Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BhH2iJJAR8_w19juZ1f3-czGymY.roa
File:                     BhH2iJJAR8_w19juZ1f3-czGymY.roa (raw, json)
Hash identifier:          nd12Bj5mevDKPeg9v6vA5H0s3l2c7KJ41cUMrFHPsLk=
Subject key identifier:   06:11:F6:88:92:40:47:CF:F0:D7:D8:EE:67:57:F7:F9:CC:C6:CA:66
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       01847EF483FF7ED33C42F259FD9F49787651
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BhH2iJJAR8_w19juZ1f3-czGymY.roa
Signing time:             Wed 16 Nov 2022 05:41:04 +0000
ROA not before:           Wed 16 Nov 2022 05:41:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        185.241.210.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7e:f4:83:ff:7e:d3:3c:42:f2:59:fd:9f:49:78:76:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Nov 16 05:41:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0611f688924047cff0d7d8ee6757f7f9ccc6ca66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:ed:79:c9:26:f7:53:ed:86:d7:3e:2e:00:
                    a3:ef:8a:ad:53:31:f2:9e:2c:9e:99:8f:e9:33:bd:
                    43:a2:d9:aa:fa:b3:40:e2:cb:a1:4b:48:43:0e:9f:
                    b6:5f:cf:9d:46:cb:d6:c7:c2:6e:cc:0c:72:e7:6f:
                    09:25:dd:61:5e:7d:37:01:0d:41:d9:6d:82:73:d3:
                    22:26:1e:db:b6:e0:ca:3a:d6:a3:9a:40:b2:d6:2e:
                    75:71:b9:5d:3b:76:98:76:a7:d9:59:7a:cc:06:11:
                    ea:8a:1d:0c:52:5b:d7:d5:56:0c:ac:38:b2:7e:04:
                    93:86:4d:2f:94:82:5c:27:bf:01:8a:3b:51:f5:f2:
                    82:ff:4f:85:46:ba:dc:be:26:0c:46:f4:4d:a5:56:
                    8f:84:8d:85:da:cd:e5:a9:f6:da:31:fa:e6:70:6b:
                    51:ca:ef:04:e1:78:83:b1:47:d7:ad:df:21:41:66:
                    b9:8e:73:6e:64:71:44:63:57:5e:ed:56:d3:bf:5e:
                    e9:8a:66:37:3a:e2:7c:67:2a:63:77:01:16:36:dc:
                    a9:29:48:ff:45:4e:76:5b:ee:ba:47:4d:4d:3f:28:
                    59:8f:0c:2c:e4:57:86:b9:a6:73:b0:f3:a3:7a:83:
                    52:b4:ad:19:98:12:74:c8:24:00:6d:c8:b9:81:a6:
                    c6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:F6:88:92:40:47:CF:F0:D7:D8:EE:67:57:F7:F9:CC:C6:CA:66
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BhH2iJJAR8_w19juZ1f3-czGymY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:bb:6a:14:28:67:8c:84:ee:5c:f5:b9:6d:8a:01:9f:b8:06:
         f6:3d:f8:6f:35:15:7e:46:aa:32:de:33:b0:06:4c:10:05:11:
         84:55:24:25:e5:a6:c7:78:3f:cf:05:13:fb:35:ef:c6:cf:47:
         10:76:d7:da:eb:21:b2:f0:be:11:43:8d:1b:f8:8b:ec:72:94:
         7d:b0:ab:89:73:23:16:77:a6:b6:e0:17:eb:66:c9:c2:a3:e5:
         83:a1:05:d6:b8:0a:84:70:98:36:13:5b:be:89:6a:ea:b6:9f:
         cf:82:e9:2a:69:03:6b:6b:37:52:84:a6:27:f2:97:dc:05:71:
         0c:11:65:a3:14:c4:11:29:51:45:52:22:0d:93:2b:6b:12:b3:
         4d:76:52:e4:2b:f8:59:f8:a0:cf:56:ef:59:7e:57:5b:a8:da:
         0b:9e:d2:79:8e:43:4b:29:82:33:2a:bb:b9:ba:b1:1b:fa:5e:
         61:71:93:ec:ed:62:4d:9e:93:f4:43:d6:2f:52:7f:c3:7c:2b:
         fd:b1:55:79:1b:6c:f4:0e:58:e1:94:53:03:30:3a:61:70:5e:
         2b:f6:01:2c:7e:41:3a:24:64:82:97:4b:b0:38:34:dc:15:16:
         d0:8e:4f:77:36:ca:2a:15:12:2f:4c:cd:11:94:e9:0e:0c:f4:
         d3:b2:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----