Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J1SEyxrntgzo0mMaLqcbRGQUKBo.roa
File:                     J1SEyxrntgzo0mMaLqcbRGQUKBo.roa (raw, json)
Hash identifier:          3AehzDn27z1Fn7KYOzLhBTuOKerROoRpE7Q9+cvNRK0=
Subject key identifier:   27:54:84:CB:1A:E7:B6:0C:E8:D2:63:1A:2E:A7:1B:44:64:14:28:1A
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       0184E17D80064EAC8EB61BADA87FE5C42441
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J1SEyxrntgzo0mMaLqcbRGQUKBo.roa
Signing time:             Mon 05 Dec 2022 08:53:29 +0000
ROA not before:           Mon 05 Dec 2022 08:53:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203724
IP address blocks:        185.212.107.0/24 maxlen: 24
                          185.212.106.0/24 maxlen: 24
                          185.125.226.0/24 maxlen: 24
                          185.125.225.0/24 maxlen: 24
                          185.125.224.0/24 maxlen: 24
                          185.212.104.0/24 maxlen: 24
                          185.212.105.0/24 maxlen: 24
                          185.125.227.0/24 maxlen: 24
                          2a06:bcc0:5::/48 maxlen: 48
                          2a06:bcc0:9::/48 maxlen: 48
                          2a06:bcc0:4::/48 maxlen: 48
                          2a06:bcc0:2::/48 maxlen: 48
                          2a06:bcc0:3::/48 maxlen: 48
                          2a06:bcc0:1::/48 maxlen: 48
                          2a06:bcc0:11::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e1:7d:80:06:4e:ac:8e:b6:1b:ad:a8:7f:e5:c4:24:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Dec  5 08:53:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=275484cb1ae7b60ce8d2631a2ea71b446414281a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5d:9c:99:12:6f:f8:04:82:9a:97:a7:df:90:
                    41:57:97:ee:75:a9:f8:c7:93:69:38:aa:4a:c4:db:
                    24:60:91:86:72:11:b3:c3:a5:6d:7b:0d:ab:43:20:
                    7c:ec:1e:33:1c:3a:41:7c:af:3f:e8:a2:e3:bf:d5:
                    17:dd:f7:f6:3f:94:e7:ee:f3:c4:39:b0:34:b6:72:
                    03:96:13:44:09:7e:c2:27:2a:6f:91:d7:df:1b:70:
                    80:8f:72:bf:03:64:d3:c7:f4:9e:40:5e:1a:a7:2f:
                    3d:98:52:11:6a:66:56:2e:ec:c7:c2:85:a1:20:b4:
                    f1:fc:74:56:c8:cc:4e:91:7b:a5:62:42:52:4c:0d:
                    bb:c4:3a:28:18:0c:f0:1e:48:c2:f0:e9:31:4c:28:
                    02:f2:d7:77:59:4f:c5:6c:a1:0c:47:ba:86:7d:08:
                    2f:f0:28:c8:0a:d1:42:55:e6:8c:30:99:43:d8:b6:
                    03:fc:b0:40:db:1f:72:3a:b7:f4:db:99:53:ba:bd:
                    13:75:2b:f0:e0:19:f8:57:04:6c:87:8e:90:5d:49:
                    99:00:84:e6:91:34:21:74:8b:a3:10:5f:9f:30:18:
                    c3:b4:57:4e:40:55:a6:b1:af:28:04:c1:87:9a:93:
                    2d:ed:0c:3d:d6:58:1e:54:60:74:cd:71:d5:f0:11:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:84:CB:1A:E7:B6:0C:E8:D2:63:1A:2E:A7:1B:44:64:14:28:1A
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J1SEyxrntgzo0mMaLqcbRGQUKBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.125.224.0/22
                  185.212.104.0/22
                IPv6:
                  2a06:bcc0:1::-2a06:bcc0:5:ffff:ffff:ffff:ffff:ffff
                  2a06:bcc0:9::/48
                  2a06:bcc0:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:95:d5:a2:e8:e2:db:6c:b0:3c:f8:62:e7:4b:6c:e6:c4:86:
         eb:c2:0f:62:a3:91:33:ee:4b:dc:82:85:13:32:67:17:a8:38:
         3c:10:c5:90:f0:c8:b0:b0:d0:bf:4e:c8:91:3a:51:85:62:cb:
         42:55:51:92:37:25:dc:d1:da:06:f5:78:56:3d:27:e7:18:17:
         6a:6f:2d:2a:b1:47:02:4f:f8:42:d0:15:6b:16:7c:eb:42:82:
         f5:af:72:dc:0a:4a:13:b9:d1:c2:2d:53:10:42:8b:5a:96:45:
         5d:47:1e:76:2a:67:cc:bd:25:7f:1b:60:eb:b8:7a:2d:4c:b0:
         b2:1e:c4:76:fe:cf:5a:e5:9b:99:af:ad:7f:24:b0:84:39:4a:
         91:47:45:67:74:e8:83:11:e6:d0:31:e6:01:98:01:e5:95:f4:
         ba:f9:4c:5c:d7:25:ac:05:b6:29:8f:43:ee:c1:41:ba:e9:f4:
         d0:db:0b:d5:a3:9c:f1:7b:94:11:09:71:6e:aa:7b:17:a9:6e:
         82:25:8a:8e:19:f5:c4:7a:74:92:ef:4e:97:84:6a:b3:20:d4:
         52:93:62:96:28:e6:cc:4b:60:85:88:af:8c:9a:43:13:3a:b1:
         27:db:af:53:70:25:58:0e:ca:d1:e0:1f:91:58:89:71:21:ac:
         fd:9b:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----