Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/nn2TGaL8psyRXLY-JaStd1rRnFQ.roa
File:                     nn2TGaL8psyRXLY-JaStd1rRnFQ.roa (raw, json)
Hash identifier:          w6SKl7ZwPPXew6Biw9XOSYa/882UJc4h+kMV6KipnjU=
Subject key identifier:   9E:7D:93:19:A2:FC:A6:CC:91:5C:B6:3E:25:A4:AD:77:5A:D1:9C:54
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       01C518CE
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/nn2TGaL8psyRXLY-JaStd1rRnFQ.roa
Signing time:             Sat 01 Jan 2022 04:57:27 +0000
ROA not before:           Sat 01 Jan 2022 04:57:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48927
IP address blocks:        178.215.228.0/22 maxlen: 22
                          2a0d:5440::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29694158 (0x1c518ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: Jan  1 04:57:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9e7d9319a2fca6cc915cb63e25a4ad775ad19c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:f0:ce:d9:dd:a2:25:ad:00:76:a2:f5:cc:
                    02:f0:a7:91:9b:e0:6b:64:10:25:a0:fc:c0:28:b2:
                    e1:bb:d1:ad:a1:ac:68:e9:3e:5e:c7:28:e1:11:52:
                    49:1b:4b:4a:69:8d:aa:4a:fd:ac:48:68:75:30:8f:
                    f7:77:5f:b0:f6:a7:0d:34:4e:43:d5:1c:c9:eb:83:
                    99:0d:73:e1:6a:10:dd:34:29:bd:86:9f:ee:86:66:
                    f7:0f:15:53:02:3e:dc:f9:8a:3f:57:84:76:c9:46:
                    16:59:dd:58:86:cc:db:ad:1d:83:4f:f4:3a:a8:79:
                    1a:0f:f7:bb:07:e2:1a:aa:f6:a6:81:ad:f2:0c:41:
                    5a:94:18:43:9a:21:ce:81:a4:ff:d6:b6:2a:4c:e8:
                    0e:8c:9f:86:78:4c:69:c3:12:33:30:e0:82:75:bd:
                    b6:0a:49:1e:73:5b:60:8a:57:16:08:1c:ed:77:82:
                    99:3a:46:a0:80:89:a3:e3:c9:b9:ec:44:9e:12:60:
                    59:30:cf:8f:71:fd:e7:13:c0:81:31:7e:dc:75:51:
                    9e:84:bb:2f:9d:42:fb:a3:36:51:64:60:aa:9d:d3:
                    66:9b:88:2e:c6:ea:ee:ea:52:e4:d6:cc:d2:0f:9c:
                    68:bc:1a:8d:1a:10:be:b0:d6:31:9f:ed:0a:bd:b4:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:93:19:A2:FC:A6:CC:91:5C:B6:3E:25:A4:AD:77:5A:D1:9C:54
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/nn2TGaL8psyRXLY-JaStd1rRnFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.215.228.0/22
                IPv6:
                  2a0d:5440::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:f9:a1:64:64:85:1a:e5:c1:29:78:55:59:0e:82:65:4e:
         59:ce:3d:64:08:3d:61:88:31:5f:97:56:39:b9:5c:da:eb:be:
         d1:53:9e:7b:40:49:44:0e:a7:0c:68:17:dc:22:8c:dc:c5:7f:
         c0:9f:4b:9a:1d:7c:eb:de:dc:77:2f:00:cf:56:fa:86:98:68:
         5d:9d:b1:9a:ad:aa:2e:05:63:5d:ca:24:cf:47:e4:a3:db:db:
         9c:55:fe:f2:82:ed:7c:da:27:c6:90:18:bb:6a:94:df:1e:8e:
         3c:1e:99:db:c5:df:6f:89:68:3f:bb:75:93:3c:45:d1:3d:67:
         eb:c0:a8:aa:7c:ad:6a:71:45:5a:85:48:a6:05:3a:64:5f:36:
         38:c0:5c:e5:99:b0:cf:2b:c6:d8:d3:91:f9:0f:87:55:8d:8e:
         5b:e7:59:7f:85:cc:d2:e5:d4:95:7e:66:ad:f1:fb:e5:e0:30:
         55:b2:e0:8e:be:84:9e:a7:c8:0f:be:8b:41:10:f3:36:53:19:
         4e:c5:68:34:06:8f:c0:6b:83:d0:70:90:8c:82:c6:f9:f8:0a:
         c5:91:72:9d:db:73:b0:a0:e6:ac:0e:89:65:66:f2:c8:16:18:
         74:d0:c1:8e:2a:74:94:61:37:bf:25:d9:6f:32:c6:10:d4:25:
         97:60:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----