Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cof-WPJMLNfNMQM2w1rTFurT4qg.roa
File:                     cof-WPJMLNfNMQM2w1rTFurT4qg.roa (raw, json)
Hash identifier:          hfNAikJct8rKU8o9gN4CPFtGnJkWN2B4KRenJRjHyzA=
Subject key identifier:   72:87:FE:58:F2:4C:2C:D7:CD:31:03:36:C3:5A:D3:16:EA:D3:E2:A8
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       0182FE7019EDDD56DA66D7E147602E22EC5D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cof-WPJMLNfNMQM2w1rTFurT4qg.roa
Signing time:             Fri 02 Sep 2022 13:42:15 +0000
ROA not before:           Fri 02 Sep 2022 13:42:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48550
IP address blocks:        185.133.210.0/24 maxlen: 24
                          2a06:e880::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:fe:70:19:ed:dd:56:da:66:d7:e1:47:60:2e:22:ec:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Sep  2 13:42:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7287fe58f24c2cd7cd310336c35ad316ead3e2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:48:df:aa:1a:d6:8f:75:cf:6f:41:be:54:
                    22:22:e8:dd:af:5e:b1:a8:90:63:cf:60:99:fa:1a:
                    a8:0c:3d:41:7d:ab:af:39:51:1f:f2:62:14:9d:dc:
                    6e:a0:4c:9c:8a:b0:eb:94:a2:88:39:10:5e:1b:cf:
                    3e:19:10:5a:7a:3e:d2:a4:3b:d5:50:d6:80:f2:16:
                    58:2a:dd:6f:9c:02:2b:7b:47:a2:70:47:3e:b1:a9:
                    02:8e:60:33:3b:cd:fb:eb:fc:75:1c:04:27:c3:44:
                    8e:57:99:8f:f2:4b:d6:bc:c4:0b:49:73:61:a9:f7:
                    79:22:82:a2:91:73:47:4f:a3:b4:7b:59:65:33:fd:
                    94:83:9f:7a:a8:3a:ed:68:9a:b0:8d:59:72:9e:2b:
                    3e:04:04:12:52:21:ac:7c:52:a9:f6:b2:aa:d8:00:
                    64:d7:ea:2d:4b:e5:5d:86:8e:f4:c5:c8:ec:bc:53:
                    fd:4c:4c:01:f6:45:84:8e:4c:49:44:5a:ba:6a:61:
                    2e:5d:2e:aa:b6:59:d7:1e:41:81:12:e6:0c:88:c9:
                    b4:c5:ab:bc:ea:ce:02:53:f1:f0:d1:22:4f:a0:4c:
                    7f:1f:93:93:6e:00:bd:f7:2b:28:68:b2:a8:c4:38:
                    74:00:ca:88:8f:77:3a:67:31:59:32:39:8a:a8:d6:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:87:FE:58:F2:4C:2C:D7:CD:31:03:36:C3:5A:D3:16:EA:D3:E2:A8
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cof-WPJMLNfNMQM2w1rTFurT4qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.133.210.0/24
                IPv6:
                  2a06:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:9a:6b:d7:f3:52:6a:17:f5:98:68:ff:8c:76:23:0f:30:48:
         24:e5:ba:8f:b2:7e:6e:eb:77:93:b9:e2:54:cc:9a:c2:a0:30:
         7c:9e:61:10:37:e7:71:1f:17:08:e4:f5:db:22:65:b1:dd:36:
         21:3e:e2:72:f8:a2:e6:92:f8:02:c5:5e:b9:e4:6f:bc:9a:69:
         0e:cd:94:81:0b:72:56:e4:bd:43:06:94:95:2e:da:eb:64:e1:
         be:f7:c3:0c:7e:ca:66:9b:a6:bf:0e:89:66:14:1d:06:bf:81:
         bb:3d:9f:71:f0:bf:3b:5c:09:1f:55:d4:2a:89:02:2d:27:47:
         85:38:11:f7:73:aa:3f:3d:15:e9:8c:9f:50:90:94:ec:30:97:
         29:40:71:ed:dd:7c:d3:67:c9:09:e1:f7:99:8f:97:f8:39:7b:
         f1:95:6b:e5:b0:40:25:ac:e5:16:eb:7f:5e:b0:20:cf:a9:53:
         63:60:38:c2:89:44:6f:32:88:07:15:e5:a1:b8:6f:52:6b:19:
         9f:a4:e3:68:ed:91:95:28:30:b5:b8:8b:7e:b2:33:24:82:af:
         a7:69:83:28:6b:54:08:06:97:a6:72:2c:dc:2f:d3:41:6f:79:
         38:fd:d9:3f:83:79:a9:e6:fc:de:b5:ec:10:bf:42:9a:a3:25:
         11:4a:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----