Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/V6VsfSqOax6JzdIwanayenRYtxc.roa
File:                     V6VsfSqOax6JzdIwanayenRYtxc.roa (raw, json)
Hash identifier:          yGCUyFBB4LoRhMYS8hgbWsF0weDOZWawebfbY+O2jWE=
Subject key identifier:   57:A5:6C:7D:2A:8E:6B:1E:89:CD:D2:30:6A:76:B2:7A:74:58:B7:17
Certificate issuer:       /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial:       032A47DF
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/V6VsfSqOax6JzdIwanayenRYtxc.roa
Signing time:             Wed 16 Feb 2022 05:27:14 +0000
ROA not before:           Wed 16 Feb 2022 05:27:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.248.48.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53102559 (0x32a47df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
        Validity
            Not Before: Feb 16 05:27:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57a56c7d2a8e6b1e89cdd2306a76b27a7458b717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:f0:18:bb:fb:a1:48:dc:71:4b:71:93:70:
                    84:e9:97:2a:65:ee:e3:a6:29:bd:60:07:35:51:72:
                    ce:c9:ec:1c:b9:a0:b9:85:6a:1d:81:4b:49:5a:0e:
                    7e:d2:fe:54:0f:27:d8:42:b9:af:d5:e8:ed:2d:23:
                    88:87:b9:76:27:06:5e:9c:11:e2:e5:c9:87:11:f0:
                    15:4e:50:6d:93:c5:c7:31:5f:f0:e4:2a:65:f2:70:
                    8b:fd:a2:9d:ee:79:6a:fe:44:3e:91:76:f4:56:1b:
                    97:bb:56:28:4b:c2:aa:77:16:56:5d:31:7f:6e:d5:
                    d4:a8:2b:01:63:24:07:15:22:f8:89:38:dd:43:52:
                    1e:ba:13:a3:4d:8a:b6:74:c7:4b:0d:3b:85:5f:3a:
                    8b:24:50:50:ab:9f:77:6b:69:e0:53:ab:02:ef:3d:
                    1c:b6:33:68:77:5c:e4:f5:9c:79:30:ff:f9:8a:fe:
                    79:20:74:01:b7:de:c4:10:63:b3:e8:0e:69:fc:00:
                    22:bd:de:e0:d9:e7:0f:1f:97:49:83:fe:44:43:06:
                    3c:9a:f0:8a:00:76:9d:7a:7c:ec:9d:13:4b:45:b8:
                    a0:4f:e0:30:f8:e0:b1:04:3f:d6:6d:cc:47:7d:c1:
                    dc:57:31:02:a0:d9:e3:07:52:59:cc:15:1b:95:c4:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:6C:7D:2A:8E:6B:1E:89:CD:D2:30:6A:76:B2:7A:74:58:B7:17
            X509v3 Authority Key Identifier:
                keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/V6VsfSqOax6JzdIwanayenRYtxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:df:98:a9:21:f8:ed:29:1a:bf:24:71:90:21:c6:b4:7c:
         ff:9d:57:ca:46:fa:7f:26:42:0b:ed:e2:f2:6a:3e:6c:5c:0a:
         b3:8a:85:62:a1:c4:9b:a4:9d:c7:90:47:4b:8b:56:a2:e6:6c:
         f6:57:d3:db:83:a8:2b:72:cb:5d:4a:10:16:de:df:3c:8a:4b:
         6e:24:b1:99:11:cd:54:dc:0c:60:64:80:25:55:a5:3d:db:28:
         13:ae:9a:46:8b:ce:ce:ac:8b:df:89:b2:8d:90:13:16:b2:0c:
         e3:c4:14:ba:e6:32:90:11:51:b8:0e:d2:07:e6:f6:28:76:6e:
         b9:b6:ec:1b:81:4f:cf:60:19:14:f1:bf:be:73:1d:a6:98:e3:
         4b:dd:e0:c9:a3:67:a1:bc:77:1d:ed:51:28:ad:d4:67:68:47:
         9c:04:f6:3c:36:11:f9:7b:2e:f0:dd:1f:a5:68:d8:e3:09:57:
         08:ee:5a:4c:14:9a:b8:8d:36:13:c1:4b:c9:11:a8:1e:b8:d9:
         9a:3e:c5:94:08:9b:99:0e:8c:68:2d:5b:f5:6e:38:77:84:22:
         73:72:b3:aa:f5:d9:71:d5:36:18:a4:ee:e8:da:1c:c3:f9:4c:
         13:0c:7c:17:58:ea:60:8b:d6:66:f4:4f:29:d7:aa:c3:68:2a:
         fb:02:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----