Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/JXBlbidyehvtAQ74gEEwlK_-m60.roa
File:                     JXBlbidyehvtAQ74gEEwlK_-m60.roa (raw, json)
Hash identifier:          4e+GI/2UfZv4HQy7miKhZ66ByQ7TquC+EdDiTNHtOuM=
Subject key identifier:   25:70:65:6E:27:72:7A:1B:ED:01:0E:F8:80:41:30:94:AF:FE:9B:AD
Certificate issuer:       /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial:       0804C037
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/JXBlbidyehvtAQ74gEEwlK_-m60.roa
Signing time:             Sat 01 Jan 2022 07:01:34 +0000
ROA not before:           Sat 01 Jan 2022 07:01:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204457
IP address blocks:        185.248.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134529079 (0x804c037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
        Validity
            Not Before: Jan  1 07:01:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2570656e27727a1bed010ef880413094affe9bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:4a:c1:30:55:f0:b4:b9:ae:a7:5f:1b:cb:
                    d9:37:8a:de:7e:df:ac:33:b0:be:58:f8:a6:49:c8:
                    5e:44:34:65:15:74:4f:a3:a3:de:3c:d1:91:a6:1b:
                    1f:26:8e:6a:18:c8:7e:32:4d:fc:52:cd:96:6a:36:
                    1d:01:30:2d:50:6d:82:68:92:71:23:c2:d3:14:26:
                    7e:c8:59:0d:dd:09:ea:58:2f:32:76:ef:52:57:d1:
                    20:6e:cb:51:3b:4e:7b:c7:e5:16:39:28:49:64:de:
                    0f:65:5d:9a:75:77:ed:f4:99:5e:b2:6a:86:37:62:
                    52:f2:c8:ae:83:a6:d1:71:3c:d4:45:0e:33:16:0f:
                    09:4b:b2:81:a6:37:c7:36:16:06:85:cb:f4:63:a1:
                    56:14:fe:bf:c6:28:2d:61:f6:a7:44:42:d4:82:7e:
                    fa:6b:12:22:73:fc:43:f2:8c:d8:d9:73:58:97:ee:
                    ed:5f:b9:b7:a1:48:1b:e7:4b:39:5e:57:19:27:e4:
                    11:b6:a8:bc:1c:88:5d:83:f3:4c:30:e0:3f:e9:ac:
                    a8:7e:7b:15:03:3b:91:72:c1:71:d4:7d:ea:7e:b2:
                    c2:27:57:2a:7a:80:ec:90:29:80:e2:ea:95:8b:06:
                    85:75:a0:ed:d7:31:c1:f4:02:f8:6f:40:99:6b:7b:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:70:65:6E:27:72:7A:1B:ED:01:0E:F8:80:41:30:94:AF:FE:9B:AD
            X509v3 Authority Key Identifier:
                keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/JXBlbidyehvtAQ74gEEwlK_-m60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:5a:41:a6:53:21:49:38:16:06:4e:20:84:95:5e:22:b6:80:
         6c:52:a8:c9:da:94:21:be:7b:41:d6:3d:14:42:59:94:5c:8c:
         d0:e3:ca:8d:e3:1a:26:ae:6c:ef:c9:86:3f:c1:c5:6b:81:5d:
         d9:7e:fb:7a:cc:b1:85:f5:68:b4:d6:d9:6a:1d:e3:14:e0:2f:
         56:31:42:ef:73:18:7a:f6:23:4f:59:40:74:a3:da:f5:cc:68:
         f5:38:8a:72:e3:dd:4c:4d:61:7f:6e:db:e2:ca:60:ef:fe:bd:
         10:4b:d0:9b:2c:61:e8:f1:27:7f:2c:0d:54:01:cc:d1:93:7b:
         7a:f4:b9:a2:eb:72:e0:ae:d8:5b:ca:5a:44:e9:f2:37:55:45:
         09:79:a4:3c:74:18:85:1a:7e:48:12:bb:c6:83:cb:1b:61:b3:
         f2:e1:4f:bc:a8:c1:cf:94:8c:89:29:25:6d:95:bd:51:5f:bc:
         be:dc:00:8c:42:97:78:21:06:67:a6:02:0d:83:3c:94:b5:50:
         a0:ac:39:e8:62:80:76:6d:c3:aa:f8:67:6e:c6:04:c7:48:44:
         3d:9a:1c:4d:8f:3f:76:43:dc:f4:e2:fe:af:d8:f6:c0:6a:26:
         82:fc:bc:da:39:24:ab:36:7c:46:dc:09:d1:8b:53:60:43:49:
         52:30:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----