Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/_f58fV5b8BJC0GpepycrRJXTAGs.roa
File:                     _f58fV5b8BJC0GpepycrRJXTAGs.roa (raw, json)
Hash identifier:          raUwffEQTSKTfA3EOtM2KjF/bm3XNJOXEm4U3Bp9toQ=
Subject key identifier:   FD:FE:7C:7D:5E:5B:F0:12:42:D0:6A:5E:A7:27:2B:44:95:D3:00:6B
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       032B8820
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/_f58fV5b8BJC0GpepycrRJXTAGs.roa
Signing time:             Fri 13 May 2022 19:23:31 +0000
ROA not before:           Fri 13 May 2022 19:23:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206372
IP address blocks:        185.175.36.0/22 maxlen: 24
                          2a0b:cd00::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53184544 (0x32b8820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: May 13 19:23:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdfe7c7d5e5bf01242d06a5ea7272b4495d3006b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:fe:4c:ab:63:34:b8:0e:c0:a0:a8:15:64:
                    4d:23:ae:fd:43:68:fd:f5:2a:5f:9b:13:92:66:f5:
                    e9:95:f5:b8:6d:2a:81:02:76:65:98:49:a8:75:37:
                    8c:42:4a:8a:81:5e:60:49:ea:73:74:99:97:ca:df:
                    f0:1f:ce:9f:5b:9a:81:5d:78:d2:7c:dd:30:87:5d:
                    c1:8c:9e:41:5b:db:21:cf:f2:bd:ff:fa:c9:5c:3e:
                    97:7f:d5:f1:53:29:2e:c8:1c:39:e8:c8:fa:14:fe:
                    5a:7c:8e:cb:18:70:1d:b4:d0:9b:74:f5:55:33:dd:
                    e6:b4:e5:15:62:19:21:34:f1:9a:c6:06:f4:ba:0d:
                    e6:33:42:7a:04:62:75:d4:90:d0:a3:95:26:c0:87:
                    8a:a0:8f:91:af:39:31:85:0b:f8:d0:fe:bf:52:d4:
                    0c:20:ec:dd:ef:28:22:3b:43:18:f4:8d:93:53:1b:
                    8b:d4:81:ab:8a:ae:99:e9:ac:a2:8d:a5:c0:98:b3:
                    fa:cd:a6:be:bd:b2:ab:e7:b9:b3:24:6d:82:e0:c3:
                    88:a1:1a:dd:54:9c:8d:cb:ae:a6:ed:c4:fd:d7:0a:
                    41:15:37:a9:3a:76:80:56:8e:57:cf:dd:57:8d:19:
                    13:37:f9:05:ea:cc:f1:51:e6:c7:73:04:68:07:17:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FE:7C:7D:5E:5B:F0:12:42:D0:6A:5E:A7:27:2B:44:95:D3:00:6B
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/_f58fV5b8BJC0GpepycrRJXTAGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.36.0/22
                IPv6:
                  2a0b:cd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:c5:ce:e5:3b:dd:cc:7a:9b:31:5c:12:41:54:f5:41:04:
         de:75:40:11:68:44:0f:95:91:84:a6:34:dd:c3:cd:a0:da:7b:
         7c:0d:bc:89:5a:ac:46:8e:66:4d:0f:08:8a:a1:36:e8:e7:14:
         27:94:5c:90:75:59:47:c2:66:a3:69:3e:fe:91:0a:90:e3:69:
         3e:3c:49:be:01:3a:c4:09:86:c8:dd:04:f7:e6:f3:3b:92:15:
         76:38:a6:b9:3c:b3:a6:53:6a:6a:ca:95:bc:55:0e:b8:fc:81:
         c5:b6:d3:33:33:4a:a4:d9:23:08:fa:22:72:d5:9a:d4:8e:21:
         5f:31:73:58:94:c3:c8:80:71:a1:bd:2f:66:21:19:ae:e3:9b:
         fa:ec:b0:64:14:d9:fa:e0:f9:6a:d3:0f:1a:fc:ae:5d:e1:e1:
         cc:ed:25:31:ce:87:40:86:dc:32:5d:a1:16:d1:6e:6b:a9:8f:
         ed:77:7a:4a:29:01:80:69:51:6b:c9:c5:db:8c:cc:b1:dc:82:
         67:05:fd:c5:57:00:fc:31:71:35:f4:1f:30:11:ac:54:9b:3b:
         04:0d:8a:fd:c7:a3:ec:94:bb:b6:20:6d:8f:ff:01:2f:9f:79:
         27:36:d0:6b:40:60:2e:0f:5f:49:ba:ab:85:6e:15:e1:57:bc:
         4d:5c:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----