Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/a3W74mznCWlnUOiEWTJ1C_Tw3ug.roa
File:                     a3W74mznCWlnUOiEWTJ1C_Tw3ug.roa (raw, json)
Hash identifier:          GlkgvWWEEEAmcWxrMGy+WW0ujS6q/7/7T/KJbvnjdik=
Subject key identifier:   6B:75:BB:E2:6C:E7:09:69:67:50:E8:84:59:32:75:0B:F4:F0:DE:E8
Certificate issuer:       /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial:       0183D090390A2801C16E4DAC71E530299195
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/a3W74mznCWlnUOiEWTJ1C_Tw3ug.roa
Signing time:             Thu 13 Oct 2022 08:57:36 +0000
ROA not before:           Thu 13 Oct 2022 08:57:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199666
IP address blocks:        185.127.220.0/23 maxlen: 23
                          185.127.222.0/23 maxlen: 23
                          146.247.64.0/22 maxlen: 22
                          146.247.64.0/24 maxlen: 24
                          146.247.66.0/24 maxlen: 24
                          146.247.67.0/24 maxlen: 24
                          146.247.68.0/23 maxlen: 23
                          146.247.68.0/24 maxlen: 24
                          146.247.69.0/24 maxlen: 24
                          146.247.70.0/24 maxlen: 24
                          146.247.70.0/23 maxlen: 23
                          146.247.65.0/24 maxlen: 24
                          2a05:9dc0:ffff::/48 maxlen: 48
                          2a05:9dc0:400::/42 maxlen: 42
                          2a05:9dc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d0:90:39:0a:28:01:c1:6e:4d:ac:71:e5:30:29:91:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
        Validity
            Not Before: Oct 13 08:57:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b75bbe26ce709696750e8845932750bf4f0dee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c2:07:da:24:44:58:62:57:2c:a8:00:83:11:
                    8e:c6:3f:9b:75:b0:17:fd:3b:d7:f3:b2:62:06:57:
                    1c:b6:bf:3c:2f:f0:5a:e9:8a:69:e0:db:1c:25:13:
                    f9:73:a9:f3:f3:bd:65:52:b3:d9:fc:6b:5c:6a:f9:
                    e5:eb:12:ad:2f:da:41:ba:7b:de:bd:53:b4:94:9f:
                    97:e2:da:94:9f:87:c3:b9:af:54:37:6c:af:22:fe:
                    e7:f8:a0:26:24:1e:8d:88:8b:60:95:28:89:a2:61:
                    df:ad:ea:79:a4:1a:18:14:bb:4e:79:47:2e:22:ac:
                    d0:3d:36:11:d8:e7:3a:cf:b1:14:ac:97:bd:38:0f:
                    53:28:73:81:7a:09:aa:7a:bf:76:1d:b2:c1:39:b3:
                    08:a9:98:3a:53:b0:53:a9:74:2d:c7:75:08:26:f4:
                    60:63:aa:3b:34:b4:15:41:7c:f0:09:fd:df:3f:65:
                    39:d6:87:03:e8:43:1a:aa:f4:0d:cd:d8:e1:46:e7:
                    b0:e9:a8:92:58:34:4e:6c:05:a2:5d:c0:46:96:85:
                    cf:2b:f7:d3:3c:65:3c:da:b6:99:55:6f:2d:a5:00:
                    eb:d8:44:8a:04:b3:63:04:bf:d0:7c:53:f5:21:65:
                    d4:a2:af:65:21:99:25:d4:d1:67:67:5f:c2:88:ac:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:75:BB:E2:6C:E7:09:69:67:50:E8:84:59:32:75:0B:F4:F0:DE:E8
            X509v3 Authority Key Identifier:
                keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/a3W74mznCWlnUOiEWTJ1C_Tw3ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.64.0/21
                  185.127.220.0/22
                IPv6:
                  2a05:9dc0::/48
                  2a05:9dc0:400::/42
                  2a05:9dc0:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:b0:8d:0b:99:52:ef:a1:2b:e9:8b:fe:8a:50:56:ad:f7:
         b1:95:7d:fa:06:a2:aa:2d:71:96:0f:b6:b2:75:be:bc:ca:b7:
         3a:45:52:37:ef:ee:13:7a:c5:01:23:98:1d:d1:c0:d2:3a:ae:
         85:6c:d9:69:be:4a:94:bd:db:76:1b:c3:76:e1:96:c5:7e:21:
         26:ab:d6:17:82:22:20:a5:a3:56:0c:a0:a2:ab:19:9d:37:e8:
         f8:56:8b:4e:1d:82:a5:13:2b:25:08:26:99:a7:0d:1e:d1:2d:
         25:67:1d:cf:ab:ce:d9:3f:65:22:f6:4b:cd:09:0a:42:2b:6e:
         33:96:80:4a:d8:0c:0d:6f:a4:25:db:1b:dc:b4:d6:e9:be:b8:
         32:16:4b:09:ac:56:fa:28:27:a9:43:8a:df:1c:d6:ab:e9:00:
         1e:8b:63:89:b2:d8:3d:ac:ef:03:ec:aa:4d:7f:5b:1a:87:05:
         90:bb:ee:2c:70:5a:c6:68:cb:27:3e:bf:19:ae:4e:9e:14:ad:
         97:e2:74:73:45:a5:d3:80:37:a7:ec:10:42:78:9e:c5:97:e0:
         30:a9:88:ea:d3:da:e0:54:a0:18:14:cf:78:be:1b:5c:d4:11:
         74:12:ef:ce:5f:49:16:b3:84:32:9c:38:e1:b2:9e:9a:7c:4e:
         dd:30:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----