Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/yWngQJuhjMpIbgQpbgCxEBO0kKg.roa
File:                     yWngQJuhjMpIbgQpbgCxEBO0kKg.roa (raw, json)
Hash identifier:          OmhoisNHm4HoQ/m7oc7Bd0qj6/FaIQQR9/yekHvi/Lk=
Subject key identifier:   C9:69:E0:40:9B:A1:8C:CA:48:6E:04:29:6E:00:B1:10:13:B4:90:A8
Certificate issuer:       /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial:       0116AD
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/yWngQJuhjMpIbgQpbgCxEBO0kKg.roa
Signing time:             Wed 04 May 2022 06:53:17 +0000
ROA not before:           Wed 04 May 2022 06:53:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208626
IP address blocks:        185.64.76.0/24 maxlen: 24
                          2a0c:dd80:1000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71341 (0x116ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
        Validity
            Not Before: May  4 06:53:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c969e0409ba18cca486e04296e00b11013b490a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:53:7c:ee:53:f9:ca:66:33:d8:ec:e5:84:
                    21:58:aa:7f:ee:62:77:5a:0c:e4:05:5e:c1:81:02:
                    fd:7a:07:24:7e:c4:20:c2:19:d9:75:4c:a9:89:ba:
                    6a:28:f1:9b:51:82:97:89:d4:90:bd:8d:55:3e:d1:
                    2a:43:64:85:8c:75:1e:48:74:55:bd:a7:33:01:a0:
                    d6:62:d7:0e:75:35:c6:0c:2d:9a:d3:4a:d3:22:ca:
                    13:34:df:76:7e:0e:b6:8c:28:da:f5:b5:3e:b1:47:
                    bc:79:dd:d0:4f:21:a6:b9:f1:9e:bb:ea:33:5b:b5:
                    bc:b0:44:fa:47:0b:12:fb:4a:fd:04:2a:d6:9f:ad:
                    36:fe:d2:13:8a:79:18:c4:65:94:18:80:18:70:33:
                    95:43:1c:36:7b:c1:c8:31:c8:78:0a:57:d3:2e:06:
                    cd:f8:e3:a1:c7:81:41:f7:27:42:6f:19:39:19:07:
                    c2:8c:11:c0:ee:b4:e7:c1:06:3b:1b:bc:5c:44:8f:
                    ff:07:c2:65:20:05:3b:b0:91:4b:0f:d3:01:aa:dc:
                    28:55:61:1b:ca:5f:f5:47:4a:5a:08:ea:aa:51:99:
                    19:9e:e3:c4:37:8f:3c:0c:19:9f:f6:9e:7e:43:8f:
                    65:cb:0c:91:cc:33:81:d6:31:40:e6:95:86:c0:1e:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:E0:40:9B:A1:8C:CA:48:6E:04:29:6E:00:B1:10:13:B4:90:A8
            X509v3 Authority Key Identifier:
                keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/yWngQJuhjMpIbgQpbgCxEBO0kKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.64.76.0/24
                IPv6:
                  2a0c:dd80:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:90:d3:a8:0e:04:cc:2e:0b:ff:ae:e5:fe:29:c3:17:45:
         b1:73:a5:cf:8f:af:10:78:a8:8a:cb:07:55:d5:3b:ed:60:c3:
         ba:16:0d:3c:dd:23:6c:49:b5:60:eb:63:63:a3:5d:e9:98:ed:
         81:08:0e:6c:51:0c:d7:09:ed:73:a2:a7:3c:d6:b0:f2:52:0e:
         e6:e9:32:c5:dc:ab:b5:b2:94:30:01:e8:92:25:28:fe:57:57:
         1a:f0:49:d7:54:c5:28:5c:8a:92:7e:62:37:cc:f5:33:fb:f4:
         0b:82:56:4b:24:45:cb:9d:39:03:0b:b2:5b:ff:a1:51:c5:da:
         5b:0d:18:8b:0a:dc:9a:bb:4b:a9:73:ff:7e:8f:20:fa:61:48:
         db:96:9f:34:ff:b0:0e:ef:4a:1d:de:e0:c2:0e:78:64:05:68:
         7e:3b:d8:14:0c:66:88:ff:90:5a:d3:fb:1a:61:a4:fa:44:10:
         99:d4:32:8e:8a:48:63:61:92:48:03:5f:6f:f5:57:e4:d3:85:
         ad:53:2b:4e:bd:91:7c:f9:6f:1e:e4:e0:b5:b4:65:e8:f5:69:
         7d:a6:57:6a:15:1b:76:27:5d:91:31:80:64:d9:b5:d7:80:a2:
         a7:a9:39:88:b8:44:f7:c9:b1:3b:69:14:a6:c3:fc:26:a5:fb:
         a4:ad:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----