Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/6c4wE7FNDVPUoJx2v2TTVZ2QFe4.roa
File:                     6c4wE7FNDVPUoJx2v2TTVZ2QFe4.roa (raw, json)
Hash identifier:          xq9ogdH7aYnYYmj90wc5rWVg3zB5ve18GgE4rFicKNU=
Subject key identifier:   E9:CE:30:13:B1:4D:0D:53:D4:A0:9C:76:BF:64:D3:55:9D:90:15:EE
Certificate issuer:       /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial:       032C4C55
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/6c4wE7FNDVPUoJx2v2TTVZ2QFe4.roa
Signing time:             Wed 16 Feb 2022 05:29:34 +0000
ROA not before:           Wed 16 Feb 2022 05:29:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210441
IP address blocks:        185.248.50.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53234773 (0x32c4c55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
        Validity
            Not Before: Feb 16 05:29:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9ce3013b14d0d53d4a09c76bf64d3559d9015ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:73:33:cc:de:44:a8:dc:3f:17:75:fe:db:
                    ae:ef:b3:d0:82:f8:4c:69:f9:24:74:f3:5d:e1:55:
                    a4:9a:51:40:26:3e:1f:33:78:69:80:99:8d:d5:eb:
                    28:e6:84:b2:54:12:d9:6e:97:f0:7d:39:a3:21:24:
                    a6:39:17:3b:b0:8b:5c:6d:9d:76:b1:f6:9c:04:ab:
                    48:7f:32:dd:ae:c4:7b:e4:dc:9c:c7:9b:0c:4f:1f:
                    53:d6:d3:f5:58:58:37:af:51:65:03:fd:01:fc:25:
                    f7:15:4d:a4:d3:e3:1c:34:ee:54:c8:d9:45:dc:b6:
                    ff:4d:1d:a1:6c:1f:21:8a:78:80:b2:d0:5e:d9:ad:
                    de:c5:76:e3:80:84:a5:05:f6:26:16:62:42:8f:cf:
                    82:cc:8e:53:dc:47:e8:93:d0:8c:4f:b9:17:d1:27:
                    1b:4e:a2:ff:46:f4:97:a2:8f:14:7d:4e:05:48:cb:
                    6c:77:80:72:fe:15:6a:ec:c6:a7:e1:99:5b:96:c1:
                    a3:f0:34:28:80:18:19:0f:7e:d4:c5:1a:0b:b8:de:
                    c0:6a:7b:25:a1:82:97:35:7c:ee:6a:a2:8c:4b:8b:
                    7d:c8:1a:c5:fd:dc:44:01:d8:78:eb:5e:f5:f3:9f:
                    e6:38:23:9f:67:3b:ba:bf:6b:95:43:0a:d4:af:45:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CE:30:13:B1:4D:0D:53:D4:A0:9C:76:BF:64:D3:55:9D:90:15:EE
            X509v3 Authority Key Identifier:
                keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/6c4wE7FNDVPUoJx2v2TTVZ2QFe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:55:15:90:9f:6c:06:63:23:08:b3:37:2f:00:e5:55:4c:0c:
         e3:e1:1b:16:e7:b5:58:57:a3:d0:1c:ed:93:45:41:dd:9c:ad:
         5c:8c:f9:63:6d:9c:98:a9:2e:a8:79:f5:ee:43:e1:45:df:92:
         17:70:0e:2a:8c:64:eb:96:11:21:25:48:6f:4e:a4:a2:ba:12:
         6e:32:5c:60:11:6a:35:fb:45:e7:24:88:40:ad:76:19:2b:ba:
         5a:ca:a0:2d:06:9d:89:9c:f3:77:36:42:65:7b:1e:e2:29:a1:
         15:37:d5:57:8f:e7:43:b0:0a:fb:cd:85:4a:b7:89:ff:be:70:
         41:ce:f8:cd:f5:53:85:38:6f:9c:4b:3d:e2:ad:14:58:33:74:
         a6:4a:79:d4:c3:dd:9b:eb:7e:23:ee:e0:04:bc:81:e8:06:21:
         75:19:7a:f5:58:7f:97:2a:14:6e:69:3f:3c:05:ca:86:e2:ef:
         54:42:98:09:b0:7d:d2:b1:6f:c3:62:1d:f5:e1:a3:38:07:f7:
         7c:47:02:df:7f:ed:99:f2:03:19:f1:8e:b0:9e:e5:a1:df:e0:
         16:a2:52:a6:5e:e8:77:3e:62:e2:fb:38:75:82:12:5e:90:de:
         46:60:de:68:a0:ab:93:2e:04:be:2b:d3:b9:32:ae:68:dc:a1:
         d6:42:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----