Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/bZWRxEKHOvNTzJM-uv_ojtfl4CM.roa
File:                     bZWRxEKHOvNTzJM-uv_ojtfl4CM.roa (raw, json)
Hash identifier:          2KYyzm2KR9Nv2Y8zSqNxTiyy4PCohKNxY8f6O/94xPY=
Subject key identifier:   6D:95:91:C4:42:87:3A:F3:53:CC:93:3E:BA:FF:E8:8E:D7:E5:E0:23
Certificate issuer:       /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Certificate serial:       0182582172080976FAB9D331570E8E759671
Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/bZWRxEKHOvNTzJM-uv_ojtfl4CM.roa
Signing time:             Mon 01 Aug 2022 06:39:23 +0000
ROA not before:           Mon 01 Aug 2022 06:39:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12853
IP address blocks:        185.251.4.0/22 maxlen: 24
                          2001:940::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:58:21:72:08:09:76:fa:b9:d3:31:57:0e:8e:75:96:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
        Validity
            Not Before: Aug  1 06:39:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d9591c442873af353cc933ebaffe88ed7e5e023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:41:60:99:56:7c:60:2f:d0:05:8a:18:32:
                    91:40:14:a3:36:18:f5:c5:90:05:d4:c3:04:84:aa:
                    7d:87:1c:22:da:45:ce:f3:2c:96:80:e3:aa:fe:4e:
                    29:8c:45:b2:cf:50:ea:d9:47:e4:82:05:5b:73:b1:
                    74:86:c7:54:7e:28:72:bc:9f:dd:d1:58:45:c5:61:
                    c4:04:a6:d8:36:08:8f:2a:f5:5b:38:65:24:ca:3f:
                    11:95:9b:f6:5b:fe:9b:8c:fa:a2:3a:44:d3:cc:13:
                    90:88:37:05:2c:cd:8d:c5:0b:c9:b2:4a:3b:62:22:
                    5f:74:aa:96:08:a5:ae:21:59:8b:4c:a6:f9:a6:1a:
                    e9:a4:f9:fd:6d:9e:e4:f4:bc:f9:93:36:79:48:6e:
                    81:cc:b0:3a:80:f6:b9:fa:e0:65:c5:98:0d:9b:6d:
                    03:45:ff:33:79:01:e1:ba:1a:36:ec:ba:26:35:5e:
                    ee:22:d7:64:a2:97:02:6d:92:8d:20:1b:8e:51:d6:
                    d4:b5:02:77:b1:77:7b:be:89:67:16:88:a3:20:d8:
                    ab:92:af:81:fd:ce:09:34:89:4c:ed:36:03:f4:18:
                    88:44:c3:05:2f:d3:84:45:0a:0d:e1:6b:93:66:0c:
                    0c:57:3f:ed:85:ee:d4:4c:6a:a9:b0:3d:45:e0:82:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:91:C4:42:87:3A:F3:53:CC:93:3E:BA:FF:E8:8E:D7:E5:E0:23
            X509v3 Authority Key Identifier:
                keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/bZWRxEKHOvNTzJM-uv_ojtfl4CM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.4.0/22
                IPv6:
                  2001:940::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:a7:cc:12:ec:c8:e1:f6:64:81:2f:1e:88:7c:72:1a:6e:5c:
         b9:37:25:3b:a6:5e:8e:63:af:5e:ad:ce:85:ac:28:99:da:27:
         94:06:53:31:94:09:df:82:73:b9:7c:e8:5e:65:5e:60:36:c4:
         ae:40:15:97:af:7d:da:3e:58:86:d4:17:54:5f:f5:66:a3:78:
         a2:59:0d:2e:7a:93:32:31:8e:35:54:9d:69:e2:b1:01:ca:15:
         13:97:63:e5:aa:49:5a:e3:d0:35:87:e2:ff:55:f2:08:87:69:
         61:88:4f:1a:a7:2c:b0:35:b6:ea:9e:b9:68:e2:75:8d:73:d5:
         91:59:25:2e:53:86:7a:2c:50:10:19:08:86:46:da:3d:c4:b4:
         84:d7:80:6c:b9:3d:68:81:a5:50:69:86:cf:63:3a:8b:a9:c9:
         79:b1:9e:45:ba:b2:6a:c1:5c:7a:4c:f2:2d:9d:0b:aa:72:7d:
         ad:1e:51:db:02:a7:fe:03:23:ad:80:f8:8d:47:aa:ec:78:8b:
         76:7f:6e:1f:7c:92:62:30:b1:f8:9d:ed:fc:69:01:bb:c0:dc:
         1d:d5:d8:e3:96:5b:12:87:d8:eb:c1:e4:65:df:c6:99:f7:15:
         1e:50:fb:53:b7:c7:18:d7:fa:b4:39:e4:88:83:c6:ee:5b:d9:
         dc:c6:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----