Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WVDrn05r-iIUTHmKa9GAJoxoztI.roa
File:                     WVDrn05r-iIUTHmKa9GAJoxoztI.roa (raw, json)
Hash identifier:          gn/lxkMMpiLISPLZaBem9lnSd87/wrIoLlxMOwRi0G0=
Subject key identifier:   59:50:EB:9F:4E:6B:FA:22:14:4C:79:8A:6B:D1:80:26:8C:68:CE:D2
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       16DFA5AA
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WVDrn05r-iIUTHmKa9GAJoxoztI.roa
Signing time:             Sat 01 Jan 2022 12:01:37 +0000
ROA not before:           Sat 01 Jan 2022 12:01:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199674
IP address blocks:        37.230.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383755690 (0x16dfa5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 12:01:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5950eb9f4e6bfa22144c798a6bd180268c68ced2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:ee:1f:84:f3:69:19:9e:81:c5:49:e5:c3:
                    8b:6e:0f:a8:de:19:73:ba:ae:d0:8b:3e:16:a4:0a:
                    6c:41:92:f5:5c:dc:ef:2a:ed:91:82:ff:c0:9d:6a:
                    e6:15:16:94:90:1d:fd:16:b3:a8:34:c0:57:1e:59:
                    61:65:8e:66:31:8a:fe:13:83:2f:ff:17:ea:b6:44:
                    83:d7:7a:2c:09:0d:30:78:10:7e:dd:68:2e:d1:59:
                    96:f1:50:70:ed:d6:c3:39:cb:75:27:c5:82:39:47:
                    41:36:8a:a8:85:c2:8f:68:2e:47:8f:e0:c9:04:1b:
                    24:2b:e3:e2:40:95:24:1b:d9:dc:24:90:92:19:ff:
                    3e:32:1f:a3:ce:0c:2d:16:74:a5:e6:4a:5f:9c:35:
                    76:d2:54:18:b5:22:85:be:ae:4c:b1:f2:05:a9:60:
                    ab:6b:f1:27:49:50:b0:d0:a6:50:bf:13:bc:b5:79:
                    a6:51:23:10:43:9b:96:14:c7:43:9f:7b:1f:6e:ad:
                    26:e1:57:83:7b:2f:ac:29:dc:7b:8a:6f:90:fd:93:
                    53:ac:28:6e:e9:54:f2:7b:27:fd:6b:56:2f:5b:61:
                    93:55:b5:c5:7a:0d:a8:f4:a4:39:ba:6e:b6:19:fb:
                    22:00:e5:3a:c7:7b:eb:3d:1a:fc:62:49:37:ee:b2:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:EB:9F:4E:6B:FA:22:14:4C:79:8A:6B:D1:80:26:8C:68:CE:D2
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WVDrn05r-iIUTHmKa9GAJoxoztI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:87:fd:ed:c7:60:ff:2c:68:0a:78:b4:b5:df:cf:bc:ce:48:
         aa:1b:a8:f8:1f:eb:b3:91:0f:22:1a:79:bd:f4:aa:22:7a:ff:
         27:4f:1e:9d:5d:bb:24:25:11:fc:8d:71:68:fa:00:e0:ec:7b:
         b9:94:4b:d0:1d:a4:34:f1:19:88:f0:a4:6c:d7:bb:81:35:69:
         2d:f2:67:d7:d0:9f:37:09:0a:21:e1:41:3c:7d:ef:af:8b:2b:
         7e:3e:5e:65:5e:1f:e1:6b:8f:7c:a2:bb:4f:6b:96:22:d1:a1:
         3c:52:cd:7f:69:fb:6e:11:48:2a:b7:7b:d0:ff:09:82:f7:aa:
         85:a9:4a:d1:e8:57:72:6c:60:5d:73:86:d9:2a:86:af:cf:d2:
         c5:87:f0:3a:84:f6:39:9a:a0:37:4b:6c:75:e3:47:61:fa:02:
         6c:88:c3:fa:f3:ed:b4:1e:8d:77:00:e2:49:04:47:12:0e:d3:
         56:34:98:b7:31:ce:4d:b5:26:5d:b8:99:60:17:12:b5:64:22:
         b5:12:db:74:dc:c8:31:a0:0d:3a:e3:32:01:a1:12:b7:fe:91:
         4b:07:c6:b8:59:ef:24:ad:07:6a:48:ba:9d:1f:00:78:a3:2f:
         6a:0c:52:7e:7d:76:a4:4e:10:39:38:5c:c9:57:aa:02:fc:54:
         fe:f8:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----