Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/HKJMq7ZUZUAv95OVpsZBbBs0lfk.roa
File:                     HKJMq7ZUZUAv95OVpsZBbBs0lfk.roa (raw, json)
Hash identifier:          K/tTSo5N3VrrPrA90AOggWJ6W4Yse6SHiKhWa3dCVl0=
Subject key identifier:   1C:A2:4C:AB:B6:54:65:40:2F:F7:93:95:A6:C6:41:6C:1B:34:95:F9
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       0F4E23
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/HKJMq7ZUZUAv95OVpsZBbBs0lfk.roa
Signing time:             Sun 17 Apr 2022 15:07:01 +0000
ROA not before:           Sun 17 Apr 2022 15:07:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8849
IP address blocks:        88.210.36.0/23 maxlen: 24
                          2a06:f901:c000::/36 maxlen: 36
                          2a06:f901:8000::/36 maxlen: 36
                          2a06:f901:4000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003043 (0xf4e23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Apr 17 15:07:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ca24cabb65465402ff79395a6c6416c1b3495f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:51:17:c6:73:66:9c:c5:61:a9:13:61:17:
                    9f:da:53:86:bc:9f:b1:11:51:06:79:26:1b:47:4a:
                    19:10:f0:f6:27:a4:59:5b:4a:8f:8c:52:e0:09:6c:
                    a8:36:b6:9a:ad:27:d9:00:bd:83:c6:6e:19:1e:bf:
                    8f:88:cb:d8:dd:b5:d7:03:7b:3d:f2:1c:d2:68:7b:
                    b6:ab:6e:eb:5f:13:fb:da:c4:26:df:c2:85:3f:32:
                    f5:66:c3:43:ba:8c:c9:b5:a3:c7:d5:41:5b:e0:40:
                    41:f2:2d:b9:fc:d5:70:d8:80:11:11:d7:80:d6:06:
                    6b:a9:9a:9f:62:d9:85:d0:3d:c8:cd:04:9a:10:38:
                    36:19:b2:6b:a5:04:46:a8:b7:8a:fb:1f:47:d2:45:
                    19:e2:fb:59:e7:2e:18:fc:36:77:ab:3b:ba:1f:50:
                    9b:39:41:a0:68:34:67:65:07:79:4c:4c:29:a3:c8:
                    05:c9:4f:49:fe:57:db:64:09:59:cc:fc:a4:41:16:
                    09:b2:ef:ac:1a:5f:8f:2f:9c:9a:8c:f6:88:98:be:
                    9a:e8:6a:92:63:35:60:72:c6:0a:c7:cd:8b:39:af:
                    af:e0:15:9c:31:ef:dc:b0:c7:6e:4e:85:1a:8d:b8:
                    aa:5b:c0:2c:c7:8f:3b:69:a0:52:c8:c8:16:9a:92:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A2:4C:AB:B6:54:65:40:2F:F7:93:95:A6:C6:41:6C:1B:34:95:F9
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/HKJMq7ZUZUAv95OVpsZBbBs0lfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.210.36.0/23
                IPv6:
                  2a06:f901:4000::/36
                  2a06:f901:8000::/36
                  2a06:f901:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:80:7d:fa:8a:a5:b1:97:56:52:76:4d:03:fb:4b:4d:06:27:
         d9:d0:2d:58:16:6e:e8:c5:3a:8b:71:52:c4:8a:68:4c:4e:a0:
         af:dd:88:26:c4:a4:9e:19:9e:37:bb:18:c7:a0:66:10:c5:55:
         e7:68:c2:f2:af:2b:b7:40:77:04:b1:5b:80:c4:23:85:45:ba:
         e7:dd:b5:57:bf:33:86:92:a1:15:bb:0a:e5:f1:48:9f:cf:8b:
         77:1e:2a:ed:58:69:88:f9:fc:da:8f:8d:b1:46:51:5d:0b:7b:
         ce:0d:2f:41:b7:59:d2:60:d4:4a:54:06:8d:e1:21:23:ea:34:
         85:df:48:fb:cd:46:31:f5:90:6b:d9:4b:ab:a1:15:95:bc:ea:
         47:58:ff:a0:0d:b9:0e:f4:61:99:b8:99:82:2f:be:40:91:ba:
         1a:8b:23:7e:37:1c:76:2d:98:54:0a:1e:b2:8f:3e:e0:55:8b:
         6d:0f:13:06:e7:a1:47:69:4f:e5:ed:d7:46:cc:6d:db:18:68:
         7a:f4:38:43:03:1f:79:60:a1:86:71:d4:db:e7:14:3e:2f:71:
         6b:c3:6b:ce:e6:ff:6d:f7:5d:43:40:8f:7b:f6:cf:d5:07:b7:
         be:a2:33:23:79:d9:a7:ab:28:0f:20:80:3f:ca:73:de:71:59:
         b2:97:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----