Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/CX_a4VI0bjshBJvWg-FeJbSWZoY.roa
File:                     CX_a4VI0bjshBJvWg-FeJbSWZoY.roa (raw, json)
Hash identifier:          ccZAsxyi5NPT3R6ZZg4L63pL7rmfhv0L074vQpiFlqg=
Subject key identifier:   09:7F:DA:E1:52:34:6E:3B:21:04:9B:D6:83:E1:5E:25:B4:96:66:86
Certificate issuer:       /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial:       02C1364C
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/CX_a4VI0bjshBJvWg-FeJbSWZoY.roa
Signing time:             Sat 01 Jan 2022 11:58:03 +0000
ROA not before:           Sat 01 Jan 2022 11:58:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        85.28.52.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46216780 (0x2c1364c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
        Validity
            Not Before: Jan  1 11:58:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=097fdae152346e3b21049bd683e15e25b4966686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:95:96:f8:92:10:8f:b6:c4:fa:f5:cb:91:
                    cd:4c:99:e1:78:f3:ad:6e:b5:3b:c0:52:5a:6b:52:
                    b7:da:1d:01:9e:99:52:54:12:66:fc:b7:8c:ab:fd:
                    ae:41:b7:db:5e:de:f1:df:58:9e:48:70:77:f0:a2:
                    b8:06:5d:47:43:88:1c:5d:94:64:c8:94:01:d9:05:
                    73:8d:0a:75:95:fc:cb:51:9e:b8:e5:1d:6b:fc:3a:
                    ad:16:89:ae:a0:30:fc:d3:1d:ed:89:47:4f:8e:42:
                    dd:d2:84:32:eb:ec:69:48:d8:e2:ea:03:43:df:bb:
                    67:c1:f2:31:36:1e:10:59:15:df:79:b7:5f:be:fd:
                    62:ac:33:4b:24:e0:d0:5e:da:ff:30:78:f2:fc:f4:
                    f0:30:f4:96:80:e1:e5:00:5d:71:8b:d4:d8:01:4b:
                    2b:ea:22:b8:b2:bf:a3:11:ef:cf:dc:e8:b9:05:e5:
                    18:bd:37:5a:21:82:a8:d6:7b:95:0e:dc:7e:54:10:
                    bb:d3:39:95:ca:89:a4:6b:81:c2:38:0f:b2:e2:66:
                    c7:a7:03:7a:37:43:44:42:6f:79:9b:cf:36:54:ab:
                    51:c9:68:85:92:23:84:2e:61:ad:89:bb:19:03:e6:
                    c9:c0:a4:62:b3:97:4e:5f:90:2b:3e:45:f6:06:28:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:DA:E1:52:34:6E:3B:21:04:9B:D6:83:E1:5E:25:B4:96:66:86
            X509v3 Authority Key Identifier:
                keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/CX_a4VI0bjshBJvWg-FeJbSWZoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.28.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:8b:65:0e:09:bd:ac:ae:06:74:82:9d:7a:48:37:91:ec:29:
         c7:50:58:57:3c:20:11:e2:48:33:d6:86:92:c9:23:b3:b5:43:
         59:9c:69:34:5c:32:da:02:1f:b5:8e:75:b9:91:54:6b:4c:aa:
         99:47:42:cf:e4:a1:c1:45:8b:7c:a6:e6:e8:cd:b8:e4:4c:29:
         e5:17:94:e3:44:00:8f:f2:4c:07:a5:1d:5e:80:52:67:ec:fd:
         09:41:23:99:43:80:0a:46:de:7d:80:bb:c6:b5:3e:07:24:74:
         5b:b8:24:6f:88:39:21:c8:a4:60:e1:6b:d7:22:46:19:24:4e:
         d7:38:27:9b:b9:14:d9:31:a7:29:3e:66:ac:b9:e1:29:f1:05:
         ce:40:ee:e4:9a:8e:2a:48:a8:e3:4f:e7:05:d8:36:9a:a0:d9:
         46:8f:27:d9:83:55:e8:18:27:58:aa:b7:1f:5e:ca:90:e3:7c:
         98:05:90:a4:87:6d:af:51:96:4a:40:5d:83:de:2b:e6:7d:b9:
         49:de:3c:fa:ea:ac:9f:27:9d:f4:f9:d7:fe:b6:38:6c:12:d2:
         8a:07:d7:63:df:ff:52:c5:6e:77:c8:f7:23:7a:91:b4:95:ae:
         cf:c3:f4:22:2f:07:d2:a4:00:e2:78:cb:6f:80:64:c7:38:0f:
         7f:f3:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----