Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/G0DsIje7g1kmgi7eT-5QHamaHiI.roa
File:                     G0DsIje7g1kmgi7eT-5QHamaHiI.roa (raw, json)
Hash identifier:          vGYMha2i/uc4jIQAcX1xT03g+GkgooviI0Eab96ecJM=
Subject key identifier:   1B:40:EC:22:37:BB:83:59:26:82:2E:DE:4F:EE:50:1D:A9:9A:1E:22
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0482F842
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/G0DsIje7g1kmgi7eT-5QHamaHiI.roa
Signing time:             Sat 01 Jan 2022 12:06:35 +0000
ROA not before:           Sat 01 Jan 2022 12:06:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21390
IP address blocks:        80.92.230.0/24 maxlen: 32
                          2a02:2b30::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75692098 (0x482f842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jan  1 12:06:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b40ec2237bb835926822ede4fee501da99a1e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:69:9a:12:6c:38:b2:e1:ce:bc:f8:d7:0d:
                    86:c6:cd:62:1a:f8:8b:3e:51:be:dc:83:f8:bf:6a:
                    e4:6b:a1:bb:11:e3:8a:6e:6a:4b:84:20:4e:c7:68:
                    e1:20:29:b2:d0:5a:97:c6:cf:02:6a:0e:8e:e5:0f:
                    ab:3a:b9:c1:76:cd:bd:f2:72:4f:66:77:64:27:4b:
                    b4:8d:06:6e:b5:f3:da:5e:ed:ae:f3:b5:04:dd:f9:
                    8e:2c:33:06:18:47:80:ec:83:3b:d6:57:36:9e:01:
                    4d:7c:48:ba:9a:44:bd:ab:e7:a8:a5:9d:90:d4:ef:
                    4f:34:53:09:6e:09:1a:3e:64:06:3d:2c:b8:41:39:
                    15:cb:ca:92:17:c3:d1:09:07:9f:bb:1d:50:16:21:
                    77:61:cb:e5:d8:11:78:ed:d0:ba:21:c8:86:63:13:
                    0b:6c:40:67:15:9f:5b:f5:e0:74:4e:53:12:2c:69:
                    32:e6:5a:8d:2f:19:d4:32:5d:9f:61:12:3b:4a:f4:
                    59:72:41:2b:0d:ef:8f:89:b4:6f:9d:61:87:ae:61:
                    16:89:7f:c8:d8:b1:f8:ea:de:26:61:2b:90:1c:87:
                    12:ed:87:25:71:41:f1:09:e6:1f:cb:1b:c2:b6:84:
                    88:2d:22:ff:56:cc:89:bf:60:78:12:5b:f7:0c:5e:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:40:EC:22:37:BB:83:59:26:82:2E:DE:4F:EE:50:1D:A9:9A:1E:22
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/G0DsIje7g1kmgi7eT-5QHamaHiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.230.0/24
                IPv6:
                  2a02:2b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:21:24:97:9c:7f:bb:45:b2:aa:fd:00:30:9c:e2:45:82:37:
         c2:9b:01:a1:f0:3a:73:00:9a:d7:ce:d3:d1:3d:ec:a5:4a:5c:
         ce:b1:3c:aa:a7:a6:e4:6d:9c:22:fc:3b:c0:88:25:6c:79:1b:
         f1:df:a1:f0:13:b7:e1:37:b5:1f:13:58:95:3b:25:30:9a:73:
         1e:28:71:d9:e2:b1:af:ac:21:ca:a2:78:3c:9b:11:a4:dd:56:
         da:b8:c5:41:ff:11:76:0b:b0:19:28:92:3c:d5:a3:26:84:4f:
         52:4c:a2:d7:3a:e9:ca:ee:24:7e:e0:1a:af:a4:47:20:34:42:
         01:bf:ae:12:f7:b8:da:cd:c5:b7:15:f8:fb:bf:7d:73:ac:7c:
         f9:10:52:e5:f4:66:9c:13:0c:8a:e9:9c:e9:79:ac:fd:53:66:
         d6:10:fe:ed:0d:b1:97:b4:7a:c7:0b:04:4f:fa:43:e2:cc:09:
         b9:e6:7f:e3:ac:fc:42:bb:98:17:2f:8d:86:30:0e:63:ca:03:
         dc:ad:a2:9b:77:59:11:e9:51:69:ca:c2:96:76:a1:64:d7:5f:
         f5:18:96:41:1a:fa:cc:6c:a3:7a:ee:1e:76:08:5f:38:80:e5:
         7e:fe:9b:af:60:d3:47:60:33:09:12:b8:b3:99:25:42:66:8f:
         9d:84:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----