Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/ZJKlP6REty9ta5KH6B7VDXz_5Bw.roa
File:                     ZJKlP6REty9ta5KH6B7VDXz_5Bw.roa (raw, json)
Hash identifier:          AkyvKaZ8H43N/7Gfe4GnYstHQzqRx8zCIv1HWsUFlog=
Subject key identifier:   64:92:A5:3F:A4:44:B7:2F:6D:6B:92:87:E8:1E:D5:0D:7C:FF:E4:1C
Certificate issuer:       /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial:       0909CDA1
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/ZJKlP6REty9ta5KH6B7VDXz_5Bw.roa
Signing time:             Sat 01 Jan 2022 16:05:15 +0000
ROA not before:           Sat 01 Jan 2022 16:05:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197704
IP address blocks:        185.80.35.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151637409 (0x909cda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
        Validity
            Not Before: Jan  1 16:05:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6492a53fa444b72f6d6b9287e81ed50d7cffe41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:b0:64:af:cc:df:86:5c:39:03:45:a9:a8:
                    ea:64:8b:f4:14:97:4f:77:24:db:a6:ac:54:5e:16:
                    d3:96:e3:91:b9:49:f5:eb:4e:95:4b:c9:65:c3:d6:
                    3f:f5:59:4a:91:bc:c6:11:48:0b:17:0e:db:45:27:
                    69:e4:36:b5:4f:5b:2c:c1:46:ad:6b:c5:e9:9e:8e:
                    22:bb:7d:15:8a:fa:b5:c1:82:01:e0:fc:53:79:41:
                    f3:72:66:a0:79:9a:fa:ac:f3:6e:2d:79:65:e4:7a:
                    62:41:ce:d7:e2:e7:3e:44:a3:90:ff:d6:25:a1:ed:
                    a1:79:65:00:10:ea:66:34:90:1e:30:13:0f:a2:86:
                    fe:ef:7a:10:c2:fa:97:a6:eb:ab:22:ca:3a:34:39:
                    3e:c3:9a:2f:35:ca:77:e6:ee:8b:c6:82:a0:c6:6b:
                    d5:e4:30:83:3d:d6:a4:61:1d:36:5f:be:c0:a1:a9:
                    b4:7a:e6:33:0e:68:57:68:a0:fa:cd:5b:20:84:3f:
                    19:01:31:83:27:26:6c:12:64:e4:53:b0:5d:68:69:
                    1d:b8:2f:31:01:df:3c:57:7a:d2:13:13:c4:72:9e:
                    5d:cb:54:cb:f3:c9:45:d1:ca:3c:69:a4:31:fc:4f:
                    30:77:2c:d0:b8:d5:2f:f2:48:78:78:e8:82:a2:6d:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:92:A5:3F:A4:44:B7:2F:6D:6B:92:87:E8:1E:D5:0D:7C:FF:E4:1C
            X509v3 Authority Key Identifier:
                keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/ZJKlP6REty9ta5KH6B7VDXz_5Bw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:38:6e:9a:89:b5:87:31:7d:ee:44:59:b8:5a:b0:f0:e0:ee:
         7b:6d:37:f7:d4:da:1e:b8:f7:97:21:28:90:79:a1:f7:3f:7f:
         6e:d0:16:9d:2a:bf:b2:ad:12:d2:17:89:3f:87:37:60:df:3c:
         d2:cc:20:48:6c:83:17:09:c9:d0:19:29:71:b6:f6:c4:22:04:
         b6:80:d0:a5:22:59:66:cf:8d:ca:d8:44:71:0d:6f:7f:bd:b7:
         e8:f1:50:11:97:14:48:66:44:7f:2c:63:3c:18:c5:86:0a:b1:
         14:5b:5e:2f:e2:62:67:89:77:b1:0a:0c:54:5d:41:71:6a:5b:
         2d:c2:72:ba:33:8a:b5:cb:15:83:4a:a8:9a:c5:31:0b:26:01:
         d6:61:40:55:f7:23:4e:7f:f3:08:68:31:47:d8:36:b9:4f:a3:
         90:2c:2d:08:35:88:d0:33:6c:bc:c1:fe:57:7c:60:14:fe:18:
         89:36:f9:bd:61:7d:2f:c2:68:2d:01:f5:78:dd:fc:df:14:71:
         61:26:e2:a7:c7:59:5b:74:63:5e:04:cc:45:06:fe:17:6a:d2:
         47:cd:9f:6f:38:25:ea:46:34:63:07:e4:10:50:13:0a:a3:4a:
         75:f5:f3:13:e0:d9:09:e8:98:d5:59:12:91:53:8d:26:e9:a9:
         38:ff:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----