Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/CdvFCHY_7ywcl77RrXMPjaHsteM.roa
File:                     CdvFCHY_7ywcl77RrXMPjaHsteM.roa (raw, json)
Hash identifier:          ukoZ01D/giyP+0mmhpGj8cFbGIV8SrGbRAykli3hph4=
Subject key identifier:   09:DB:C5:08:76:3F:EF:2C:1C:97:BE:D1:AD:73:0F:8D:A1:EC:B5:E3
Certificate issuer:       /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial:       08EE4088
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/CdvFCHY_7ywcl77RrXMPjaHsteM.roa
Signing time:             Sat 01 Jan 2022 06:58:27 +0000
ROA not before:           Sat 01 Jan 2022 06:58:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48498
IP address blocks:        91.211.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149831816 (0x8ee4088)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
        Validity
            Not Before: Jan  1 06:58:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09dbc508763fef2c1c97bed1ad730f8da1ecb5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:7d:43:ca:60:75:92:20:37:ad:69:1d:16:
                    40:b6:7c:7b:7c:b2:0c:a0:d3:e2:91:ee:0d:f8:9c:
                    e3:79:48:78:7d:66:86:86:0e:87:03:ef:e3:9a:8f:
                    8e:3d:30:d3:2a:de:93:4c:09:5e:74:66:0d:c7:56:
                    65:52:d3:bb:07:66:ef:70:68:e8:b4:97:87:2e:7e:
                    c0:1e:f8:a3:04:64:8f:e1:b9:0a:49:a1:79:c3:21:
                    b4:a1:83:fc:7c:72:e8:fa:22:02:c4:95:a9:fe:41:
                    1e:a3:9c:dd:78:41:8d:f8:de:c9:b5:cc:9e:d9:71:
                    17:a8:b5:47:f2:f6:2e:20:52:4b:bc:bc:50:63:92:
                    73:b8:c7:fa:26:42:65:4a:83:7a:6a:46:64:2b:7b:
                    d0:17:ef:0d:c3:ad:0d:d3:41:b9:2c:48:22:4a:14:
                    9b:5b:34:3d:80:6b:1f:fb:70:0c:17:ad:78:25:4b:
                    d3:06:12:85:a8:7c:73:c6:b9:34:f2:8e:79:19:73:
                    9f:c7:0f:a6:16:66:a1:0e:03:0f:a7:db:16:b9:8b:
                    52:b0:3c:66:9a:d6:07:43:fd:ac:b1:31:bc:af:eb:
                    ae:a5:79:94:b0:f3:23:88:24:57:f7:0e:08:4a:40:
                    b4:ae:b1:e2:88:01:3d:1f:58:e1:bc:e6:6c:71:0e:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DB:C5:08:76:3F:EF:2C:1C:97:BE:D1:AD:73:0F:8D:A1:EC:B5:E3
            X509v3 Authority Key Identifier:
                keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/CdvFCHY_7ywcl77RrXMPjaHsteM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.211.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:6f:a0:8f:b9:c4:f9:18:a6:70:11:4b:d2:c9:49:75:90:
         1b:d6:6d:4a:b3:bf:6e:c7:25:ea:bc:96:a0:c9:f9:a0:d1:a0:
         58:4e:ce:19:cf:70:ab:8e:76:44:63:50:1d:c7:01:8a:1c:0a:
         c1:be:5a:65:b1:f7:d6:88:ef:9f:cd:87:5a:38:28:3e:dd:10:
         27:ad:e5:8b:03:6b:51:b6:b6:cb:4e:3b:dc:45:59:a6:0e:17:
         dc:ca:e0:b5:b6:76:29:33:87:90:90:b9:4c:66:c0:50:42:97:
         d0:a8:63:e7:d9:8f:3b:55:95:df:21:21:bc:09:28:18:2d:60:
         df:9a:75:e8:88:32:2a:07:20:7b:4d:ad:a1:e8:b2:fe:72:39:
         55:39:03:58:71:d4:cb:af:39:21:0f:80:79:05:94:d8:47:99:
         f8:46:39:1b:f1:d4:6b:8e:b5:6a:1f:0c:99:6f:e2:b5:0e:10:
         0f:27:64:b8:19:45:d3:df:5c:b9:d0:c7:4c:cd:0f:38:8b:e9:
         3d:17:d3:a2:38:e2:05:d0:e0:77:45:f7:0b:8f:9b:dc:56:cd:
         f2:94:46:bf:06:09:5d:c7:c7:4b:43:ec:e7:67:b1:16:14:2b:
         63:ce:41:1d:22:0a:5f:d5:69:c9:e2:81:c3:a1:76:3a:37:8c:
         06:ca:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----