Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/pbbhorl6G7lMkucE3N1DssU0a7s.roa
File:                     pbbhorl6G7lMkucE3N1DssU0a7s.roa (raw, json)
Hash identifier:          vMfZqxwHV+NijQGfgCzaXHOvCjIMdP5J3xldFcZ+aME=
Subject key identifier:   A5:B6:E1:A2:B9:7A:1B:B9:4C:92:E7:04:DC:DD:43:B2:C5:34:6B:BB
Certificate issuer:       /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial:       0548AC6A
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/pbbhorl6G7lMkucE3N1DssU0a7s.roa
Signing time:             Sat 01 Jan 2022 06:04:07 +0000
ROA not before:           Sat 01 Jan 2022 06:04:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61169
IP address blocks:        185.15.252.0/22 maxlen: 22
                          2a03:b4c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88648810 (0x548ac6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
        Validity
            Not Before: Jan  1 06:04:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5b6e1a2b97a1bb94c92e704dcdd43b2c5346bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:25:65:26:ed:c3:a3:35:8c:4c:97:f9:b1:
                    3a:8f:12:c6:40:8a:4e:9e:1a:a2:d4:b8:02:18:e8:
                    ec:b6:50:6a:46:8d:d3:c4:e4:28:f7:a3:38:2d:dc:
                    20:e5:1b:3c:b8:e7:16:7d:ae:40:2c:87:5d:d2:11:
                    c4:99:d5:77:a3:25:6f:4b:bf:11:46:cb:39:05:4d:
                    a3:d9:51:92:6f:6a:03:ba:cc:c2:fd:b1:c1:a8:82:
                    e1:18:44:fc:49:21:f6:82:b0:90:cd:ce:2a:b2:2c:
                    6b:06:07:3b:31:af:56:12:ad:c5:56:39:ad:83:aa:
                    a6:5c:2b:c0:5f:d6:0e:24:5a:fe:0a:ef:85:49:52:
                    92:13:a2:5a:b9:e7:51:d3:c0:22:c7:15:9f:10:b5:
                    ae:4c:dc:4a:c1:cd:b3:52:17:5d:6c:6d:50:58:b4:
                    c9:52:95:bf:ef:ef:43:a7:b8:c1:ea:b2:d9:4d:8a:
                    17:99:80:cc:09:47:97:63:94:29:99:8e:d3:1f:39:
                    0c:f2:db:ee:34:41:c4:33:a3:65:18:5a:d6:e0:57:
                    75:fd:d5:72:1c:41:e6:ee:ef:e8:35:17:c6:ec:d0:
                    0c:9e:77:66:54:4c:39:ca:13:ee:ca:ac:82:8a:4b:
                    6d:7c:c3:9b:6e:54:b1:18:e2:70:44:4b:22:39:2e:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B6:E1:A2:B9:7A:1B:B9:4C:92:E7:04:DC:DD:43:B2:C5:34:6B:BB
            X509v3 Authority Key Identifier:
                keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/pbbhorl6G7lMkucE3N1DssU0a7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.252.0/22
                IPv6:
                  2a03:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:17:48:4a:b7:9f:20:9c:71:0e:9b:99:b1:06:9c:f5:9a:
         77:5a:58:e1:08:ef:b8:c3:f3:7a:bb:47:7c:4c:08:7e:66:a0:
         4b:08:56:79:bf:79:4a:6c:64:4c:fc:64:b2:92:24:6a:a0:28:
         a4:46:e5:d6:d0:f2:62:2c:0b:5a:f8:ee:c2:7c:df:f8:37:1d:
         fe:37:11:97:a8:13:74:80:75:01:32:50:27:c1:97:4f:7e:2f:
         28:66:f2:ed:34:00:a7:81:f5:b3:f3:2b:1a:ae:59:11:5c:c8:
         42:6f:3a:a5:3f:ca:fd:1a:99:9c:fa:62:42:a5:61:07:94:98:
         4d:82:07:a0:3b:00:f2:b3:b2:55:8c:b4:ce:83:08:ef:14:2f:
         7b:ad:7a:16:54:9d:12:95:f5:3d:6f:de:45:b1:b2:fb:79:5a:
         f5:45:ff:47:bb:6e:54:3a:ca:20:20:2f:6d:13:82:41:bf:0c:
         3e:79:dd:27:fe:b8:a8:9f:b3:15:9f:f9:9d:58:6a:12:a7:2c:
         53:98:9a:e3:47:5d:ac:e0:38:a4:96:8c:aa:02:b8:34:aa:f4:
         d7:6a:9a:9d:05:bc:04:a6:e2:5d:d1:e3:2a:89:d6:73:9e:ac:
         9a:cd:71:95:02:d4:04:ba:e2:91:6b:ae:82:3d:e0:b2:8b:75:
         9e:0e:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----