Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/_zxZy-Xdkm4vOrzdjsmYrboLYvs.roa
File:                     _zxZy-Xdkm4vOrzdjsmYrboLYvs.roa (raw, json)
Hash identifier:          vC0zbxjetAXt+3fNbBu0jFtYKIQB55OjxacU7ORVw5g=
Subject key identifier:   FF:3C:59:CB:E5:DD:92:6E:2F:3A:BC:DD:8E:C9:98:AD:BA:0B:62:FB
Certificate issuer:       /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial:       06ABB6A2
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/_zxZy-Xdkm4vOrzdjsmYrboLYvs.roa
Signing time:             Sat 01 Jan 2022 13:55:40 +0000
ROA not before:           Sat 01 Jan 2022 13:55:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50180
IP address blocks:        195.189.166.0/23 maxlen: 23
                          2001:67c:2ff0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111916706 (0x6abb6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
        Validity
            Not Before: Jan  1 13:55:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff3c59cbe5dd926e2f3abcdd8ec998adba0b62fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:fd:2f:fe:91:1c:66:6d:52:a2:78:4b:42:
                    e8:d0:2a:11:49:51:3f:57:ae:15:81:a1:14:78:4e:
                    7e:72:b0:d4:84:a5:f7:77:7d:c9:43:2d:3b:07:5a:
                    5d:7a:3b:dc:e7:db:ca:92:4e:35:7a:ce:96:39:cd:
                    46:af:37:61:c0:08:c4:28:98:29:5e:a2:af:a2:61:
                    8c:e3:1d:26:c2:99:cc:8a:ad:f1:72:66:97:f2:47:
                    82:2d:a0:49:e9:53:75:42:1d:24:1c:2f:17:6b:33:
                    59:08:e3:28:8b:20:f5:6b:6a:d8:d1:c7:36:d9:72:
                    5e:82:0e:17:db:a4:e8:ad:ca:b9:97:31:ee:fe:a8:
                    56:e0:3c:f5:bf:58:c6:84:40:9b:f9:31:41:2e:e7:
                    e7:3c:21:a9:f7:fd:aa:29:7f:65:d5:58:b0:09:cb:
                    8e:e5:3e:99:08:c2:8c:cf:5c:d2:4d:76:62:06:f2:
                    b4:eb:56:cd:81:84:c2:55:ee:af:7f:27:1a:38:6d:
                    9f:c0:f0:bf:d0:f4:ba:0d:4c:71:4b:47:5c:a7:ab:
                    a0:91:80:57:81:d5:a1:ee:cb:35:1a:a1:51:7e:48:
                    f0:7e:90:07:44:d4:01:28:11:ee:a1:18:18:e9:55:
                    81:0f:d3:81:16:f4:15:ce:eb:ec:23:62:4b:e0:12:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3C:59:CB:E5:DD:92:6E:2F:3A:BC:DD:8E:C9:98:AD:BA:0B:62:FB
            X509v3 Authority Key Identifier:
                keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/_zxZy-Xdkm4vOrzdjsmYrboLYvs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.166.0/23
                IPv6:
                  2001:67c:2ff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:4d:aa:97:94:ed:08:12:46:e9:61:55:04:87:ff:e3:97:
         ac:8d:ac:d1:06:eb:44:dc:51:19:ae:61:49:a2:7d:96:0b:86:
         e6:1c:94:2c:c3:64:e1:a8:d7:b9:22:e9:3e:2d:a2:d8:4e:4e:
         53:a2:2b:e7:7f:0b:74:e2:6f:92:d2:bd:c2:8b:0d:74:6f:02:
         49:ba:37:a0:48:b6:4a:c1:2e:7a:6b:7c:05:80:4d:61:27:68:
         19:96:08:4c:e8:18:a5:c7:da:f0:23:d7:45:2c:ea:dd:30:41:
         bd:64:09:f3:c4:67:f1:3f:c2:b0:78:3a:e8:2e:47:9f:2b:00:
         74:67:b7:58:7b:8c:4a:d8:43:53:c3:9c:96:0f:6d:33:b8:5b:
         3a:ca:17:a2:f5:d6:32:b7:5c:44:25:19:34:f1:52:db:2b:c0:
         dd:b8:b1:0b:68:15:d4:5d:83:86:61:43:2b:3f:9d:4d:11:ff:
         3e:ab:19:5c:62:d7:2a:0c:73:26:f5:3d:f8:b1:43:05:ca:a8:
         9b:24:e6:36:7b:b5:c4:8f:c7:00:09:e3:6c:b9:21:e7:19:11:
         a3:57:f0:ac:70:50:cd:6d:67:8a:f3:b3:21:79:4e:a3:2d:da:
         64:72:77:23:ba:44:62:02:86:7d:7e:c3:c2:c5:b3:b2:e0:22:
         da:a7:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----