Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/FG2Vprf1Ry0xfUV5gjYgc3xr5Pw.roa
File:                     FG2Vprf1Ry0xfUV5gjYgc3xr5Pw.roa (raw, json)
Hash identifier:          Tz8pOPU6m5m5m/NXDYPKl03sMA1OL4nhMx7S91hWiXk=
Subject key identifier:   14:6D:95:A6:B7:F5:47:2D:31:7D:45:79:82:36:20:73:7C:6B:E4:FC
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       01828C6FE2E836624DC2A36E5D63E581E525
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/FG2Vprf1Ry0xfUV5gjYgc3xr5Pw.roa
Signing time:             Thu 11 Aug 2022 10:25:19 +0000
ROA not before:           Thu 11 Aug 2022 10:25:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199786
IP address blocks:        185.50.140.0/22 maxlen: 22
                          2a01:abe0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8c:6f:e2:e8:36:62:4d:c2:a3:6e:5d:63:e5:81:e5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: Aug 11 10:25:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=146d95a6b7f5472d317d4579823620737c6be4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:b6:b9:c2:75:3c:1b:a8:fa:79:03:1b:5a:
                    95:c9:3e:de:ae:c4:ce:98:28:1f:36:3a:5d:36:53:
                    76:3d:45:89:d5:ea:9f:d7:9e:d2:8b:6b:9b:8b:9e:
                    46:c9:28:cd:b4:e2:75:70:b6:0f:98:d8:2f:46:2f:
                    3b:3f:e7:2c:85:9c:1c:39:6a:71:eb:b0:bc:63:ee:
                    6f:24:7c:db:6c:8d:ff:7c:68:77:e8:db:10:6f:28:
                    d9:a3:f0:83:ed:42:d6:3c:10:4a:b5:ba:b0:ca:5c:
                    df:ee:7a:e6:3c:c7:27:c8:02:36:54:ae:24:e3:14:
                    1a:17:b2:0e:7e:eb:a5:4e:d1:25:da:57:0d:85:22:
                    7e:7b:85:4b:e1:cf:ae:78:f3:e0:32:c3:d6:b4:0a:
                    b3:11:de:b2:5c:e6:0c:ea:33:82:ad:76:1e:e5:ba:
                    d1:3c:96:8b:57:76:21:38:63:72:4a:6f:76:09:8c:
                    f2:87:56:53:d0:77:0f:dc:a8:cd:ed:25:0e:7f:a5:
                    09:20:f5:82:e8:d7:85:f7:70:d0:f2:70:89:29:52:
                    bd:65:64:ed:f6:e9:f5:da:15:3c:61:d6:0f:83:d2:
                    47:8f:21:6f:8e:cd:d5:82:5e:66:b1:9d:43:0c:ac:
                    cc:af:a4:c9:55:af:86:65:aa:7c:92:0f:00:48:d6:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6D:95:A6:B7:F5:47:2D:31:7D:45:79:82:36:20:73:7C:6B:E4:FC
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/FG2Vprf1Ry0xfUV5gjYgc3xr5Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.50.140.0/22
                IPv6:
                  2a01:abe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:f4:eb:7d:ae:c2:63:97:68:a6:5d:23:ba:ef:59:ec:60:8e:
         d1:58:25:30:90:d7:1e:0e:43:7e:eb:fb:51:1c:01:50:f2:64:
         67:7e:45:6d:a4:f4:f0:2d:8d:1f:f1:32:82:d2:86:d6:97:d5:
         0e:4a:d7:ac:f7:95:9c:95:97:2e:4f:95:3a:fb:59:e7:97:17:
         cc:c6:86:4c:96:13:92:92:d3:67:9f:3b:42:11:d4:2d:30:5e:
         db:47:0b:bd:81:35:9a:f1:9b:fa:0a:ad:5b:7b:ac:64:3c:ac:
         77:d1:7e:09:ff:b8:7b:bb:2f:da:8b:a8:46:7e:d1:a3:76:eb:
         6d:fb:d7:e6:39:b1:f7:a9:6c:64:53:22:12:42:aa:d7:b5:b8:
         53:75:01:75:6e:3d:fd:0f:b4:1b:4f:89:ab:46:9f:79:f3:8d:
         7e:e4:c6:4f:66:14:23:df:48:3f:15:de:a9:97:36:c2:0a:4f:
         bc:41:98:4f:f3:ae:b8:d1:99:53:05:36:3c:fb:23:6c:09:32:
         8d:82:7f:3a:0f:46:45:45:be:c8:41:0b:1b:53:d3:6b:29:94:
         8b:9e:98:54:b4:e8:a7:5b:79:4b:99:68:46:39:31:59:59:1b:
         1a:28:c6:ef:af:24:9f:0f:95:56:3d:f3:9a:c8:63:15:00:5b:
         24:f0:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----