Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/W2VTDfyipJ8lLb36LPyJ4I_3fH4.roa
File:                     W2VTDfyipJ8lLb36LPyJ4I_3fH4.roa (raw, json)
Hash identifier:          jQRHCa8Z+my0UMqO4e8gXdxPhHYBrz9TQWyQsDdD9WA=
Subject key identifier:   5B:65:53:0D:FC:A2:A4:9F:25:2D:BD:FA:2C:FC:89:E0:8F:F7:7C:7E
Certificate issuer:       /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial:       02DC700E
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/W2VTDfyipJ8lLb36LPyJ4I_3fH4.roa
Signing time:             Sat 01 Jan 2022 07:57:20 +0000
ROA not before:           Sat 01 Jan 2022 07:57:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205718
IP address blocks:        185.208.220.0/22 maxlen: 22
                          2a09:8ac0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48001038 (0x2dc700e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
        Validity
            Not Before: Jan  1 07:57:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b65530dfca2a49f252dbdfa2cfc89e08ff77c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:06:dd:4a:24:01:11:9e:e2:cb:fa:27:23:
                    e0:03:b6:a4:3f:ec:59:62:24:ef:11:30:25:a5:e8:
                    fc:2a:8c:a0:9a:65:11:16:2f:5c:1d:99:f9:86:67:
                    c8:89:aa:f7:3a:02:eb:67:3b:92:d5:4f:a5:1a:63:
                    f8:db:89:48:55:c6:8f:bd:43:d4:b3:26:6e:8b:d3:
                    ca:12:1e:4d:06:9c:fc:6c:48:27:e7:49:fd:32:9c:
                    d6:ed:c4:b1:4c:56:28:43:ab:89:4a:95:ea:a0:dd:
                    5a:46:a1:e1:72:6e:7f:53:16:b9:2f:69:c4:d1:37:
                    51:79:77:c9:a6:09:73:bf:6a:ff:92:d2:65:c4:70:
                    06:00:ab:58:5f:9c:e7:52:89:66:8b:08:e9:06:e6:
                    6d:f9:85:d1:3d:50:55:82:fc:a9:c9:4e:d2:ec:1b:
                    78:fa:b5:8f:89:f4:14:b0:8a:6b:98:7d:a3:e8:da:
                    27:16:83:a1:a3:e9:0c:43:ac:d9:ab:29:f6:56:6a:
                    a2:cf:d1:d1:b3:07:d2:c4:e9:71:89:1c:dd:a1:a1:
                    f6:cd:35:26:f0:c0:c5:7a:2b:82:80:c3:83:9c:ab:
                    b2:f5:d9:10:ee:d8:c5:ba:08:a2:91:d4:f6:c8:fd:
                    35:ab:b0:73:23:63:60:99:34:37:16:7f:58:fd:f4:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:53:0D:FC:A2:A4:9F:25:2D:BD:FA:2C:FC:89:E0:8F:F7:7C:7E
            X509v3 Authority Key Identifier:
                keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/W2VTDfyipJ8lLb36LPyJ4I_3fH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.220.0/22
                IPv6:
                  2a09:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:01:31:da:80:a5:c1:c7:f6:37:b2:04:69:d5:a4:0d:35:ff:
         fa:3f:6a:1d:ce:cc:c6:91:0d:19:cc:a6:9c:43:82:75:84:a5:
         28:1f:b7:35:16:af:0a:0b:e5:c7:f5:be:6a:71:d3:78:50:c2:
         cd:6d:78:48:4b:e9:cc:ca:8f:7e:a6:fe:25:58:c3:99:1f:d2:
         dc:d9:59:86:04:60:66:48:ac:f4:ed:ff:0d:ff:3a:d6:62:bd:
         a8:25:be:24:fc:87:b2:73:32:eb:90:63:38:a7:ff:c6:dc:14:
         37:26:dd:bb:0a:b8:f5:1a:9c:db:d0:2c:c4:22:fc:6d:63:a7:
         51:33:0a:60:c5:59:5e:2c:be:be:7e:1e:9d:f0:ff:f4:e1:b9:
         f3:48:79:9a:e4:84:df:6c:6f:4e:a3:27:35:3c:a0:0a:2a:c8:
         a9:c3:d1:c0:75:66:ab:c1:b5:87:1b:d8:9c:8f:a7:06:f7:44:
         ac:23:12:d2:25:05:db:4c:55:c6:ab:01:c3:c5:62:2d:fe:9d:
         14:c9:cd:77:de:2d:9d:bc:78:5e:56:46:46:ba:52:f6:cd:06:
         58:d4:bd:f8:86:c8:7f:a3:d0:ed:ea:35:c3:ff:57:33:44:14:
         5e:e7:ad:c0:e2:b0:a0:f9:d8:e4:8c:6b:95:0d:a6:0d:39:92:
         61:69:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----