Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/qwLzgm0EEucmcDauteF3fsT4ZRY.roa
File:                     qwLzgm0EEucmcDauteF3fsT4ZRY.roa (raw, json)
Hash identifier:          ZhBx7d5HrXFordFyfsw2zRqzH/LW7yReOWEGud2n7O4=
Subject key identifier:   AB:02:F3:82:6D:04:12:E7:26:70:36:AE:B5:E1:77:7E:C4:F8:65:16
Certificate issuer:       /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial:       08F79B61
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/qwLzgm0EEucmcDauteF3fsT4ZRY.roa
Signing time:             Sat 01 Jan 2022 13:59:13 +0000
ROA not before:           Sat 01 Jan 2022 13:59:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209171
IP address blocks:        2.58.140.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150444897 (0x8f79b61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
        Validity
            Not Before: Jan  1 13:59:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab02f3826d0412e7267036aeb5e1777ec4f86516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:38:aa:10:d5:28:36:c1:e8:fa:fd:48:53:
                    6c:bb:1c:1b:99:2a:a3:37:72:9f:63:dd:b6:10:2e:
                    1e:62:53:c4:11:f0:9a:26:17:5f:fb:7b:07:9a:6b:
                    1d:9e:ae:8c:6e:0f:72:6b:74:a4:3b:4d:8f:d1:89:
                    69:92:39:99:4f:cf:ac:fb:93:37:6d:36:b4:aa:2d:
                    4a:2e:67:1b:07:00:ad:6d:91:9d:52:f3:03:65:06:
                    78:5f:98:f1:54:50:0e:3d:45:27:fc:b4:0a:d0:5a:
                    69:04:ea:b3:67:31:60:0e:48:75:38:99:60:32:4d:
                    46:52:4f:92:17:3d:46:a3:01:84:19:4f:08:9c:53:
                    cc:45:c4:ec:b5:90:eb:d1:21:de:16:97:27:aa:46:
                    be:69:94:ab:60:70:fb:77:bd:9a:79:cf:0c:75:03:
                    c1:81:f6:2c:d2:b2:cf:a1:7a:9c:2a:7c:e2:d0:dd:
                    1b:73:93:60:0c:52:9d:54:0e:ad:6f:81:87:62:f8:
                    4c:49:d1:9e:d6:c0:05:76:ac:f3:5d:66:ea:e6:c7:
                    7e:3a:8d:50:ca:73:03:3d:45:ca:53:e1:9a:94:b2:
                    ad:2a:a8:db:74:d2:e0:59:c9:b2:3d:5d:62:1a:ab:
                    01:36:88:a3:5b:b3:e1:ab:55:fd:8b:01:d9:ef:f2:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:F3:82:6D:04:12:E7:26:70:36:AE:B5:E1:77:7E:C4:F8:65:16
            X509v3 Authority Key Identifier:
                keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/qwLzgm0EEucmcDauteF3fsT4ZRY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:ea:22:4b:be:d2:8f:9a:3c:00:c2:d9:12:5b:4f:e4:3a:3b:
         51:13:e0:30:c1:c6:fc:d5:e5:80:fa:95:5d:ff:af:5b:13:71:
         ee:39:53:db:34:58:f5:9a:47:0c:a9:cc:9b:75:30:f6:16:1d:
         d3:e8:af:df:98:3f:31:d3:ec:8a:da:06:2c:14:69:9a:f5:cb:
         a8:80:18:56:b6:7f:6d:b1:f3:9b:b0:cd:1d:c2:59:3d:b0:d1:
         61:b3:07:d8:f5:b1:d8:3b:54:9e:37:2d:ee:09:7c:0b:cf:fc:
         99:5a:2d:4a:85:d8:f7:f6:27:9d:9d:e7:41:84:28:bc:7b:ba:
         ea:58:64:2c:eb:f5:81:a8:93:5c:58:3e:c0:86:ed:b8:1b:ce:
         ac:31:05:d8:6d:e3:f6:cc:c9:ed:ca:4b:fd:89:4a:81:76:d4:
         97:7b:1c:28:9a:99:be:d5:d2:f8:f3:e0:ae:06:a7:22:7e:38:
         74:8e:5d:94:41:43:b2:12:8d:01:3a:ef:31:f5:39:1f:cd:55:
         2d:cb:9e:24:bc:0e:21:a1:32:eb:1b:af:ee:8c:6c:ec:af:90:
         1c:59:ce:2a:00:65:9b:50:54:0e:f9:3f:7c:9f:a0:e5:a3:83:
         af:9d:90:1c:af:9b:f4:05:e8:93:0e:a8:16:8a:b8:9d:c5:73:
         90:31:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----