Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Co21onPJuL7ZIDchQWvZKU7Iav4.roa
File:                     Co21onPJuL7ZIDchQWvZKU7Iav4.roa (raw, json)
Hash identifier:          TS07KHI1G3FzUchqI7wPtegdgX01wpGVBwOcTFE1B4U=
Subject key identifier:   0A:8D:B5:A2:73:C9:B8:BE:D9:20:37:21:41:6B:D9:29:4E:C8:6A:FE
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       0183330B1DEEE8F22ABDF080F2D9074A7D1C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Co21onPJuL7ZIDchQWvZKU7Iav4.roa
Signing time:             Mon 12 Sep 2022 18:51:50 +0000
ROA not before:           Mon 12 Sep 2022 18:51:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204650
IP address blocks:        185.215.231.0/24 maxlen: 24
                          185.124.172.0/22 maxlen: 24
                          185.26.34.0/23 maxlen: 24
                          185.124.173.0/24 maxlen: 24
                          185.124.174.0/24 maxlen: 24
                          185.124.175.0/24 maxlen: 24
                          37.32.44.0/24 maxlen: 24
                          37.32.44.0/22 maxlen: 22
                          37.32.47.0/24 maxlen: 24
                          37.32.45.0/24 maxlen: 24
                          185.243.48.0/23 maxlen: 23
                          185.243.48.0/22 maxlen: 22
                          178.239.150.0/24 maxlen: 24
                          178.239.155.0/24 maxlen: 24
                          178.239.154.0/24 maxlen: 24
                          178.239.154.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:33:0b:1d:ee:e8:f2:2a:bd:f0:80:f2:d9:07:4a:7d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Sep 12 18:51:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a8db5a273c9b8bed9203721416bd9294ec86afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:a6:08:3b:f1:0f:3e:b7:a3:17:c3:ed:c7:
                    39:f1:90:18:c3:71:e6:95:c6:db:75:e1:d3:0f:21:
                    45:d2:e0:61:df:01:28:30:3c:27:ac:1c:ae:dc:f1:
                    6e:88:52:75:59:bc:28:2f:d7:c4:f9:ce:8e:6c:d9:
                    b2:99:fe:82:c2:df:2b:68:98:84:a1:07:0b:a0:35:
                    39:86:f2:45:f5:f1:3d:48:b2:96:d2:4a:a3:ed:6f:
                    34:be:fc:01:4e:ef:04:28:2d:f1:45:f1:0e:ba:bb:
                    bd:e7:98:77:31:84:40:b9:5e:3f:43:d7:c5:2b:01:
                    5b:d3:2a:88:ed:bd:e6:41:4e:26:55:a4:1a:fb:e6:
                    fa:b1:6c:e8:5c:ed:79:c0:cf:1e:4b:54:51:85:8a:
                    fc:21:21:75:f2:1d:31:73:ef:6d:48:07:d2:d5:b8:
                    37:74:07:11:1e:b8:15:dc:85:b0:24:ba:51:32:54:
                    ae:ed:58:d9:f1:82:68:ae:72:f9:7c:4b:5d:c8:04:
                    e0:7c:4e:10:4e:6a:55:53:08:7f:f5:d3:7c:5d:b7:
                    f2:19:2a:e7:e2:b5:55:59:39:4e:7f:80:45:be:f0:
                    b0:0a:41:fb:f3:8e:6f:2b:a0:2d:b2:2e:b7:c4:ff:
                    10:bc:23:11:76:3a:89:cf:77:32:f6:5a:6d:42:38:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8D:B5:A2:73:C9:B8:BE:D9:20:37:21:41:6B:D9:29:4E:C8:6A:FE
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Co21onPJuL7ZIDchQWvZKU7Iav4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.32.44.0/22
                  178.239.150.0/24
                  178.239.154.0/23
                  185.26.34.0/23
                  185.124.172.0/22
                  185.215.231.0/24
                  185.243.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:9a:53:09:e2:84:bf:b1:98:39:c3:55:97:a3:b6:53:c7:
         34:ee:e1:4b:de:62:85:36:aa:ca:58:e0:01:54:3e:60:47:8a:
         53:fa:cf:e9:05:a4:b6:07:a5:4e:fa:65:53:d2:10:b7:39:40:
         d5:3c:0e:f0:ce:bd:b3:b8:38:07:ce:9c:a5:d4:15:6f:cc:dc:
         67:f0:b3:55:81:56:1d:2d:d3:92:7d:cf:8b:6b:5b:1c:b0:01:
         d8:9e:f9:e6:34:28:30:6e:34:b9:8c:89:ab:27:95:aa:23:be:
         6d:2e:c5:14:c5:d9:23:fb:37:33:69:2d:ab:68:95:ac:d3:0f:
         0c:c1:44:d2:fe:51:cf:d4:39:42:95:90:7c:e3:f6:d8:52:a2:
         9a:5b:ee:4f:5e:d6:90:ff:71:47:fc:06:2b:2d:22:dd:64:00:
         58:c3:15:98:ba:d6:4a:07:22:d7:ac:e4:e3:ab:3b:81:4b:8f:
         a4:3f:f7:44:c1:bd:29:29:13:76:36:50:c3:50:85:58:d7:66:
         e0:a8:2c:63:60:c4:2f:e5:e3:a0:a9:2f:13:86:3c:18:4f:16:
         ae:ea:f7:a2:ca:3c:56:30:8c:70:5b:34:58:c5:a5:fd:c2:b6:
         30:1e:85:6e:f9:0a:ab:60:dd:fb:bb:f1:1b:f9:88:27:aa:a5:
         9f:95:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----