Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/q771C-MYjVODU6jv-w49u2fFJrE.roa
File:                     q771C-MYjVODU6jv-w49u2fFJrE.roa (raw, json)
Hash identifier:          rUUaNgJ3lQsJoXtSAKRBn3rBT2FSv4FWUE0qpqYr2L8=
Subject key identifier:   AB:BE:F5:0B:E3:18:8D:53:83:53:A8:EF:FB:0E:3D:BB:67:C5:26:B1
Certificate issuer:       /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial:       06633EE9
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/q771C-MYjVODU6jv-w49u2fFJrE.roa
Signing time:             Sat 01 Jan 2022 07:58:16 +0000
ROA not before:           Sat 01 Jan 2022 07:58:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206585
IP address blocks:        62.181.60.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107167465 (0x6633ee9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
        Validity
            Not Before: Jan  1 07:58:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abbef50be3188d538353a8effb0e3dbb67c526b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:61:dd:7a:42:c2:dc:15:b3:3b:10:df:37:
                    0c:51:5f:97:f2:99:a2:7a:60:7c:9a:44:74:6d:e6:
                    29:30:7a:5a:4f:08:66:25:0f:1a:ff:8a:84:d3:2f:
                    75:8c:31:46:de:5c:50:58:e8:1a:90:70:07:2b:96:
                    29:dd:26:3a:5e:f9:42:52:35:b9:60:03:a8:dd:ef:
                    d0:f1:d8:46:c2:79:08:c6:57:a5:09:5a:62:00:68:
                    cf:a0:e4:fd:3b:3d:ef:21:1c:f0:5e:5c:a9:ab:7a:
                    12:f5:7a:ab:5c:91:86:bb:b4:4a:0c:b1:b9:42:e1:
                    a9:76:3b:5a:b9:a0:23:54:10:df:c5:c6:56:f7:c1:
                    f3:9a:fb:cd:ae:39:e8:47:bb:13:7e:57:17:ee:df:
                    6b:ca:29:7f:4d:35:7d:e4:bd:de:0c:5b:a5:42:8f:
                    35:65:ec:cb:2d:db:a2:25:16:c5:bf:3d:35:92:0b:
                    d6:9e:89:93:7d:ce:e3:8c:29:f1:82:b8:eb:d5:3a:
                    eb:1b:63:3b:c7:38:e9:8b:93:df:02:36:1e:71:14:
                    b6:c1:ea:ef:a3:db:be:8d:f4:e2:6c:24:b1:e9:8e:
                    83:14:ed:e2:fb:17:28:b0:9e:97:cf:43:d0:7a:a9:
                    a4:70:d7:2e:ab:c9:a2:96:22:3d:34:8f:7e:49:65:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:F5:0B:E3:18:8D:53:83:53:A8:EF:FB:0E:3D:BB:67:C5:26:B1
            X509v3 Authority Key Identifier:
                keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/q771C-MYjVODU6jv-w49u2fFJrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.181.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:81:60:70:90:a2:56:bc:75:d0:61:0c:56:e5:93:18:df:cd:
         b6:4e:5e:d1:a9:2c:df:9e:00:55:e6:1c:85:20:b3:c2:e9:6d:
         3c:45:2f:3f:33:df:72:a4:c0:cf:cf:fd:7e:bd:f6:68:3f:62:
         bd:76:71:41:a1:6f:13:99:46:75:d1:ab:74:98:e7:8b:b6:7a:
         4f:07:b1:e7:d2:7a:fb:b8:c8:6c:ee:a7:6d:cf:d6:fb:25:ab:
         82:68:6e:7c:1b:0e:a7:3e:bb:cb:16:88:d3:97:e1:90:00:1d:
         67:0b:74:1e:b9:c4:1a:9c:f4:c4:d1:75:f0:ba:a6:c4:2d:64:
         5b:ed:ea:f7:1a:ba:5f:c7:0e:68:1a:50:73:05:60:94:75:cb:
         26:92:70:26:d6:8e:b5:bd:f9:85:ea:c1:08:a6:77:42:40:f6:
         6a:92:f9:2e:55:9f:aa:b8:8c:c7:f9:0d:a5:df:36:02:87:9f:
         46:b5:e9:4d:d5:4d:25:d3:e9:6a:05:ad:84:14:a8:fb:b4:28:
         0d:b0:a1:d0:63:19:46:f9:c0:7e:26:7c:f4:f2:93:04:8c:c4:
         3a:30:72:0f:ba:6a:14:69:39:0d:34:57:0b:a6:ef:23:3a:38:
         cb:3e:e6:40:f6:4b:57:e9:15:96:f8:bd:e5:00:e2:8d:06:dd:
         de:a2:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----