Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/PbG4V3_6AaW-EGEv_UbJuCYDyRA.roa
File:                     PbG4V3_6AaW-EGEv_UbJuCYDyRA.roa (raw, json)
Hash identifier:          2kGu2VhtECLrBfqACqgikywwcJtHHDfLZHTfhGHCNIA=
Subject key identifier:   3D:B1:B8:57:7F:FA:01:A5:BE:10:61:2F:FD:46:C9:B8:26:03:C9:10
Certificate issuer:       /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial:       01687AD7
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/PbG4V3_6AaW-EGEv_UbJuCYDyRA.roa
Signing time:             Sat 01 Jan 2022 08:05:54 +0000
ROA not before:           Sat 01 Jan 2022 08:05:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16097
IP address blocks:        185.105.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23624407 (0x1687ad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
        Validity
            Not Before: Jan  1 08:05:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3db1b8577ffa01a5be10612ffd46c9b82603c910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:e9:61:0d:fe:3c:f3:42:e5:dd:4d:e7:37:
                    f3:b5:b6:fb:57:78:70:21:76:bd:04:cc:14:c5:f9:
                    7d:8f:9a:49:a7:c1:80:8c:ba:74:21:1d:95:cc:af:
                    c0:18:fb:c6:e6:cc:e6:cb:a1:4f:58:e5:41:54:f6:
                    a4:cc:9a:16:08:70:90:bc:5f:33:64:5f:d1:3c:56:
                    6c:ac:51:e0:81:69:52:cd:f8:9c:4c:23:b6:13:33:
                    89:07:3b:31:40:ee:73:f7:9a:1c:c3:a1:d7:57:36:
                    fe:74:18:43:ee:ba:33:ff:a2:de:51:a1:f7:d7:b0:
                    f4:39:dd:89:3e:bb:b1:81:61:98:25:b5:2b:58:12:
                    95:e0:5e:55:ed:c5:a5:a6:cc:2f:51:73:ed:d9:e1:
                    1b:ef:f6:f0:1d:04:3e:2c:f6:83:d7:6c:03:38:4c:
                    a3:9e:89:44:8c:b2:f8:83:7e:bf:4c:06:76:2b:0c:
                    79:cc:71:a5:ad:07:c9:02:46:e2:19:11:de:ef:b1:
                    3d:a1:88:bf:49:e7:07:73:fa:ef:a9:33:6a:dc:d4:
                    a4:54:bf:c3:f5:be:66:56:4d:e8:4b:89:e7:46:cb:
                    85:2a:bb:b6:e1:75:2b:53:6c:c3:34:bf:f1:c7:5f:
                    5f:1f:c1:1a:e0:1b:b2:2a:6f:4a:95:ae:06:1e:7e:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B1:B8:57:7F:FA:01:A5:BE:10:61:2F:FD:46:C9:B8:26:03:C9:10
            X509v3 Authority Key Identifier:
                keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/PbG4V3_6AaW-EGEv_UbJuCYDyRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:b7:47:f9:f0:11:93:78:ee:8a:c8:06:09:45:cc:67:b9:
         60:a2:de:d9:69:ed:87:9b:51:68:bd:d2:96:81:18:dd:b7:37:
         fa:29:aa:b7:23:38:8b:af:1f:ca:01:34:34:fc:21:6c:f2:72:
         0c:9a:98:c1:fa:29:b4:db:5b:4b:56:01:c3:57:68:7d:74:5d:
         62:fe:ad:d3:a7:44:e3:b8:81:5e:5b:f6:d2:23:ba:15:eb:14:
         59:68:25:4e:7c:42:66:37:15:c8:2a:dc:d5:f6:51:61:b8:63:
         88:50:44:e5:a3:d0:54:df:c1:7c:0e:26:9a:20:32:f0:d3:d2:
         2a:f5:2b:73:fb:72:08:bb:5a:75:31:ec:42:82:d4:71:e6:3c:
         41:90:55:7e:52:ec:3b:7c:cb:9c:1b:74:04:7b:36:e0:bd:28:
         9a:ef:84:8c:fb:af:4a:09:5f:36:5c:81:b9:64:d9:e5:2a:23:
         12:73:db:26:8b:6d:ba:f1:78:61:55:15:3d:6e:1f:6d:9a:71:
         fe:ca:9c:ed:10:d2:d2:2f:b4:bb:85:f9:2a:00:a2:11:69:81:
         52:12:4c:2c:3a:c4:6c:66:e8:ba:b5:4e:4c:7c:30:90:85:1d:
         c3:78:f3:70:fa:5d:d4:62:d3:4e:16:52:09:ba:c7:34:12:8d:
         40:17:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----