:a7:
                    5a:84:48:b7:9d:c9:39:6b:84:94:5b:2f:1f:ec:c1:
                    df:d1:ef:b4:a3:52:ec:f3:f3:f9:be:8f:c5:5c:9e:
                    8e:13:e7:a2:8b:de:bf:b7:ab:76:6d:ee:a7:a6:44:
                    04:6a:04:83:02:13:7b:f7:9b:98:c1:2f:f4:01:9b:
                    9d:21:fb:d1:a6:d1:a2:57:20:24:24:87:d2:d8:46:
                    79:e7:4f:cf:f9:42:34:38:a1:2b:4b:8f:86:c0:27:
                    22:d9:7a:78:e0:27:54:56:b3:24:e6:01:79:38:3e:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BA:71:3B:27:A8:F3:F4:CA:8F:3B:CB:6B:2E:F0:71:98:BB:F3:35
            X509v3 Authority Key Identifier:
                keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/trpxOyeo8_TKjzvLay7wcZi78zU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.200.0/22
                IPv6:
                  2a06:ffc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:b2:83:50:7b:be:65:34:81:e3:b3:65:22:14:92:5a:02:
         cf:e4:bc:85:10:ae:35:6f:0a:a6:d6:2c:15:d5:72:c9:83:bb:
         04:78:a2:82:83:6a:f8:4a:6a:45:5b:0d:d6:a3:8a:72:d3:07:
         d7:4d:20:31:fd:21:3a:20:4c:33:5f:51:f4:cb:76:6e:34:98:
         44:24:c4:91:f6:45:ac:dd:d8:e9:6c:3e:e5:ad:05:09:c0:4c:
         4a:7d:cc:84:82:7f:d2:ae:2c:c6:2d:d1:15:0a:d3:78:9d:48:
         41:d6:aa:8a:ba:0a:1a:90:1c:2d:21:94:cf:7d:53:85:ea:6b:
         19:bd:ad:91:f3:78:43:00:94:34:33:49:eb:ee:76:c2:03:dd:
         d7:fa:c6:ad:7f:99:b9:24:cc:8f:e8:53:0f:60:8c:66:52:e0:
         2b:ee:8f:95:3b:1c:f8:cb:4b:37:42:6c:a7:32:20:a1:8c:c1:
         e1:98:9f:e6:1f:42:9e:86:23:fe:34:61:d2:21:d5:35:2a:9a:
         f9:d4:eb:7f:d2:07:73:db:84:bc:0b:50:d6:89:42:99:93:09:
         21:1d:44:80:6e:aa:c9:b5:99:ae:1c:98:2c:9c:10:56:ca:05:
         83:69:3a:69:7f:c8:96:6d:b9:3a:ea:24:bf:73:2c:13:ef:ab:
         8e:10:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----