Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa
File:                     AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa (raw, json)
Hash identifier:          W/eF4B7tsG8W46RQCmzvLWOkJqCXHsNO/4W5yY+urk8=
Subject key identifier:   01:E4:D0:77:B3:6D:E5:DF:E1:11:3B:F4:1F:05:C5:E6:43:D8:10:8E
Certificate issuer:       /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial:       0A1AAC
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa
Signing time:             Mon 28 Feb 2022 08:23:52 +0000
ROA not before:           Mon 28 Feb 2022 08:23:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8535
IP address blocks:        194.149.228.0/22 maxlen: 22
                          2a02:bd8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662188 (0xa1aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
        Validity
            Not Before: Feb 28 08:23:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01e4d077b36de5dfe1113bf41f05c5e643d8108e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:47:dd:c8:28:6f:43:b7:44:8e:08:a1:59:
                    81:28:3c:47:76:a9:4b:89:38:34:85:a3:c9:83:4d:
                    e5:b5:c7:dd:1f:5e:e1:3c:d5:1d:af:d8:f9:e7:42:
                    61:02:ef:48:a0:f1:0c:3c:84:97:f3:99:8e:aa:2f:
                    86:27:55:aa:0c:3e:06:65:f6:27:be:b4:32:37:93:
                    53:fc:0a:30:0e:8c:aa:3d:84:dc:af:d1:30:79:d6:
                    e3:82:1d:62:eb:3e:f3:16:64:bb:c7:56:7a:54:5b:
                    bd:9e:89:01:88:d8:0a:6e:90:a7:7b:4e:79:7a:60:
                    28:0c:26:f4:be:0f:a3:33:47:e4:6e:64:f8:3f:bb:
                    24:f1:66:95:02:4d:b7:fb:73:4c:d0:f3:47:4e:7e:
                    94:a0:f5:38:97:3f:ed:5c:07:f9:1b:21:25:5f:c6:
                    6b:16:83:7c:98:79:12:51:ee:3b:13:a8:02:6c:4b:
                    2a:5f:b5:80:fe:37:c0:62:36:90:41:d6:a6:56:0b:
                    41:01:5c:13:a4:6b:c4:d0:ee:06:eb:62:49:3c:46:
                    a6:ea:52:70:1d:72:1b:34:32:ca:b7:5c:16:6a:c3:
                    e9:ca:0f:52:a7:3a:e9:ea:51:f8:2a:b4:4f:b1:22:
                    52:25:f9:67:7f:40:47:f8:f6:8f:20:81:76:3b:82:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E4:D0:77:B3:6D:E5:DF:E1:11:3B:F4:1F:05:C5:E6:43:D8:10:8E
            X509v3 Authority Key Identifier:
                keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/AeTQd7Nt5d_hETv0HwXF5kPYEI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.149.228.0/22
                IPv6:
                  2a02:bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:d3:be:73:ce:8e:98:0e:a2:83:8b:28:87:32:27:a2:f6:
         7a:f6:f6:8c:4a:f7:81:64:43:b8:18:b6:63:f7:c2:b4:3f:68:
         d7:33:77:77:1b:aa:06:c3:39:3a:f5:63:4a:26:93:30:d8:10:
         53:fb:74:ec:47:e0:8a:44:98:b6:24:68:88:9b:06:2f:2b:22:
         3a:13:cf:0e:e6:de:8e:cb:b6:76:c5:48:d1:29:4b:7c:45:5d:
         02:9e:65:2f:bd:9d:75:07:9e:d4:87:22:31:6c:e5:34:5b:7f:
         f6:6e:43:67:3f:65:73:b6:a9:81:41:ed:87:84:f3:52:70:e8:
         f7:59:da:d5:4d:c2:bc:f8:f7:07:94:69:13:95:03:84:91:5d:
         03:68:03:3b:97:c4:6a:6e:f0:ab:e2:0b:86:69:d7:60:f3:c2:
         c1:31:49:5b:46:22:ac:d5:f6:c4:74:9c:6d:65:4d:42:e6:80:
         82:81:4d:46:c0:a9:c1:ca:e0:e6:6d:0a:5c:9b:c8:33:2c:26:
         53:71:2d:3a:b2:27:df:8f:76:14:bb:e6:2f:12:75:5b:68:a4:
         3f:bc:16:c2:db:d4:84:44:99:81:1c:ed:54:f9:56:e4:f4:73:
         2f:91:e4:2a:86:52:6c:c4:2e:2e:43:ad:c5:41:d6:eb:8a:44:
         d0:99:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----