Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/c3WVdYqjZnnToqZhJmsc3rgB7KA.roa
File:                     c3WVdYqjZnnToqZhJmsc3rgB7KA.roa (raw, json)
Hash identifier:          8/IMIfLkfXhEQbnpAIog91zsUBfRV4+0+SIs9cNabWM=
Subject key identifier:   73:75:95:75:8A:A3:66:79:D3:A2:A6:61:26:6B:1C:DE:B8:01:EC:A0
Certificate issuer:       /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial:       0C7F5A4B
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/c3WVdYqjZnnToqZhJmsc3rgB7KA.roa
Signing time:             Sat 01 Jan 2022 14:02:38 +0000
ROA not before:           Sat 01 Jan 2022 14:02:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212674
IP address blocks:        185.1.189.0/24 maxlen: 24
                          2001:7f8:103::/48 maxlen: 48
                          2001:7f8:103::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209672779 (0xc7f5a4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
        Validity
            Not Before: Jan  1 14:02:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=737595758aa36679d3a2a661266b1cdeb801eca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:b0:e6:ca:f1:81:19:06:d3:5a:6a:1b:12:
                    15:f1:2e:8c:ec:53:49:6d:70:91:fd:e6:62:46:5f:
                    57:74:34:53:b8:63:27:a2:6f:c8:0d:ea:69:d6:a7:
                    f2:d6:11:d3:eb:9d:52:07:f7:37:c0:51:57:1f:de:
                    c7:5d:28:83:d6:49:da:0b:ac:49:04:4f:46:cd:d9:
                    ef:3e:65:79:7f:9a:ca:0f:97:06:e5:ff:9a:b6:af:
                    41:22:80:98:2e:1d:7a:3a:ca:0c:c5:3d:a8:30:a5:
                    12:47:65:0b:a4:ae:80:5e:03:76:08:90:24:b4:f4:
                    6e:77:4f:2c:3f:f9:27:db:6b:9a:74:79:6b:e5:75:
                    fd:f6:7f:96:6a:c9:04:c7:34:59:9a:87:27:2e:e8:
                    30:a3:1f:d7:e2:cf:07:48:6d:dd:54:28:01:b2:9a:
                    2a:52:cd:c7:34:5d:08:5e:e9:e8:98:71:f8:ba:9a:
                    63:6b:17:f9:2e:c2:2e:52:b6:d9:8c:62:2b:67:54:
                    56:48:52:73:b6:ee:e8:be:02:1b:e3:74:e5:01:cf:
                    bf:f7:a0:0f:db:a5:d9:25:a2:99:4c:3d:6a:62:c3:
                    d8:a8:12:2b:66:03:e5:a9:17:23:3a:d3:81:f1:a6:
                    48:a1:67:ee:0d:7a:30:f2:25:d1:38:71:57:88:79:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:75:95:75:8A:A3:66:79:D3:A2:A6:61:26:6B:1C:DE:B8:01:EC:A0
            X509v3 Authority Key Identifier:
                keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/c3WVdYqjZnnToqZhJmsc3rgB7KA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.189.0/24
                IPv6:
                  2001:7f8:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:6f:57:e0:20:4c:de:01:c3:c8:59:09:5c:75:7b:5a:25:45:
         09:55:8b:23:3f:ef:a7:1a:04:63:16:f3:10:ba:9f:24:93:e3:
         51:1b:6a:1f:a9:4a:b1:b8:8b:4b:41:bc:7b:c9:b7:1d:d3:21:
         fd:df:03:14:2d:3a:40:e9:cd:6d:be:11:8e:41:12:19:e9:bd:
         c2:a5:1f:8d:d7:fb:9e:d4:d1:a9:42:c7:19:f2:3a:04:54:35:
         bb:00:f8:ff:fc:72:c8:ed:15:c5:93:0e:c6:5f:a3:7b:02:81:
         d9:b3:73:0c:d9:13:57:93:cc:b8:77:e5:ec:27:26:bd:6b:18:
         dd:21:43:cb:56:15:03:b8:b0:d3:98:02:45:c0:e6:9a:f2:7c:
         f5:c1:72:47:c3:e1:c5:4a:64:5b:c6:2a:1e:30:74:55:45:77:
         7e:a9:35:c6:f8:0f:0d:df:b7:71:af:4c:19:ad:35:15:42:48:
         18:51:c1:b9:81:29:88:58:e7:d1:e5:88:5d:00:6b:03:04:f1:
         98:d7:b8:d5:00:27:8e:d0:7e:0c:69:f4:68:df:1f:97:f4:c6:
         9d:20:b5:9f:fa:86:31:8f:e1:1c:5c:04:e0:2d:7d:cb:2f:4d:
         17:17:37:54:00:19:39:45:76:d1:dd:0c:d1:74:a0:20:45:e8:
         0d:04:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----