Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/L-TRPx4EKaFvIWYjZpbYaZxuEug.roa
File:                     L-TRPx4EKaFvIWYjZpbYaZxuEug.roa (raw, json)
Hash identifier:          Bn9P7N3WDnYv3IrdkIdG6q4VV78Z1m39jdok1NXWBPs=
Subject key identifier:   2F:E4:D1:3F:1E:04:29:A1:6F:21:66:23:66:96:D8:69:9C:6E:12:E8
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       0A35823E
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/L-TRPx4EKaFvIWYjZpbYaZxuEug.roa
Signing time:             Sat 01 Jan 2022 06:05:29 +0000
ROA not before:           Sat 01 Jan 2022 06:05:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42075
IP address blocks:        185.80.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171278910 (0xa35823e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Jan  1 06:05:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fe4d13f1e0429a16f2166236696d8699c6e12e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:1b:2e:d0:0e:7d:c7:3f:df:7c:7b:67:aa:
                    81:70:18:56:e3:27:ba:6c:8d:8a:cd:a3:90:fa:be:
                    73:ef:10:6c:6a:73:ef:1f:d3:16:00:47:df:1c:30:
                    d0:b2:ad:3e:a7:87:a5:79:6c:5a:7a:c4:d2:dc:44:
                    59:72:4f:ab:2d:6f:32:6d:c3:f2:16:46:1e:c3:d7:
                    a6:ff:e8:fe:db:bb:86:13:31:61:00:a4:72:9b:40:
                    94:c0:60:27:e6:66:ad:db:62:60:f6:01:85:a2:1d:
                    0c:f5:82:13:47:57:37:d5:30:39:51:8b:e3:86:90:
                    66:e5:dc:2f:33:6b:66:f3:fb:39:1c:e5:b0:8a:f6:
                    73:74:3a:dd:54:6d:c3:68:6f:49:c9:91:da:fd:08:
                    e1:6b:8d:cc:68:fb:38:f3:1e:6f:c4:4b:6b:2a:fb:
                    cd:72:f1:c5:12:84:a6:e6:21:12:44:76:59:f8:e0:
                    48:d3:cc:01:54:02:63:0c:c1:b3:49:d2:c4:ec:1a:
                    1b:23:e2:39:78:dc:4d:3f:07:6c:e0:7e:2b:b0:c3:
                    bd:de:6e:54:9b:e0:47:fd:51:69:e7:af:2e:19:3c:
                    86:9b:87:5b:60:cc:33:15:c2:5a:8b:80:3a:80:d7:
                    38:ea:f8:ba:5a:38:b6:7d:ab:c9:04:95:74:bd:4c:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E4:D1:3F:1E:04:29:A1:6F:21:66:23:66:96:D8:69:9C:6E:12:E8
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/L-TRPx4EKaFvIWYjZpbYaZxuEug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:80:f3:c9:71:d5:8e:31:11:97:0a:20:c7:77:f4:27:71:
         44:83:a3:3c:33:bf:8c:b6:7f:64:3c:11:d8:eb:5e:91:cf:2e:
         a4:65:1b:fe:34:d6:66:97:e7:8e:b7:c3:63:e4:f6:c5:11:48:
         c6:06:0b:d7:16:1d:51:7e:44:fa:8c:29:82:a3:54:33:9b:d4:
         cc:af:00:a6:95:21:0d:69:b0:5a:5a:7c:5d:31:8a:4d:c3:96:
         d6:3d:dd:75:1a:d2:a6:d1:39:87:c6:96:9a:7a:32:e4:22:ff:
         2c:1b:a8:50:d2:5b:87:94:c2:cc:8d:95:86:0f:a0:c3:d3:52:
         6b:54:d3:ac:7f:08:41:90:fa:de:70:26:eb:14:d9:e7:e8:28:
         de:c0:09:18:ed:2d:18:a2:7e:30:ed:e7:b4:aa:f3:5f:6b:ca:
         c1:69:19:4f:ab:7a:49:f7:6e:2a:a2:8f:23:cb:c9:33:10:06:
         2d:18:35:9d:ca:ef:47:5b:69:2a:a8:12:55:2c:c4:20:d0:dd:
         aa:17:82:15:85:83:21:e8:b7:c5:fb:da:dd:27:f5:8a:66:2f:
         61:8f:81:b5:94:cb:ea:10:bd:49:24:14:f8:d9:2a:8e:07:d1:
         67:d7:34:88:f2:5c:68:30:02:af:42:29:50:59:3a:24:83:b0:
         2f:1a:fb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----