Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/PEWWaS5SS2mwWYCGuNAXuIS9dms.roa
File:                     PEWWaS5SS2mwWYCGuNAXuIS9dms.roa (raw, json)
Hash identifier:          81vn9wa1Cxgt0SzGIPDWvevCLNcFUGu5i0AUg8z9HQg=
Subject key identifier:   3C:45:96:69:2E:52:4B:69:B0:59:80:86:B8:D0:17:B8:84:BD:76:6B
Certificate issuer:       /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial:       1230FCC6
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/PEWWaS5SS2mwWYCGuNAXuIS9dms.roa
Signing time:             Sat 01 Jan 2022 12:56:21 +0000
ROA not before:           Sat 01 Jan 2022 12:56:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206377
IP address blocks:        185.35.84.0/22 maxlen: 22
                          2a00:f280::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305200326 (0x1230fcc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
        Validity
            Not Before: Jan  1 12:56:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3c4596692e524b69b0598086b8d017b884bd766b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:91:36:4e:29:47:ee:ee:b6:e5:98:af:b9:
                    1b:f4:6a:f0:2a:80:9a:ca:34:a1:05:40:13:e2:59:
                    1d:68:65:5d:6b:9c:69:4a:83:ac:94:14:9f:d9:73:
                    13:1d:52:c3:54:3d:cd:6f:37:52:54:26:35:48:e1:
                    f0:14:64:f8:59:40:b2:6d:f0:85:66:80:6f:14:d4:
                    9d:f2:52:ca:8b:5f:f5:d2:39:7d:b5:5f:1e:52:d2:
                    1d:0d:90:a2:ac:c9:84:4a:2a:5a:2e:89:1e:06:8c:
                    2b:b0:b4:ab:a7:e4:00:86:65:2d:3d:df:71:fc:ea:
                    2d:3d:ce:58:ab:78:a0:d9:34:77:27:f6:10:15:f8:
                    1a:e2:e6:60:01:15:70:5b:70:b7:fe:b5:7a:96:61:
                    89:2e:e2:d1:bb:91:da:f0:75:6a:37:c1:0c:a9:3d:
                    d7:bf:3c:67:75:ab:90:1c:85:f8:27:f9:08:c7:cb:
                    f9:04:2f:d7:cf:b6:43:5d:f2:85:94:de:d0:31:04:
                    b2:ed:6e:00:f7:6d:32:8d:0c:30:b1:a0:18:c7:ca:
                    49:2c:4a:8f:78:c5:5c:b9:54:80:36:57:13:c8:af:
                    ba:fe:3a:28:87:5f:f3:c1:bd:6d:80:2b:69:88:06:
                    8c:a3:38:89:3a:a7:d2:7c:33:11:33:6e:8b:79:fe:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:45:96:69:2E:52:4B:69:B0:59:80:86:B8:D0:17:B8:84:BD:76:6B
            X509v3 Authority Key Identifier:
                keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/PEWWaS5SS2mwWYCGuNAXuIS9dms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.35.84.0/22
                IPv6:
                  2a00:f280::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:be:2a:95:fd:63:b0:b9:61:7a:db:33:f4:d8:56:a5:b3:d5:
         d3:64:5e:07:3a:bd:8f:61:5d:3a:99:fa:68:11:de:11:06:da:
         89:dc:ca:eb:07:5e:34:27:7d:24:a8:4c:89:e8:48:78:22:73:
         c1:a0:04:2c:29:79:95:5d:c7:9d:63:d4:3d:d7:b1:7b:a3:84:
         5d:e2:4a:a8:9d:ee:ac:44:c1:6b:ec:42:0b:f0:6c:c7:6d:e9:
         30:42:0a:01:48:04:d9:41:ec:8d:02:a1:d9:dd:9d:c2:58:9b:
         0f:88:52:fd:b4:8f:bb:31:7c:e1:41:0b:c6:84:1e:ac:66:87:
         e7:c1:ac:c1:c5:c0:36:78:b4:4d:0c:f5:c3:82:e2:47:67:45:
         f8:8c:5b:ca:09:05:6c:e3:6d:4b:2b:1a:86:33:d2:a6:90:4d:
         61:8b:ed:33:bc:10:7f:1d:cd:f4:28:2a:4b:25:b8:78:50:57:
         a1:e1:a0:56:0e:f9:40:d1:98:05:10:94:df:a7:90:cf:af:15:
         cc:46:1d:63:e0:96:e7:0f:c1:c1:e0:38:0d:42:0e:4b:ca:a7:
         a0:bd:e8:26:58:59:6b:95:f5:9e:3d:f6:29:c0:51:90:74:c7:
         19:a3:fb:99:f3:12:7a:a2:b0:12:c6:cf:66:cd:09:25:fd:a8:
         e8:2b:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----