Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/7oFqmWj5QT6nRAd8ZBWclA1yggk.roa
File:                     7oFqmWj5QT6nRAd8ZBWclA1yggk.roa (raw, json)
Hash identifier:          EisMJbw/194DT6WVrrPt6Up6iYYK/MTicAlWvO/Azfw=
Subject key identifier:   EE:81:6A:99:68:F9:41:3E:A7:44:07:7C:64:15:9C:94:0D:72:82:09
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       1574739C
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/7oFqmWj5QT6nRAd8ZBWclA1yggk.roa
Signing time:             Sat 01 Jan 2022 15:01:48 +0000
ROA not before:           Sat 01 Jan 2022 15:01:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35132
IP address blocks:        185.165.196.0/22 maxlen: 22
                          2a0a:2200::/29 maxlen: 29
                          2a0a:2200::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359953308 (0x1574739c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Jan  1 15:01:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee816a9968f9413ea744077c64159c940d728209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:34:43:1c:92:8d:da:2f:ec:e6:50:0a:7d:
                    00:e6:86:fd:d1:c6:1d:47:a5:e8:c5:de:97:1b:63:
                    6e:f6:86:cc:f9:0f:6c:e7:46:30:c8:60:29:8b:99:
                    01:8f:00:46:bf:49:04:3e:9b:cc:d9:9a:9e:48:72:
                    80:c9:7c:47:d4:df:5c:91:80:ce:e8:5c:90:15:af:
                    cc:4e:f1:92:40:b7:62:fe:ec:8c:24:a8:f3:3d:b9:
                    2e:fe:e8:a1:87:65:c2:67:b7:f3:79:ae:46:e1:b8:
                    e0:d9:3b:95:6c:d1:2b:14:ed:28:ce:70:14:3b:d3:
                    10:30:fc:8b:52:d9:76:ad:20:25:d3:3b:cc:71:cf:
                    af:26:8e:fc:24:80:6f:29:ad:f4:74:fc:5b:fa:51:
                    ff:00:1a:d8:2f:2c:8a:d1:65:ea:bb:92:86:60:87:
                    d6:d4:37:69:a2:5d:1a:11:7c:13:92:8f:75:a6:78:
                    20:02:4d:cb:45:13:f7:b9:4e:f3:50:ce:48:83:cc:
                    06:42:4b:ac:0c:3b:28:12:28:5a:ba:d6:58:0a:4c:
                    84:eb:00:95:d4:1a:c2:a6:3b:01:6b:5c:9e:03:22:
                    b2:eb:34:3c:d1:fe:d1:6d:09:b9:12:b5:65:9c:40:
                    53:72:e7:92:22:6c:59:ec:f2:6c:86:2b:ff:37:7a:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:81:6A:99:68:F9:41:3E:A7:44:07:7C:64:15:9C:94:0D:72:82:09
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/7oFqmWj5QT6nRAd8ZBWclA1yggk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.196.0/22
                IPv6:
                  2a0a:2200::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:48:93:29:ea:95:a0:03:19:e7:7f:d9:84:65:b0:77:47:09:
         17:0e:35:9e:21:64:a1:89:5d:a4:44:2b:15:6d:2e:7b:d7:f4:
         77:ae:f7:cf:6e:4a:81:15:fa:f8:37:84:44:a8:b9:21:9e:19:
         d8:57:a1:43:72:19:c0:90:b5:64:a3:e4:60:fa:5c:2e:74:d4:
         38:f7:d0:29:1c:bd:f5:6c:2c:7f:75:a3:2e:88:ad:47:a7:7a:
         f8:02:55:64:bc:6d:43:0c:2e:5d:6d:4c:98:b4:e5:e1:27:cf:
         7e:0c:be:dd:14:e9:70:26:bc:87:b5:22:82:66:7d:cd:ba:24:
         b8:02:d7:a0:ed:40:33:0d:c4:b9:4a:b8:bb:a3:2e:e7:0b:81:
         00:a4:7a:8f:ec:04:38:cc:21:72:6b:42:8b:db:4d:be:9b:43:
         3e:18:79:7d:eb:33:10:c3:36:42:e1:f9:c2:73:4e:33:f8:de:
         3a:d3:3e:99:4e:bf:1a:c3:46:63:dc:cf:d3:84:bf:70:85:98:
         7a:26:53:61:e6:e1:cb:28:43:96:74:34:eb:78:90:e8:61:64:
         9f:a7:d0:35:23:66:c3:2f:29:49:c1:c9:a8:14:1b:a5:d2:c2:
         fe:1a:7d:27:0c:bf:d2:ca:53:71:21:14:9d:42:99:5e:33:2c:
         e0:e7:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----