Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/QSO2VNxpZzG2eTW9qPBxPlXr-Zg.roa
File:                     QSO2VNxpZzG2eTW9qPBxPlXr-Zg.roa (raw, json)
Hash identifier:          MQ+2/oetCL22qWek3kzX/uSAgPa3Fd1fj7gvE4ErXTc=
Subject key identifier:   41:23:B6:54:DC:69:67:31:B6:79:35:BD:A8:F0:71:3E:55:EB:F9:98
Certificate issuer:       /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial:       090CF0B4
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/QSO2VNxpZzG2eTW9qPBxPlXr-Zg.roa
Signing time:             Sat 01 Jan 2022 10:55:27 +0000
ROA not before:           Sat 01 Jan 2022 10:55:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205112
IP address blocks:        185.232.100.0/22 maxlen: 24
                          2a0c:1700::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151842996 (0x90cf0b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
        Validity
            Not Before: Jan  1 10:55:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4123b654dc696731b67935bda8f0713e55ebf998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:c6:05:2e:b4:ec:b0:3c:15:96:ff:82:e8:
                    1f:ff:30:05:68:7d:e7:dc:b3:e5:a6:95:89:1a:7a:
                    38:bd:d1:13:f2:86:f3:9d:4f:f7:f0:97:88:f6:90:
                    32:07:cd:62:bc:67:41:88:40:00:ad:6d:55:6e:dc:
                    7e:cf:84:6b:32:99:2b:43:21:76:4c:70:21:29:8b:
                    f5:b5:64:6d:98:04:92:df:bd:f8:c2:41:9b:09:66:
                    4e:e5:27:4c:a5:33:c0:49:90:ad:39:72:87:ca:33:
                    f4:fd:38:db:6e:0a:1f:c4:5e:d2:c4:1c:71:1e:30:
                    a0:8f:57:8c:4d:70:95:6e:6b:1e:df:16:21:dc:ab:
                    11:2f:d2:c1:2b:30:a9:c8:0d:7d:6d:f6:96:6a:3d:
                    60:66:fd:df:cc:96:80:d6:e8:22:84:99:a5:0d:34:
                    ff:d1:eb:b3:f0:4f:ed:7c:fd:47:fc:6f:e8:13:2b:
                    68:57:e2:55:31:66:6b:4b:56:25:70:a1:98:aa:91:
                    39:b4:2d:a9:f9:7b:f7:94:46:07:eb:29:cb:72:fb:
                    21:7b:c1:74:10:0b:41:60:52:ea:02:7e:2e:42:8f:
                    b0:db:96:c6:97:f5:f5:c9:d6:9a:6f:d6:82:12:3e:
                    cd:c7:e3:fb:54:74:09:23:9c:87:47:bf:fc:c5:30:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:23:B6:54:DC:69:67:31:B6:79:35:BD:A8:F0:71:3E:55:EB:F9:98
            X509v3 Authority Key Identifier:
                keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/QSO2VNxpZzG2eTW9qPBxPlXr-Zg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.100.0/22
                IPv6:
                  2a0c:1700::/29

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:ef:40:4b:c7:20:9b:28:14:e5:ab:2c:36:a9:ad:00:9c:
         cc:7d:e0:3e:71:41:27:d8:d2:a7:2d:0e:5a:d6:c6:b3:bf:8f:
         9d:7c:a5:75:ab:b9:75:13:1b:2c:47:01:5a:1b:65:e5:66:a9:
         10:4c:4c:e4:3a:6e:f4:c4:75:37:09:44:5a:7b:f3:b5:8b:15:
         62:a2:44:1a:85:34:4c:6e:42:99:19:88:5c:cb:1b:fd:94:1b:
         c0:53:06:6e:f1:3a:33:b3:4e:22:91:0e:9a:3d:ed:f8:a5:cb:
         6b:0e:03:0c:ea:31:3c:9b:74:18:69:de:2c:23:fc:e9:42:6d:
         38:38:b6:9d:39:be:32:9b:a8:74:46:9a:38:52:02:ea:87:7c:
         b5:d5:86:d4:56:47:c0:82:c2:d0:4a:c7:ba:c4:2f:d7:b0:bd:
         14:8f:bc:53:34:ff:2c:e2:7b:a3:47:ee:3f:5e:6e:1c:54:ff:
         b7:3f:a0:e1:18:56:72:6e:61:2b:50:e9:15:b1:d1:b0:71:70:
         18:6b:04:23:14:84:0f:f6:49:c3:db:e1:50:b3:65:6d:aa:e0:
         34:8b:61:70:e7:44:99:d3:19:f1:5a:b6:24:41:23:1b:22:9d:
         bc:7f:cf:68:3a:09:98:a2:cf:81:aa:20:3f:d4:76:60:3f:4c:
         a2:7f:37:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----