Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/EbCm33Bj8W_hgZGooQwvyL_LMTo.roa
File:                     EbCm33Bj8W_hgZGooQwvyL_LMTo.roa (raw, json)
Hash identifier:          L2l6uWXVFq7GS9xU81K/czbSy89VC8eUxXgJpg3g//c=
Subject key identifier:   11:B0:A6:DF:70:63:F1:6F:E1:81:91:A8:A1:0C:2F:C8:BF:CB:31:3A
Certificate issuer:       /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial:       07EA15F8
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/EbCm33Bj8W_hgZGooQwvyL_LMTo.roa
Signing time:             Sat 01 Jan 2022 07:55:47 +0000
ROA not before:           Sat 01 Jan 2022 07:55:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15830
IP address blocks:        185.83.40.0/22 maxlen: 22
                          2a05:9800::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132781560 (0x7ea15f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
        Validity
            Not Before: Jan  1 07:55:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11b0a6df7063f16fe18191a8a10c2fc8bfcb313a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:ea:09:5f:6d:6f:ef:e1:1d:45:b3:49:e1:
                    36:ae:5f:79:23:ce:18:17:97:a5:a1:49:97:1d:74:
                    96:ab:ca:e4:ca:28:19:50:62:b0:5e:31:84:0d:fc:
                    38:ff:02:bc:ab:bd:80:12:a7:52:a8:bd:59:0b:df:
                    06:96:d3:e1:41:37:da:70:42:48:7e:b6:6d:3e:ca:
                    44:be:df:a9:9b:57:ef:f2:e3:82:44:4e:e5:3d:da:
                    e4:2f:cf:f4:8d:ab:a7:dd:b2:fc:63:3d:21:2c:5a:
                    2a:28:aa:97:a4:74:14:62:63:47:c7:b5:66:a9:e2:
                    9f:99:0f:cd:fe:17:2d:f2:a3:56:09:fa:d3:07:ec:
                    e5:5e:95:9c:a2:37:6a:6f:a2:bd:bc:e1:39:0a:74:
                    41:7f:1e:8b:b5:38:8d:70:d0:2f:b9:72:6d:c9:7d:
                    86:07:03:d7:1f:33:3e:4e:c1:b8:a4:b2:fe:2f:ca:
                    da:8c:97:3a:7b:6e:41:c8:55:63:1a:cb:46:ca:c8:
                    a2:11:01:73:df:55:9d:02:40:c6:42:5d:c3:41:75:
                    61:a2:39:a8:ef:d1:a0:c3:65:2d:19:f6:e4:b8:bf:
                    d5:2c:ca:86:ff:56:6c:28:31:cd:be:e3:28:50:a7:
                    5a:2c:38:58:c5:00:83:85:10:30:a1:43:6e:c1:d4:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B0:A6:DF:70:63:F1:6F:E1:81:91:A8:A1:0C:2F:C8:BF:CB:31:3A
            X509v3 Authority Key Identifier:
                keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/EbCm33Bj8W_hgZGooQwvyL_LMTo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.40.0/22
                IPv6:
                  2a05:9800::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:78:ae:e9:dd:07:68:fe:10:42:71:98:88:cb:2b:d4:68:
         1a:e9:93:54:d9:9e:66:a2:53:6c:ca:b3:97:98:7a:09:6b:ef:
         ec:c1:63:26:2d:89:48:e1:dd:28:b6:83:66:91:22:8d:17:58:
         c5:cb:95:29:ce:e9:da:03:3e:a0:5b:2e:7a:98:fd:cd:46:40:
         ec:1d:13:61:cc:31:7b:66:c2:7c:fd:65:88:03:3b:f1:aa:df:
         97:02:0f:2a:ef:94:a0:d3:a8:69:3e:87:61:2a:5c:cd:2e:fd:
         61:9d:2c:45:ef:36:1e:3f:86:50:61:c1:39:e8:43:22:df:ee:
         95:2a:74:bb:ef:89:08:ac:e5:fd:3b:bf:a7:bd:df:30:b2:26:
         a6:b1:8d:14:60:58:99:11:72:b5:ab:4d:96:ea:87:a9:94:6f:
         f4:73:3b:97:09:36:47:fe:ad:b3:3d:6c:23:36:ec:f2:37:e5:
         f3:04:ad:c5:0a:65:e1:5f:35:90:dd:bf:39:46:74:9d:37:c1:
         fa:79:fe:b8:41:58:12:4d:9d:66:da:7c:e2:40:71:55:d3:e5:
         57:ab:cb:2d:51:b7:50:bb:78:99:38:c1:47:1e:d3:3e:7d:8f:
         37:3b:bc:18:2a:30:8b:8f:2f:60:ca:c5:94:58:f4:8a:c8:6b:
         ac:df:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----