Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/fdrgV-Ez2h75BpwpPE3koKKhmxw.roa
File:                     fdrgV-Ez2h75BpwpPE3koKKhmxw.roa (raw, json)
Hash identifier:          Y1rQ5Sp6zJTHUJKlfIIbLoz/myn3TgnrZni4GOU4ZE4=
Subject key identifier:   7D:DA:E0:57:E1:33:DA:1E:F9:06:9C:29:3C:4D:E4:A0:A2:A1:9B:1C
Certificate issuer:       /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial:       056176EA
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/fdrgV-Ez2h75BpwpPE3koKKhmxw.roa
Signing time:             Sat 01 Jan 2022 01:50:36 +0000
ROA not before:           Sat 01 Jan 2022 01:50:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201422
IP address blocks:        185.75.129.0/24 maxlen: 24
                          2a03:4d24::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90273514 (0x56176ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
        Validity
            Not Before: Jan  1 01:50:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ddae057e133da1ef9069c293c4de4a0a2a19b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:b6:6e:e8:30:fc:91:95:63:f2:00:58:d5:
                    97:e7:52:d4:e3:91:23:42:92:d3:9e:aa:32:05:cc:
                    2e:0a:18:88:16:70:24:08:99:23:a8:2b:8b:45:a7:
                    56:be:23:30:9f:91:3c:8e:7c:2e:cb:c3:bc:d4:95:
                    3e:62:06:3e:f6:51:91:43:bd:7f:1a:40:85:0b:ae:
                    39:1a:f6:aa:98:f4:c4:a2:b4:82:5c:cc:73:47:30:
                    c3:d6:20:3b:4b:7a:f2:fc:aa:94:8b:fa:57:c4:f2:
                    20:07:d2:c3:9c:17:57:38:66:d6:38:a5:7b:91:7a:
                    e9:6e:f2:9a:c4:38:28:f8:da:ea:89:1a:1f:b4:81:
                    88:26:4a:11:43:10:b2:72:53:21:c0:ff:06:6b:ac:
                    21:1a:26:14:0a:64:7c:03:15:e1:26:46:b0:ad:14:
                    8d:2f:3c:8b:e7:ba:d8:9d:89:0e:8d:c7:36:af:22:
                    36:fd:2a:fe:a5:ce:6a:c6:49:ab:ff:3f:75:50:e1:
                    ff:4f:06:8b:db:b8:17:d8:f1:8c:cd:ac:8e:1f:6c:
                    4b:aa:21:dc:1c:a5:b8:8c:8a:44:52:b4:b9:29:2a:
                    33:67:d4:4d:0c:40:9e:e9:48:28:42:44:87:b4:80:
                    c7:df:87:1a:37:41:48:c5:8a:69:1c:33:32:37:a7:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DA:E0:57:E1:33:DA:1E:F9:06:9C:29:3C:4D:E4:A0:A2:A1:9B:1C
            X509v3 Authority Key Identifier:
                keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/fdrgV-Ez2h75BpwpPE3koKKhmxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.129.0/24
                IPv6:
                  2a03:4d24::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:45:f6:34:8a:2d:de:91:8a:36:d0:e1:13:67:9e:eb:1f:22:
         fb:87:fb:4c:db:bb:4b:a8:65:bc:64:8f:fb:30:cb:0b:05:05:
         49:13:e0:b3:23:46:46:7c:8e:3d:12:eb:c8:d9:aa:8a:87:20:
         50:f7:b0:95:39:54:90:74:4f:0b:9c:3c:45:b6:0b:bd:59:a4:
         c4:c4:1b:23:7f:a4:be:26:f6:c9:45:03:1e:f8:77:c4:f8:d0:
         3b:0a:06:dc:e4:f2:b8:84:f5:d2:6b:60:7e:45:51:67:8d:3f:
         73:a2:7b:28:7c:51:84:a1:a3:1a:75:6f:86:03:72:05:25:ac:
         2b:00:c0:e2:d6:25:1b:7a:0d:36:bc:d1:7c:38:c4:8c:29:02:
         ed:94:46:9f:af:c5:a7:44:3c:69:1a:b3:f2:ca:0a:eb:34:a3:
         5e:01:29:36:37:07:b5:fc:9a:6e:ce:2e:cc:24:4c:7f:a2:1b:
         95:8d:e2:fe:46:e2:37:2a:96:52:b1:c0:8e:d8:a4:39:6a:52:
         76:9d:01:25:00:fb:e0:8f:3e:7b:1d:f5:99:fe:fd:4e:c1:85:
         41:fd:d5:d5:da:f6:59:82:f9:67:ae:b2:c0:7b:0d:92:ea:89:
         37:0e:8d:3e:04:53:e9:c4:3a:a4:6b:78:a7:78:58:63:20:17:
         23:4c:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----