Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/YeNb2r5yZCOb11mYI9_RCrqk8dA.roa
File:                     YeNb2r5yZCOb11mYI9_RCrqk8dA.roa (raw, json)
Hash identifier:          MKhZw9CMl05l7nH8yQZjdzOpl/0pP/T6Um4qSs11hLQ=
Subject key identifier:   61:E3:5B:DA:BE:72:64:23:9B:D7:59:98:23:DF:D1:0A:BA:A4:F1:D0
Certificate issuer:       /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial:       1426CE48
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/YeNb2r5yZCOb11mYI9_RCrqk8dA.roa
Signing time:             Sat 01 Jan 2022 13:03:37 +0000
ROA not before:           Sat 01 Jan 2022 13:03:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56532
IP address blocks:        185.103.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338087496 (0x1426ce48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
        Validity
            Not Before: Jan  1 13:03:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61e35bdabe7264239bd7599823dfd10abaa4f1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:54:54:0e:7a:21:4b:2f:ec:49:bf:88:76:
                    a3:12:0d:aa:2c:22:e0:c1:04:03:b2:40:a0:73:4f:
                    60:23:a8:60:cc:ed:7c:64:81:4a:c1:00:1d:49:91:
                    4e:5b:73:67:85:f9:f7:79:4d:c0:f8:81:78:08:a4:
                    14:5a:9f:09:38:c2:53:60:9c:44:f6:b9:00:c5:de:
                    a7:9c:a3:68:04:c0:f8:27:3e:71:6e:14:07:20:2f:
                    c5:cb:0c:9c:2f:5e:4a:80:9b:0a:ab:76:b3:d3:26:
                    f6:76:6d:55:39:a6:e4:d6:83:1c:7c:3b:8c:f5:cd:
                    a9:e4:be:d9:fc:a3:b0:df:3c:d4:6a:ad:86:9a:51:
                    78:65:66:c9:7e:e1:04:fa:f6:ee:2d:e2:28:a7:37:
                    48:c3:1c:15:6b:dd:1e:a3:d5:13:ed:94:2c:25:d0:
                    9e:62:95:ed:f7:bb:dc:52:aa:bb:fd:6a:0f:5e:f0:
                    5c:52:a2:7e:18:5a:a7:57:52:ab:f6:fe:0d:9e:46:
                    ca:20:44:34:54:b6:31:f9:f0:10:18:80:bf:74:16:
                    e5:ae:a0:d9:9d:3e:79:ba:f5:1e:f9:97:be:eb:ce:
                    fc:8e:ad:0e:72:f1:85:98:9d:81:b9:5e:e8:51:4e:
                    6f:91:05:3d:d3:6b:35:6d:08:59:83:0d:4c:e5:aa:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E3:5B:DA:BE:72:64:23:9B:D7:59:98:23:DF:D1:0A:BA:A4:F1:D0
            X509v3 Authority Key Identifier:
                keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/YeNb2r5yZCOb11mYI9_RCrqk8dA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:19:78:7a:71:9e:9d:d9:c2:d2:c0:28:d4:f6:19:19:a5:79:
         48:45:08:7b:a8:73:24:ba:af:c0:fe:06:d3:7d:c1:92:ce:6c:
         db:b6:6d:72:4c:76:df:4e:8a:92:a3:98:ab:21:23:83:a0:f2:
         b9:db:91:3a:73:17:b4:a0:f0:c2:27:12:41:e6:50:f6:c5:4b:
         8e:ab:44:0d:cb:b7:0b:eb:5e:ad:3f:6a:10:c0:7c:a0:1e:38:
         1a:09:e7:35:33:4b:5c:63:8b:25:46:5e:5e:0e:49:3c:0c:3d:
         3f:43:59:2b:1b:7c:0d:40:52:58:53:ec:57:1a:1f:85:a6:04:
         71:62:ff:c0:5a:1a:dc:07:15:0c:8b:34:5f:7c:02:23:a0:95:
         87:78:7a:f3:4e:55:82:ef:35:49:72:e2:92:3a:d7:93:fb:98:
         4e:63:6e:dd:15:12:72:6e:e1:da:ff:b0:f3:d3:a4:7a:ad:1b:
         08:91:e2:3b:6a:a4:b0:61:39:3e:3f:e7:92:86:f0:6a:28:e0:
         a1:a9:f1:cc:29:e5:d6:83:75:74:a6:ac:bf:79:ef:aa:c0:0a:
         f7:66:f6:09:dd:ba:c7:aa:ed:67:b9:83:aa:39:87:48:3d:11:
         99:97:f0:41:d5:10:54:ce:f7:f1:e1:cd:68:6e:42:08:65:bb:
         e5:30:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----