Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Vp5siuUmDG2B9L1ijDV97CiFJS8.roa
File:                     Vp5siuUmDG2B9L1ijDV97CiFJS8.roa (raw, json)
Hash identifier:          2t76Di2Pk6gh3uwgP5mlxnmI0WYvSClLRGERE0OIDyo=
Subject key identifier:   56:9E:6C:8A:E5:26:0C:6D:81:F4:BD:62:8C:35:7D:EC:28:85:25:2F
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       0A78E92C
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Vp5siuUmDG2B9L1ijDV97CiFJS8.roa
Signing time:             Sat 01 Jan 2022 04:52:54 +0000
ROA not before:           Sat 01 Jan 2022 04:52:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41195
IP address blocks:        176.118.186.0/23 maxlen: 24
                          2a0d:ca47::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175696172 (0xa78e92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Jan  1 04:52:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=569e6c8ae5260c6d81f4bd628c357dec2885252f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:92:9a:78:47:d9:ce:99:4b:e0:7a:43:eb:
                    ca:ad:9f:7b:ce:0e:76:aa:84:87:19:a3:cf:2e:42:
                    ee:ec:4e:f3:68:ee:29:a7:45:66:5a:45:61:80:f2:
                    10:ef:68:08:03:20:ff:87:d4:85:97:95:a5:b2:51:
                    4e:d4:69:3b:db:0e:67:07:0d:ce:49:d9:53:f3:05:
                    10:5a:8c:da:39:ab:85:3a:d2:9c:a4:14:4e:d9:85:
                    7a:81:67:80:0a:c7:02:e5:a1:e9:2d:13:26:1b:99:
                    c9:ed:4a:65:08:77:01:9d:38:f1:bc:0c:7f:ef:d4:
                    f9:ba:4b:a0:65:00:df:d7:90:81:c3:64:7a:87:a7:
                    17:fa:a2:a3:cd:b3:cf:66:bf:4c:bc:3c:00:68:93:
                    b8:dc:60:10:37:48:a9:37:10:22:50:a0:d6:3b:ba:
                    53:d4:20:60:b8:16:05:00:03:83:5b:8b:0e:b1:f5:
                    5e:95:c5:fa:24:73:37:41:d2:ee:a4:da:32:da:bb:
                    6f:c1:bd:63:2a:c4:f8:68:84:7a:5f:8d:25:be:f8:
                    03:cf:61:72:c1:4d:90:d2:25:2e:86:c9:13:29:9e:
                    e7:18:0f:7e:3f:68:3c:7c:37:cf:ae:32:7e:34:f7:
                    6c:d9:91:ad:d2:83:cb:cb:94:d8:52:58:6c:4e:0b:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:6C:8A:E5:26:0C:6D:81:F4:BD:62:8C:35:7D:EC:28:85:25:2F
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Vp5siuUmDG2B9L1ijDV97CiFJS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.186.0/23
                IPv6:
                  2a0d:ca47::/47

    Signature Algorithm: sha256WithRSAEncryption
         a7:00:cc:16:ff:55:ef:6a:d9:a7:37:9d:fb:29:81:8c:40:da:
         b6:d0:17:3e:e3:fe:69:ca:15:54:e1:35:dd:79:34:4b:bd:c3:
         eb:1c:e4:09:51:85:62:fd:a4:7b:f1:c4:02:f1:31:14:1b:98:
         24:26:74:e1:33:cb:e2:87:e0:ec:ed:ba:78:53:fc:37:8c:91:
         61:44:b9:61:ce:9f:c9:b0:46:87:61:a2:97:97:12:d7:a3:f9:
         cc:a7:b0:67:7d:7a:58:9d:41:8a:96:3f:25:46:41:90:14:0d:
         74:45:b2:bd:6f:58:42:18:31:0a:13:53:a9:48:56:12:16:70:
         e1:0e:aa:ac:62:54:d7:ec:b8:8a:2a:57:f1:b6:fd:82:a0:be:
         9f:d5:d7:ea:2c:f3:f2:ae:15:3d:05:d4:23:bd:5b:8d:bf:cf:
         90:17:02:9e:c0:ce:90:0d:99:a5:4b:a4:97:bc:c5:b3:70:77:
         8e:d0:40:6a:af:df:48:2f:3d:5c:bc:6a:8e:a5:58:ce:07:9f:
         49:98:43:13:c6:33:f3:ad:06:04:7d:bb:4d:26:51:68:63:a1:
         d3:50:8b:04:9f:2c:58:b7:03:ee:f7:7d:1f:36:19:4c:39:31:
         3a:70:93:be:ce:c8:03:27:ad:6f:2e:21:34:8b:94:bc:73:28:
         a7:59:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----