Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/epCUSjD0MAJtCEFxEocdNLNgWEU.roa
File:                     epCUSjD0MAJtCEFxEocdNLNgWEU.roa (raw, json)
Hash identifier:          9mADpsCu7+SzFV8jnbOVEF9LixD9xXkrthBh9VhgIm4=
Subject key identifier:   7A:90:94:4A:30:F4:30:02:6D:08:41:71:12:87:1D:34:B3:60:58:45
Certificate issuer:       /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial:       08E3FD8A
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/epCUSjD0MAJtCEFxEocdNLNgWEU.roa
Signing time:             Sat 01 Jan 2022 07:58:48 +0000
ROA not before:           Sat 01 Jan 2022 07:58:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24961
IP address blocks:        185.144.236.0/22 maxlen: 22
                          2a07:4400::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149159306 (0x8e3fd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
        Validity
            Not Before: Jan  1 07:58:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a90944a30f430026d08417112871d34b3605845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:94:d3:1c:2e:e5:01:09:fb:ad:d3:90:9a:dc:
                    d3:a2:06:6f:e6:5c:a1:4a:72:6e:b7:e8:81:95:90:
                    1f:56:ed:73:3c:02:ce:15:cd:d3:3b:1b:87:29:5c:
                    9a:24:fe:80:9f:0f:b8:cd:6d:b8:5b:c0:37:27:ca:
                    2b:25:a1:05:52:bf:0e:ea:59:cc:c5:d5:0a:33:7d:
                    01:76:46:79:b9:8f:99:09:9c:b0:5d:88:95:41:97:
                    8f:5a:ea:6b:e4:8f:d5:8b:30:4a:7b:87:a9:dd:12:
                    47:6a:15:7f:bc:a5:14:f1:41:a7:12:e6:0c:18:02:
                    0d:fd:1f:b7:9a:8a:2a:3b:fe:41:08:7a:2c:43:26:
                    25:58:ff:4e:3c:68:0d:e2:be:65:8d:0c:19:01:89:
                    a5:f6:7e:d1:ec:72:03:be:c6:85:2e:f9:79:a8:50:
                    7f:b4:53:18:a1:89:d1:6c:aa:6d:2e:d8:88:46:99:
                    91:f0:7b:e6:7e:2e:cb:28:7f:c2:a7:8d:4f:ec:ff:
                    29:c6:25:dc:be:c9:8b:6b:36:26:d3:8d:4a:ec:0f:
                    e5:c7:81:bd:af:51:33:93:aa:cd:1d:f3:5f:db:12:
                    c2:f1:66:b0:b4:5f:ad:f4:e7:ff:ba:8b:63:5b:5e:
                    97:45:fb:b9:d8:af:20:85:56:db:e7:9f:34:ef:2f:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:94:4A:30:F4:30:02:6D:08:41:71:12:87:1D:34:B3:60:58:45
            X509v3 Authority Key Identifier:
                keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/epCUSjD0MAJtCEFxEocdNLNgWEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.236.0/22
                IPv6:
                  2a07:4400::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:93:dd:c2:5b:9e:80:81:54:ef:d9:be:da:fd:e8:3f:a9:
         fa:54:1b:fc:06:5f:0d:9a:f9:bc:c4:32:5a:e7:ca:6d:6b:d7:
         2c:e3:c4:50:03:60:c3:d3:a6:2e:f9:08:9b:0d:4e:f9:31:29:
         ba:74:fc:6c:50:5e:3b:ff:f8:6d:39:0f:99:65:87:5e:dc:98:
         4f:a4:a3:9a:8c:b0:a0:55:e5:eb:73:e3:a0:67:da:3c:80:e4:
         0d:27:f7:2c:6f:6b:d2:86:9f:fe:a1:08:37:39:84:8a:4f:e8:
         29:5d:aa:6e:b5:65:3c:5b:64:d7:48:06:82:86:a1:4c:aa:2b:
         44:94:c2:b5:4d:04:bc:04:50:52:39:01:83:ea:03:c2:bb:bf:
         46:17:a7:ad:2b:83:99:96:0e:c5:72:48:80:0e:c5:37:29:45:
         64:e0:3c:6d:3c:c8:7b:d5:bd:cf:45:d8:da:97:f5:20:f3:b9:
         c0:3e:52:19:84:34:3f:61:7a:f1:a2:c5:f8:55:13:a9:6a:01:
         5f:8e:de:d1:9d:52:51:bf:37:07:f4:bc:3f:98:40:0c:0d:7f:
         3b:0d:86:cd:d3:c9:88:7a:12:72:a1:85:fa:eb:a2:52:fc:38:
         de:b5:c3:e8:5c:1d:4a:89:62:bc:31:1f:14:cb:ba:de:d7:37:
         8c:b9:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----