Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/XbuRgryKUbvm8SuPJSKnc0re5sQ.roa
File:                     XbuRgryKUbvm8SuPJSKnc0re5sQ.roa (raw, json)
Hash identifier:          4k/RZNIwVC30wvo3WW5kzaUEJnWDuf7/ifibcc6lE+s=
Subject key identifier:   5D:BB:91:82:BC:8A:51:BB:E6:F1:2B:8F:25:22:A7:73:4A:DE:E6:C4
Certificate issuer:       /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial:       0F20A665
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/XbuRgryKUbvm8SuPJSKnc0re5sQ.roa
Signing time:             Sat 01 Jan 2022 12:03:15 +0000
ROA not before:           Sat 01 Jan 2022 12:03:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51055
IP address blocks:        185.194.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253797989 (0xf20a665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
        Validity
            Not Before: Jan  1 12:03:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5dbb9182bc8a51bbe6f12b8f2522a7734adee6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:03:87:56:ad:61:de:ad:ca:80:66:53:f2:
                    4b:c1:d4:b5:5b:2e:1b:e9:42:9b:31:51:b0:14:90:
                    fb:9e:9b:ce:69:36:82:dc:0a:16:da:c2:60:63:de:
                    14:91:71:85:db:0c:3c:7b:c4:d8:43:fb:de:e5:13:
                    68:ac:02:7d:1a:48:76:4d:43:85:89:c0:a3:9a:9f:
                    4e:70:01:e2:04:34:93:c5:fd:26:bc:f9:e7:33:32:
                    05:49:b0:59:f3:44:b1:6b:e4:30:f4:0b:f4:c0:b8:
                    7a:8e:4c:98:93:4d:83:a2:fc:78:ee:84:43:53:e2:
                    ec:9a:e2:48:5f:68:d7:da:2c:81:2a:4e:ed:23:7a:
                    5b:48:cb:0a:ed:80:46:e7:8e:72:a2:44:d1:d2:ea:
                    e4:00:83:5b:e2:82:ae:38:58:16:1d:04:1b:3f:6a:
                    0b:37:08:cc:1f:58:c5:3f:de:6e:02:67:51:10:8f:
                    03:2d:89:30:08:7e:7b:a6:44:bb:c2:29:67:de:fc:
                    14:93:7a:46:12:3f:38:d6:62:25:00:4b:d3:2a:2e:
                    14:1f:82:92:b1:58:52:f2:05:76:8a:dc:aa:db:be:
                    9e:78:bd:0b:04:18:42:75:36:1f:cc:96:a3:6e:fe:
                    65:3b:ce:fc:e6:89:3a:46:4d:a4:ab:79:f0:ea:7a:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BB:91:82:BC:8A:51:BB:E6:F1:2B:8F:25:22:A7:73:4A:DE:E6:C4
            X509v3 Authority Key Identifier:
                keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/XbuRgryKUbvm8SuPJSKnc0re5sQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:ee:4e:bc:46:a1:4a:e6:e8:33:71:af:09:48:92:58:5f:
         4b:aa:45:d4:ea:bf:81:b0:66:7d:a2:9c:59:a5:e9:9b:bd:a4:
         86:81:5d:87:ac:20:45:f9:e6:68:2e:c9:5b:07:39:f6:30:f2:
         cb:cd:a1:6c:32:14:0a:b9:e2:6d:ff:56:f5:5e:d4:ca:e3:24:
         19:8f:b0:c6:a4:7f:fc:75:8a:f7:ee:5d:dd:8f:20:62:3a:94:
         ba:74:26:39:64:a6:92:c2:7a:10:48:e7:8d:6e:47:18:33:fa:
         9b:01:96:6e:6f:c6:49:5f:dc:12:21:d6:94:0d:af:b0:7e:81:
         cf:dc:5b:8a:f0:f6:92:93:88:ba:d1:fa:32:30:18:2c:02:a3:
         a6:dc:9d:5b:fa:30:49:d0:ab:aa:4f:77:20:0c:1d:c0:da:f2:
         70:fd:79:3e:c0:97:4b:da:4b:19:95:09:09:0f:ba:30:8d:c2:
         aa:a3:26:57:c3:27:79:e8:f1:6b:b6:0e:e4:43:2f:a2:96:80:
         0f:0b:77:02:84:e7:fd:a8:6c:e1:48:0b:d5:a5:b3:35:99:45:
         fe:dd:01:10:0d:58:a2:2b:b5:d4:e6:b7:d3:df:51:a9:92:24:
         e7:54:e6:9d:89:79:bf:4b:42:71:9c:8e:f8:e4:85:b7:68:b6:
         36:2e:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----