Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/y5TzJzaDNuRwbdX_TOzfvj-DJWo.roa
File:                     y5TzJzaDNuRwbdX_TOzfvj-DJWo.roa (raw, json)
Hash identifier:          ZlRadw8qhbI6P36cV69uaeM0hBC97LYMG5EP5/7QMEs=
Subject key identifier:   CB:94:F3:27:36:83:36:E4:70:6D:D5:FF:4C:EC:DF:BE:3F:83:25:6A
Certificate issuer:       /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial:       10A44216
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/y5TzJzaDNuRwbdX_TOzfvj-DJWo.roa
Signing time:             Sat 01 Jan 2022 07:53:15 +0000
ROA not before:           Sat 01 Jan 2022 07:53:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39122
IP address blocks:        185.176.102.0/24 maxlen: 24
                          2a0a:1182::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279200278 (0x10a44216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
        Validity
            Not Before: Jan  1 07:53:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb94f327368336e4706dd5ff4cecdfbe3f83256a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:b9:b5:73:86:78:d2:a9:56:40:aa:ad:ad:
                    65:43:a6:46:2d:61:a2:7d:dc:3e:ed:2a:1f:99:39:
                    ac:b9:09:cc:1e:56:f6:12:81:cc:40:f6:5a:9c:c5:
                    31:89:ee:41:74:83:61:6e:c9:a7:80:6f:96:1b:66:
                    17:48:d4:48:b0:71:cd:bd:c9:76:50:e9:a8:70:1a:
                    fd:5a:d3:88:62:dd:9a:c0:31:a9:db:9a:0b:9d:e2:
                    85:11:20:85:ca:dc:40:5e:8e:a3:03:9a:e7:1c:c0:
                    5b:0d:b9:a2:cf:14:53:d2:00:33:40:30:4a:9d:07:
                    6f:ec:cc:ca:46:37:e7:f6:a2:07:8a:06:95:b2:24:
                    fa:97:9a:23:85:ff:78:72:60:b1:cf:4f:74:f1:9f:
                    a1:dd:fe:e0:8f:8c:df:e9:04:62:32:c0:a9:8c:c6:
                    2c:c6:18:03:51:25:b9:76:ee:32:a1:8e:b8:8d:b4:
                    55:73:c2:42:61:02:26:d6:28:a3:10:7d:35:d4:7d:
                    23:09:c8:c0:d3:69:52:cf:fa:ca:a1:0a:44:b6:9a:
                    4e:ea:87:af:26:1c:bc:08:97:8a:43:49:5b:36:24:
                    54:c9:63:e6:1a:1b:32:8d:aa:c5:08:21:4c:95:65:
                    bf:ed:eb:aa:60:5d:97:e8:12:ce:f2:00:ec:a5:32:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:94:F3:27:36:83:36:E4:70:6D:D5:FF:4C:EC:DF:BE:3F:83:25:6A
            X509v3 Authority Key Identifier:
                keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/y5TzJzaDNuRwbdX_TOzfvj-DJWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.102.0/24
                IPv6:
                  2a0a:1182::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:51:08:39:a6:45:b3:b0:2f:2e:1b:a9:46:66:ac:47:fc:
         3c:33:fd:be:0e:c9:34:ed:5a:04:cc:b2:b5:ab:b7:71:13:66:
         52:c4:3c:40:5a:ae:ed:2d:e8:46:99:d5:6d:15:01:43:63:cf:
         ca:01:24:a9:12:da:86:59:55:96:0f:97:33:b3:b0:04:f5:3c:
         3c:fc:b5:2b:b6:6b:cf:2b:ae:cb:c4:7e:bb:b5:85:8b:8c:42:
         1b:9c:29:77:8e:e5:a2:61:b4:47:98:9c:26:32:00:f3:5e:5d:
         89:04:e7:4b:c4:91:ef:f8:c6:7c:4a:c4:97:af:b2:32:67:56:
         b6:1d:82:be:68:6a:80:3e:c3:ee:f7:11:94:21:94:26:8c:b5:
         c6:9f:ec:d3:29:7d:4d:43:70:59:a4:51:63:c3:80:4f:c8:4e:
         ac:25:01:6d:e0:bc:eb:4a:41:46:9b:4f:d6:d0:ed:f3:66:13:
         fd:2a:db:8a:c0:6a:4a:30:7c:be:ef:50:10:9c:4a:fd:f7:0b:
         4a:e5:2f:17:45:1d:20:f1:fc:6e:55:92:c4:3a:9a:ee:ac:80:
         28:5e:a8:dd:a0:08:72:21:d1:a6:6d:aa:3f:65:d1:ab:4f:c1:
         77:91:8b:5c:89:fd:c3:36:23:79:a9:6e:a5:dc:79:09:68:ea:
         d7:80:eb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----