Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa
File:                     FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa (raw, json)
Hash identifier:          kBL8gqH76romQDAFI1n/id2cr+abcLj/6Ra+UT6Y6Is=
Subject key identifier:   14:C6:C9:4C:CF:3E:06:FF:0D:05:8B:51:20:8E:87:55:62:48:3D:6A
Certificate issuer:       /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial:       03FD6714
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa
Signing time:             Sat 14 May 2022 05:05:44 +0000
ROA not before:           Sat 14 May 2022 05:05:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210441
IP address blocks:        185.248.50.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66938644 (0x3fd6714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
        Validity
            Not Before: May 14 05:05:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14c6c94ccf3e06ff0d058b51208e875562483d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:33:dc:97:a1:08:42:81:b9:af:91:e0:2e:
                    b0:e1:76:13:45:21:7b:c8:f6:5e:fd:ae:2f:85:e6:
                    da:6e:b2:67:26:30:66:84:8b:e3:56:b2:3f:c5:d0:
                    d6:6d:fd:11:d3:a8:71:02:ef:29:bc:c8:2f:8e:13:
                    8c:ec:5d:7f:70:e4:d4:72:50:6d:91:ea:ec:58:10:
                    cb:e9:ca:7d:ec:ce:77:dd:b1:fd:f8:d1:d5:7f:1a:
                    15:a3:eb:39:56:46:f0:13:a5:b7:12:a7:df:f6:c0:
                    02:34:45:bd:88:10:57:7a:21:cf:04:1b:42:98:db:
                    10:3b:05:32:0d:80:28:81:ac:d6:3e:b6:34:90:c2:
                    c1:8d:34:a1:33:fd:c7:14:c9:fd:ea:a6:38:49:65:
                    36:2d:ac:a0:2e:b3:a2:59:81:1f:11:63:bf:b5:c3:
                    6e:3c:44:b4:ad:5c:70:f7:17:69:20:ee:4b:d1:b2:
                    d9:e8:c4:78:f8:f1:9e:3b:11:85:7f:9c:2c:5a:56:
                    ab:83:a5:c7:dd:9d:84:c0:cf:f5:43:32:2b:9b:e4:
                    7b:34:70:09:c5:47:f0:a9:f7:81:7e:dd:e1:03:b5:
                    d0:22:ab:da:61:72:a8:da:06:92:89:14:7c:f6:ef:
                    e4:f5:2b:c2:b5:4a:7b:b4:ca:17:15:f0:bc:12:65:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C6:C9:4C:CF:3E:06:FF:0D:05:8B:51:20:8E:87:55:62:48:3D:6A
            X509v3 Authority Key Identifier:
                keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:a6:ef:e5:cf:0f:2a:f0:9a:cc:e4:d3:b3:7b:f8:4a:c5:d8:
         be:74:fb:d7:88:00:44:c5:f8:d3:23:e9:ec:f8:f9:f1:4b:31:
         69:7a:d0:62:00:8a:28:87:28:c2:04:12:c3:8f:c1:37:ac:10:
         71:f0:7f:2a:3c:50:9a:7e:01:13:49:eb:db:22:86:aa:f8:cf:
         d6:bf:e5:1b:6e:89:af:59:31:2b:1f:6b:19:1c:bc:71:e4:33:
         28:c4:77:6f:f1:67:7e:8c:7e:5a:0d:94:77:34:a6:83:af:f7:
         77:6b:82:b7:cd:32:d7:b4:06:e2:50:2d:5c:ef:d2:6e:a0:c7:
         a9:f7:36:67:22:fb:cf:03:28:b3:33:78:55:63:5a:35:3a:6a:
         62:f3:7c:f4:94:e3:15:f8:46:8d:3e:51:19:4d:3b:63:41:4d:
         aa:70:cc:e0:46:94:b1:4f:f8:10:82:70:3e:b0:a1:ce:a9:1a:
         bf:08:e0:02:ef:e7:fc:a6:48:70:2e:e0:79:73:ff:ae:32:64:
         bd:18:1e:72:e3:a8:df:a7:17:f9:2d:82:70:99:db:ca:89:4c:
         6b:97:60:6d:c8:b8:62:2a:da:fc:4e:ac:84:1d:5a:96:e9:f5:
         63:da:be:a5:fc:01:89:c9:86:8a:9a:f3:0f:de:12:8b:cc:ca:
         c7:e0:5c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----