Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/wWCZZPjY-3IpFi5UtHHPltjBo2k.roa
File:                     wWCZZPjY-3IpFi5UtHHPltjBo2k.roa (raw, json)
Hash identifier:          cE/pxT1z+QKOC0pp5eF51BYgfQS2uRkeqV/GzHnmz18=
Subject key identifier:   C1:60:99:64:F8:D8:FB:72:29:16:2E:54:B4:71:CF:96:D8:C1:A3:69
Certificate issuer:       /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial:       02F9D1B9
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/wWCZZPjY-3IpFi5UtHHPltjBo2k.roa
Signing time:             Sat 01 Jan 2022 10:00:45 +0000
ROA not before:           Sat 01 Jan 2022 10:00:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207605
IP address blocks:        176.119.205.0/24 maxlen: 24
                          2a05:4500::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49926585 (0x2f9d1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
        Validity
            Not Before: Jan  1 10:00:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1609964f8d8fb7229162e54b471cf96d8c1a369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:b3:fc:ca:87:38:b4:7d:e5:6c:f7:88:99:
                    36:a9:27:2c:62:76:49:eb:9c:ba:58:4f:67:00:01:
                    b5:ff:f5:dc:9f:2c:c4:8d:39:5c:24:9c:5a:7f:ab:
                    42:7d:fb:ce:75:0f:53:e7:ff:75:45:6e:24:ca:44:
                    1b:43:2a:98:1e:ec:4a:65:bd:9b:3d:71:0b:a2:d6:
                    54:dc:14:4a:ca:00:bd:0a:55:61:ac:b8:93:41:37:
                    99:14:cf:39:d9:aa:cf:f4:37:63:8a:26:85:d1:49:
                    ab:92:1f:dc:4c:f2:60:9e:2c:48:9d:ec:b6:41:ae:
                    d0:c1:bc:8b:14:c5:b3:21:3e:36:09:14:42:14:ac:
                    86:96:b3:ed:59:24:5b:17:eb:b7:d3:23:5d:07:50:
                    48:4f:fd:67:22:2d:50:85:90:93:24:23:5c:e2:e3:
                    e8:e8:d0:e0:f6:64:c3:a0:ff:5a:f3:60:11:58:9f:
                    0a:a5:b3:89:ff:f8:36:ec:40:58:76:54:fe:f8:85:
                    42:05:3b:0c:6a:23:65:11:5b:b9:ca:dd:e6:4b:3d:
                    fb:95:a9:b7:3a:5b:ef:e4:d5:e8:af:99:29:91:07:
                    fe:94:64:cd:8e:7a:4d:40:2e:1a:b5:21:5b:62:ba:
                    a5:02:dd:71:ef:04:c1:47:ec:cf:3a:dc:2f:4f:4a:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:99:64:F8:D8:FB:72:29:16:2E:54:B4:71:CF:96:D8:C1:A3:69
            X509v3 Authority Key Identifier:
                keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/wWCZZPjY-3IpFi5UtHHPltjBo2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.205.0/24
                IPv6:
                  2a05:4500::/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:83:ff:22:32:b4:e4:4a:e1:5a:26:33:57:cf:33:a2:b1:c8:
         52:36:a0:62:cd:6b:79:cf:cc:47:42:f2:23:1d:a2:6a:9d:fa:
         4b:df:b1:65:96:a4:71:43:ce:df:8a:55:66:93:51:e6:12:84:
         dc:b7:32:a1:34:6f:37:12:c4:52:5e:38:5d:93:64:2a:f1:fc:
         9d:df:5a:db:8f:8a:02:86:af:91:45:f2:00:70:f0:03:35:a9:
         d8:e8:20:41:4d:6a:60:84:ef:69:31:ea:2a:21:bf:ac:d6:6b:
         04:61:ef:d6:c2:77:99:e4:fd:15:98:97:0a:45:f6:cd:d8:f6:
         02:68:19:c1:73:0d:6b:cb:c8:7a:d0:9b:54:39:d6:49:f2:5b:
         65:eb:86:e0:1a:fe:55:7c:d9:cd:e3:12:74:ad:d4:5a:28:0c:
         77:21:85:68:19:0c:4e:12:8d:50:0c:31:30:f9:6e:cf:0d:2a:
         51:5d:99:4f:e7:ff:e0:65:df:65:11:e3:ea:52:ee:82:ea:74:
         90:fe:72:ea:e8:94:77:5c:2c:81:ee:8c:53:09:bb:5c:a6:4c:
         98:01:a6:0b:ab:a6:d4:23:0d:1e:c4:b6:46:ce:70:10:a6:92:
         c9:bd:97:38:41:5c:31:a5:ab:47:61:51:f8:81:f4:95:26:e3:
         3b:0f:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----