Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/L7Aporb_ETFrGhpwZQ65s7HIwIc.roa
File:                     L7Aporb_ETFrGhpwZQ65s7HIwIc.roa (raw, json)
Hash identifier:          WWmmqdDCpEwxVl+HCVSIEJ9ENWDDVm1/HidUySPvhqw=
Subject key identifier:   2F:B0:29:A2:B6:FF:11:31:6B:1A:1A:70:65:0E:B9:B3:B1:C8:C0:87
Certificate issuer:       /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial:       08B9A309
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/L7Aporb_ETFrGhpwZQ65s7HIwIc.roa
Signing time:             Thu 12 May 2022 06:26:03 +0000
ROA not before:           Thu 12 May 2022 06:26:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57222
IP address blocks:        195.162.5.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146383625 (0x8b9a309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
        Validity
            Not Before: May 12 06:26:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fb029a2b6ff11316b1a1a70650eb9b3b1c8c087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:fc:de:96:80:67:b0:02:7e:8a:42:bd:dc:
                    41:61:2c:ce:f2:bb:64:28:c1:3b:ee:e5:d5:a2:ae:
                    2d:78:6e:f1:a9:84:95:a5:d7:65:92:88:b6:b7:de:
                    ce:9a:9e:d4:c3:1f:47:83:1c:8d:3c:48:a9:2b:8c:
                    fe:e2:22:c9:d1:78:8e:9b:88:51:fe:4c:da:92:20:
                    5d:48:ec:fc:5a:ca:0f:b3:ae:95:81:12:3c:79:c4:
                    e3:a2:31:fb:0f:4d:c5:66:88:f5:ee:9f:20:06:10:
                    df:05:ab:19:8c:36:ab:f8:4b:2d:ed:f3:9d:12:d2:
                    88:d4:0d:b1:ef:6e:1e:c5:33:1a:2e:b8:27:91:e4:
                    39:08:32:14:c2:db:e2:79:f6:fd:01:47:fc:35:c9:
                    83:91:9c:43:ad:6f:59:71:3d:ec:39:54:d5:43:25:
                    05:0a:15:13:86:e8:c0:53:02:3a:70:5b:15:b7:86:
                    bf:21:64:c4:08:fc:6c:c4:b6:de:3e:98:40:c1:e3:
                    fb:1d:01:78:1c:c9:95:82:20:c9:d5:f0:38:1e:a7:
                    df:65:c6:54:ad:1c:57:c1:9d:40:82:b5:bc:a5:13:
                    19:3f:a4:da:39:e5:25:96:35:31:fd:5a:8e:93:2b:
                    80:9a:11:44:c5:8f:cd:b8:a3:49:40:bd:a0:6b:49:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B0:29:A2:B6:FF:11:31:6B:1A:1A:70:65:0E:B9:B3:B1:C8:C0:87
            X509v3 Authority Key Identifier:
                keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/L7Aporb_ETFrGhpwZQ65s7HIwIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.162.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:86:16:ce:89:d2:75:47:66:8b:6d:9e:b5:19:19:58:e5:
         2e:c9:4b:f4:8f:fa:7b:3a:35:70:88:fc:38:11:63:6b:f5:53:
         70:2e:6e:c9:39:01:0e:b4:4f:5c:f1:dc:17:8f:39:47:e0:01:
         af:82:14:51:21:a5:06:55:34:0e:83:29:d3:36:63:6d:2c:f0:
         63:8b:28:84:bc:df:80:86:41:33:fa:c3:b9:3b:a6:82:28:e9:
         44:ae:ab:d6:c9:7b:ac:b4:4b:ad:a9:84:19:67:7a:e5:9d:76:
         05:2b:da:fb:d8:cb:ae:48:3d:1b:8e:44:1a:07:60:df:52:e9:
         95:34:64:8a:96:0d:df:9e:55:6d:b2:42:cb:8d:74:d1:23:04:
         7b:58:08:0c:44:84:62:ef:a1:78:5d:22:a6:9e:17:2b:d4:81:
         e0:31:17:cc:ce:12:51:77:fd:b2:31:3d:55:d4:0a:53:ad:bb:
         b3:fe:ff:e7:54:18:c4:c0:8e:ec:9b:49:0d:77:09:9e:16:e2:
         c6:5c:e9:4f:c7:36:e7:6b:3d:45:29:d2:a7:5e:f8:2f:29:83:
         8a:9a:2e:a3:a1:cc:17:16:f5:d0:91:b5:e1:fc:7e:3b:b6:99:
         07:76:dc:e0:c2:1c:63:fc:66:c2:80:bf:42:ae:f0:05:82:4a:
         4a:4c:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----