Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/XHuTPFry_8XNXhh11lkCt6h1wZM.roa
File:                     XHuTPFry_8XNXhh11lkCt6h1wZM.roa (raw, json)
Hash identifier:          zXR2Vbrgl+Cn/hGym112FqQ0QsZsoFz0bbz1s5WeUWc=
Subject key identifier:   5C:7B:93:3C:5A:F2:FF:C5:CD:5E:18:75:D6:59:02:B7:A8:75:C1:93
Certificate issuer:       /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial:       0A1CB92E
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/XHuTPFry_8XNXhh11lkCt6h1wZM.roa
Signing time:             Sat 01 Jan 2022 00:58:23 +0000
ROA not before:           Sat 01 Jan 2022 00:58:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204786
IP address blocks:        185.240.52.0/22 maxlen: 24
                          2a0c:7280::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169654574 (0xa1cb92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
        Validity
            Not Before: Jan  1 00:58:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c7b933c5af2ffc5cd5e1875d65902b7a875c193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:00:58:71:1f:0c:4d:ef:bc:ec:52:ef:9d:
                    f2:67:93:6b:e4:e3:ad:12:6a:2e:02:24:b4:56:b2:
                    aa:e4:e4:6f:93:b7:09:e0:9a:db:9d:df:f7:e5:23:
                    4b:48:17:06:89:15:fc:d0:c7:97:06:b2:da:b8:de:
                    bd:77:ea:9a:4c:d6:2b:0b:c1:5d:0b:05:27:8c:48:
                    45:95:f2:fa:db:18:37:d1:94:ec:10:3e:b2:d1:26:
                    9e:31:ed:da:84:a5:d3:e1:ba:30:76:50:43:5f:d5:
                    97:a4:2f:bc:ab:83:4d:cb:5b:06:a2:9d:e2:2b:35:
                    f0:20:50:ff:98:68:f2:bc:20:0d:c7:b5:f6:99:dc:
                    75:4f:e7:f7:55:97:9f:bf:29:92:e5:a3:f5:8e:64:
                    ed:e6:86:e9:19:04:cd:39:4e:85:d2:6e:b9:a3:07:
                    51:51:d2:75:74:54:32:f9:5d:52:f4:57:8a:23:6e:
                    ab:6b:03:b4:9d:39:a4:52:2b:cc:e6:56:52:f6:cb:
                    0a:ee:77:78:c4:a6:5f:3d:45:ed:fb:8b:04:00:e8:
                    64:4a:8b:8c:48:38:03:40:57:f8:d7:d0:be:e5:e9:
                    47:99:6a:da:3f:df:9a:04:eb:0e:be:01:36:fa:9b:
                    09:8e:9a:5c:47:03:97:83:e2:3a:4b:31:ed:a0:f9:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7B:93:3C:5A:F2:FF:C5:CD:5E:18:75:D6:59:02:B7:A8:75:C1:93
            X509v3 Authority Key Identifier:
                keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/XHuTPFry_8XNXhh11lkCt6h1wZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.52.0/22
                IPv6:
                  2a0c:7280::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:47:42:66:60:c0:98:e2:1c:e4:31:fc:99:c6:88:4e:07:6e:
         92:9f:d1:60:fd:a4:cf:f2:00:e3:40:66:55:a1:01:19:ac:19:
         48:ae:ce:54:71:51:4e:a1:80:82:bb:88:00:48:50:fd:47:67:
         8d:8a:1d:a7:39:c5:7a:cd:75:4a:fa:6e:ae:ec:ac:24:ea:08:
         59:74:89:f9:5d:70:c9:d9:9e:51:64:66:70:90:69:c4:ff:dc:
         b4:76:54:37:6a:5a:1e:db:bf:a3:2a:08:f7:4e:f8:f3:0b:85:
         a5:58:9f:ae:a3:43:65:e2:ab:f4:7c:a4:f8:e9:02:51:5c:40:
         a3:ac:08:6d:81:6b:97:a4:06:b1:49:ba:71:3b:1e:61:66:4d:
         e3:a2:e5:76:c8:b7:ac:d5:87:e7:43:4e:c3:e7:bc:4f:d6:8e:
         c9:f5:85:d8:2d:ea:34:6f:64:68:85:00:15:d9:3e:be:c9:fa:
         3d:7b:21:95:e7:38:4f:d7:f2:0c:e5:16:61:64:fd:f5:86:e9:
         24:26:fc:71:53:71:f8:5a:4e:bf:4d:b9:70:c5:95:9e:46:e9:
         69:04:c7:bc:39:e0:86:f1:d9:aa:62:4e:c2:4b:ef:0e:2d:3b:
         51:61:17:4e:cb:2d:96:19:a5:e6:47:50:ef:98:92:90:6f:29:
         59:cc:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----