Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/s6sLi9NC0IpawS9G7G1rSz56tPw.roa
File:                     s6sLi9NC0IpawS9G7G1rSz56tPw.roa (raw, json)
Hash identifier:          0Chtif/AW1NW/Tw/7IuA5PUJeUPaaFmHi6DxN51OTWw=
Subject key identifier:   B3:AB:0B:8B:D3:42:D0:8A:5A:C1:2F:46:EC:6D:6B:4B:3E:7A:B4:FC
Certificate issuer:       /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial:       04F06BAE
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/s6sLi9NC0IpawS9G7G1rSz56tPw.roa
Signing time:             Sat 01 Jan 2022 09:56:07 +0000
ROA not before:           Sat 01 Jan 2022 09:56:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209865
IP address blocks:        213.184.76.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82865070 (0x4f06bae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059f516802c261309a61048772e6eafd5867a990
        Validity
            Not Before: Jan  1 09:56:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3ab0b8bd342d08a5ac12f46ec6d6b4b3e7ab4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:af:76:b9:9f:a6:6e:3e:b8:5d:5f:d4:26:
                    7b:06:82:cc:54:3d:f9:04:0f:df:df:5b:80:e5:7b:
                    6b:7a:7c:ca:47:f5:06:34:c1:d6:e2:45:29:8e:e1:
                    77:57:d9:36:01:dc:1c:86:42:77:ae:3e:2d:c9:8b:
                    57:d3:d7:de:9a:e0:96:47:66:0b:18:9d:88:2f:95:
                    2b:62:c1:08:33:9a:83:1b:33:ce:08:61:71:14:4d:
                    e5:69:9a:5b:b7:0e:16:64:d3:46:51:1b:87:c0:31:
                    0a:8d:6b:e0:a2:9b:48:38:3b:31:28:31:8b:8a:35:
                    d4:7d:6f:fe:40:8d:50:b3:d5:6b:79:b9:3c:91:2a:
                    7c:ca:a9:ab:36:d0:89:eb:cd:1f:42:60:a9:2d:78:
                    ef:d7:30:0a:ed:49:22:b3:85:ef:75:41:f6:a8:13:
                    54:53:d2:a1:2f:b0:18:ad:08:16:5e:bc:a8:a8:f5:
                    07:13:74:fc:b3:a8:54:50:11:bb:1b:eb:77:1a:57:
                    7c:4d:b6:7e:85:ef:74:ea:b7:58:41:68:f9:ec:5e:
                    0a:ce:92:8a:7d:b0:53:37:f8:63:25:f8:3c:14:bf:
                    97:3c:63:c3:44:c1:a9:bf:60:73:8d:9e:56:7f:d9:
                    02:98:d9:f5:5d:45:e9:96:8c:ec:f1:bc:e1:eb:f3:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AB:0B:8B:D3:42:D0:8A:5A:C1:2F:46:EC:6D:6B:4B:3E:7A:B4:FC
            X509v3 Authority Key Identifier:
                keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/s6sLi9NC0IpawS9G7G1rSz56tPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.184.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:eb:eb:35:3c:0d:1d:50:67:b6:73:10:f5:03:46:63:cb:
         8e:00:15:0a:12:ab:b8:72:be:7e:d6:ca:9d:41:af:32:a5:58:
         1e:89:88:d2:0e:02:cb:a1:01:49:fe:f2:92:93:4b:25:b4:0e:
         fa:01:1c:7d:1d:f9:b4:f2:12:93:ba:bb:cf:b6:47:d2:0a:26:
         d7:32:ae:9a:9c:dd:72:6c:b8:f7:0b:c2:c5:61:04:42:ea:bf:
         14:42:a6:26:3c:a9:36:04:d7:74:c9:3f:5b:ef:67:6e:6b:0a:
         dd:0e:a6:60:dc:ba:fd:4f:a0:b2:f9:5e:af:8b:d9:61:18:cd:
         c2:08:24:43:63:b1:16:1c:aa:6a:fd:dc:2d:29:2f:01:c4:9a:
         5e:c5:53:f7:ef:de:fb:24:2a:ac:47:9a:28:64:1e:90:82:30:
         a1:8b:ee:cc:d0:43:72:3d:eb:05:64:f4:f3:c5:93:30:35:d9:
         08:b7:ee:91:5f:65:1b:69:f8:fc:cc:e8:33:b2:8f:1f:95:65:
         16:b5:2d:73:28:bd:0c:34:e2:d5:6c:2e:e4:0f:6c:da:58:cf:
         77:72:16:c8:8e:d2:75:82:a0:68:0a:9c:5b:b6:a8:56:f9:25:
         43:76:1a:14:0c:ea:0a:61:66:bd:37:ce:0a:69:d1:a2:39:91:
         50:1a:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----