Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fPffMz63LP-rZv2pyH1Sc9hds-U.roa
File:                     fPffMz63LP-rZv2pyH1Sc9hds-U.roa (raw, json)
Hash identifier:          xoYC6RUit85hKB43nLB0i3dxGIbzq9FF3QL6ji5in5o=
Subject key identifier:   7C:F7:DF:33:3E:B7:2C:FF:AB:66:FD:A9:C8:7D:52:73:D8:5D:B3:E5
Certificate issuer:       /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial:       04B5E159
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fPffMz63LP-rZv2pyH1Sc9hds-U.roa
Signing time:             Sat 01 Jan 2022 05:01:57 +0000
ROA not before:           Sat 01 Jan 2022 05:01:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     26636
IP address blocks:        194.246.36.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79028569 (0x4b5e159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
        Validity
            Not Before: Jan  1 05:01:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7cf7df333eb72cffab66fda9c87d5273d85db3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:1c:a8:6f:4b:dd:8b:0b:f8:11:c7:b1:c4:
                    eb:f7:b0:1e:9f:e5:98:b8:82:43:0e:8f:cf:e8:23:
                    31:62:fe:0e:bc:b1:3f:1b:73:f7:0e:24:a4:0e:83:
                    02:f9:69:0d:b6:0d:23:8e:2a:34:b9:ad:6a:54:be:
                    e4:f1:01:2f:29:38:d1:0d:1f:66:7e:65:16:81:92:
                    b5:b0:eb:9c:26:4b:4f:9c:7e:d8:bd:4a:f4:e5:3e:
                    26:92:b0:fc:e1:32:0c:6f:60:27:db:f5:9b:38:b3:
                    bf:c4:67:38:3d:77:00:3f:85:11:67:13:ec:a0:31:
                    fd:b5:c2:a3:04:c0:c3:60:24:ed:38:c9:92:f0:b6:
                    8f:94:23:ef:0a:6e:1f:c9:7e:c9:5a:da:5e:11:64:
                    54:f9:c5:fa:cf:12:e6:d2:0b:88:47:4a:91:1c:99:
                    c9:4d:5e:db:d4:72:d3:19:26:6f:34:7c:11:53:5c:
                    12:50:1f:43:86:61:bf:e6:6a:be:f4:a5:05:9a:15:
                    f5:aa:75:eb:05:8b:70:e2:bc:bf:67:a3:11:1d:f1:
                    9a:cb:e2:4a:39:10:53:82:54:2e:bf:9b:62:08:f5:
                    d1:a3:92:ae:7a:14:d7:98:e8:0d:45:e1:3a:fb:48:
                    ec:d1:91:fd:7c:d8:5f:4b:4b:b6:05:85:87:72:3c:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:DF:33:3E:B7:2C:FF:AB:66:FD:A9:C8:7D:52:73:D8:5D:B3:E5
            X509v3 Authority Key Identifier:
                keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fPffMz63LP-rZv2pyH1Sc9hds-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.246.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:c6:ac:a4:8a:38:18:79:5d:d8:49:14:91:dc:24:e6:d3:
         95:fa:f5:41:3c:aa:65:69:91:a7:36:61:e9:f1:2f:b5:57:56:
         1a:90:94:7f:af:35:d9:9d:e5:c7:a8:4c:49:2e:e1:00:47:c8:
         7b:07:51:09:dc:60:63:9b:5a:7e:b5:6d:68:d5:ad:79:b7:f2:
         bd:fa:a5:a1:1a:d1:e7:c1:92:ba:87:16:d8:ef:87:b6:62:f8:
         f9:ec:a1:eb:ea:17:dd:e1:da:1c:df:84:d4:22:ef:5c:9a:62:
         0e:e7:9c:71:be:21:02:8c:4e:e0:61:a2:ee:b9:17:ec:fc:b1:
         72:53:ad:54:65:11:38:34:d1:c5:35:4a:17:98:2a:60:55:3f:
         e7:0e:5b:47:59:89:aa:37:52:0f:c1:a2:5d:49:b6:0d:b5:27:
         2a:e7:5a:f7:fc:34:5c:61:4a:be:91:7a:7c:ae:ee:c0:a5:76:
         a2:80:64:11:7a:88:2f:d9:d2:b7:7d:7a:5c:7c:74:09:2e:21:
         f7:52:b2:0b:bb:53:2c:5c:ec:06:3c:b0:4f:df:a4:63:e5:69:
         f4:99:b3:2e:7a:bd:3f:19:ae:4d:b7:64:c1:d3:ac:80:fe:b8:
         2d:c9:06:3b:1a:ae:4f:1c:64:06:b4:1e:af:b6:43:0e:c1:d6:
         2e:98:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----