Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/ikjPDXAR0mmirP1b8DcaLuJkw4U.roa
File:                     ikjPDXAR0mmirP1b8DcaLuJkw4U.roa (raw, json)
Hash identifier:          /2qH53RLHB9wlHUQdkcY/FTVV8RlCOpytsdDTor7fEg=
Subject key identifier:   8A:48:CF:0D:70:11:D2:69:A2:AC:FD:5B:F0:37:1A:2E:E2:64:C3:85
Certificate issuer:       /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial:       0184E1F0DC313D7B71FFC8BC0BF6964F179C
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/ikjPDXAR0mmirP1b8DcaLuJkw4U.roa
Signing time:             Mon 05 Dec 2022 10:59:29 +0000
ROA not before:           Mon 05 Dec 2022 10:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203152
IP address blocks:        185.127.136.0/22 maxlen: 24
                          2a13:4547::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e1:f0:dc:31:3d:7b:71:ff:c8:bc:0b:f6:96:4f:17:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
        Validity
            Not Before: Dec  5 10:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a48cf0d7011d269a2acfd5bf0371a2ee264c385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:ad:cb:69:fe:bc:bd:5b:48:b9:ad:ff:56:
                    27:38:7c:ee:11:c9:4d:6d:25:2a:98:b0:a4:6a:56:
                    fc:3f:24:cf:81:3f:1b:32:3e:1e:0e:8f:db:1d:07:
                    21:a1:92:ff:ea:8d:c4:a9:40:8a:80:81:b7:9a:59:
                    65:93:0c:ec:b8:17:db:4a:06:ba:a7:2e:27:2f:b3:
                    d2:9e:89:ac:84:98:ae:86:25:d2:2c:e7:01:97:f8:
                    a4:97:11:0c:26:1e:75:7c:8c:19:af:69:16:55:0d:
                    e6:48:4f:fc:47:e4:6c:94:97:2b:ba:bb:1e:34:ab:
                    0a:90:d5:93:3e:64:36:02:e1:da:92:a3:43:4a:b7:
                    47:26:bc:ef:0c:95:5c:a5:90:f0:b1:7a:7d:70:4f:
                    e9:14:0c:12:94:c6:31:bf:58:7b:6f:de:9c:f0:1a:
                    02:89:97:37:57:2b:40:20:69:c7:90:d1:a0:e4:1e:
                    6d:0b:9d:51:7a:f3:6e:6b:d2:b0:49:e4:5d:f6:c4:
                    d2:5d:e9:e0:2e:84:47:a5:08:ad:1a:dc:86:d7:40:
                    3a:44:62:9b:75:96:3e:21:41:b6:85:57:0e:63:fa:
                    70:8d:30:10:d1:8f:9d:51:b2:ba:c8:01:2b:b6:42:
                    52:28:a5:bb:3a:82:fc:02:0c:d0:cc:9f:de:4e:ff:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:48:CF:0D:70:11:D2:69:A2:AC:FD:5B:F0:37:1A:2E:E2:64:C3:85
            X509v3 Authority Key Identifier:
                keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/ikjPDXAR0mmirP1b8DcaLuJkw4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.136.0/22
                IPv6:
                  2a13:4547::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:77:a9:f1:2d:d2:73:07:7b:c1:ad:a6:8a:b8:28:d4:55:39:
         ed:f8:8f:38:16:e5:e5:7a:77:7d:19:30:da:79:93:8b:12:49:
         f8:20:88:6e:b7:d6:18:00:8c:a4:fb:cb:a7:f6:79:80:4b:2e:
         2f:b6:56:a4:c3:61:03:6c:95:2b:5c:f9:8a:87:31:9e:13:7d:
         4c:93:34:e8:ea:b7:ff:4f:10:a5:6b:df:ba:b9:03:f7:b9:c3:
         87:5a:a2:df:51:ba:4d:61:ba:40:22:d1:31:61:a9:1b:fa:15:
         30:dc:c0:40:57:29:e6:de:d1:3a:d6:73:6e:96:21:fc:ba:3d:
         6d:b2:3a:14:30:35:63:ab:bb:05:be:47:bd:40:09:b1:48:21:
         0f:e5:db:e5:2c:df:15:bf:2f:ad:8e:b0:36:3c:c7:a9:c8:25:
         35:7a:fa:14:d6:a5:d0:db:02:a2:65:2d:5b:4b:9c:61:78:77:
         9e:47:c5:d3:c3:e9:4e:a6:b7:b8:b6:f6:fe:c8:45:58:ec:e7:
         3a:86:3d:fc:21:4a:8e:64:3d:6f:b2:bb:5b:e0:4a:e8:87:e1:
         f3:7e:75:3d:b7:f6:11:ab:0d:8a:fd:05:e6:af:96:59:c5:1d:
         14:c4:5d:95:8d:87:94:c8:93:fb:60:58:4e:9b:01:68:30:7d:
         2f:58:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----