Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ej_o_qBS21MOLIIBlIfoYrCKTBw.roa
File:                     ej_o_qBS21MOLIIBlIfoYrCKTBw.roa (raw, json)
Hash identifier:          jrZcj2cSkF1AUlHgLMCprzW1IcLybuOmKgacrCp1iXw=
Subject key identifier:   7A:3F:E8:FE:A0:52:DB:53:0E:2C:82:01:94:87:E8:62:B0:8A:4C:1C
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       133AB019
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ej_o_qBS21MOLIIBlIfoYrCKTBw.roa
Signing time:             Sat 01 Jan 2022 04:03:06 +0000
ROA not before:           Sat 01 Jan 2022 04:03:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        188.214.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322613273 (0x133ab019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan  1 04:03:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a3fe8fea052db530e2c82019487e862b08a4c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:40:97:ab:c3:db:0b:1f:95:e4:04:c1:ed:
                    e8:be:c7:cc:ed:0a:c6:db:cd:af:f3:60:3b:af:3a:
                    19:78:4f:f0:bf:5c:72:cb:d1:b9:ff:75:41:10:e8:
                    a4:3b:46:8d:07:f1:5b:b0:79:d6:60:f5:77:08:4e:
                    61:c3:68:db:9b:a1:dd:15:34:35:bf:ca:3f:21:53:
                    88:9b:f6:f1:67:b0:e6:40:d8:6a:6a:75:d2:57:8b:
                    99:ec:59:2d:43:0b:6b:0e:ec:a8:e7:87:55:c1:89:
                    17:7c:f6:eb:d3:f3:93:42:ba:09:78:a4:c1:0e:6e:
                    cd:e9:9b:a0:af:4c:79:30:7e:05:2e:4b:16:3e:41:
                    db:13:7b:02:0b:0d:4c:33:16:87:d1:9a:b0:ec:00:
                    ed:bd:90:61:3a:99:fe:e5:5c:87:4e:9b:09:f1:a5:
                    88:bd:24:39:da:3c:fe:95:e7:cd:6f:5e:4d:1a:1b:
                    85:82:a4:f4:90:a7:69:e6:cc:83:d5:09:f0:50:a9:
                    39:75:63:64:99:41:58:56:c1:24:00:36:da:7f:fe:
                    b2:49:bb:28:fa:7f:75:0c:f0:73:54:e8:65:9e:71:
                    a7:e6:9c:44:65:9a:cc:d6:0c:2e:f3:2c:b5:98:6c:
                    ab:c6:18:b0:82:84:8e:ef:e0:23:21:04:42:ce:70:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:E8:FE:A0:52:DB:53:0E:2C:82:01:94:87:E8:62:B0:8A:4C:1C
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ej_o_qBS21MOLIIBlIfoYrCKTBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.214.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:34:57:ed:1b:f9:74:4d:a8:ad:13:7e:63:18:db:ed:d5:95:
         e3:99:37:49:e9:c2:9a:27:5a:0e:95:2d:57:64:c3:9d:89:6e:
         f3:44:f0:9c:28:2f:5b:f3:3e:dd:57:1c:63:7b:cd:1b:95:42:
         d1:98:07:e8:91:9b:6b:91:b9:aa:64:d2:52:bc:20:29:af:fc:
         f7:0a:1a:98:a1:23:34:36:ba:11:bb:24:c1:8a:71:de:4a:9b:
         0a:49:e9:40:bc:db:6b:d4:98:d5:17:f8:1f:ee:3e:c6:7a:c5:
         bf:f4:82:1d:7b:fa:2e:8e:f8:f6:05:24:4a:35:42:79:10:fe:
         cc:f5:ec:e3:23:a2:0e:e2:ad:97:08:ab:2f:a2:87:8a:43:e3:
         92:07:4a:65:b5:12:e7:0a:44:75:b6:f3:1b:da:b3:a6:9a:05:
         bc:db:b6:71:08:95:c0:4b:68:c0:9c:00:43:50:73:1a:05:af:
         98:30:3b:8d:cd:02:76:52:d1:22:02:06:be:76:de:b3:7f:37:
         7f:e8:7a:3d:82:96:bf:3e:8f:0d:7b:eb:98:8b:38:cf:a3:da:
         44:9b:16:c1:0f:7a:75:f5:14:e3:16:b7:46:f9:06:a0:f0:1d:
         18:28:6c:b2:ff:a3:76:c5:79:64:aa:91:ac:1a:8e:c2:f5:19:
         ba:77:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----