Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/xgX0W1Ih1NP0Ran1-co3PCrq34Q.roa
File:                     xgX0W1Ih1NP0Ran1-co3PCrq34Q.roa (raw, json)
Hash identifier:          ZOrDk/Eu6bp2apbwoJ3oKM2vLmNPWCDXgLz901SzTqk=
Subject key identifier:   C6:05:F4:5B:52:21:D4:D3:F4:45:A9:F5:F9:CA:37:3C:2A:EA:DF:84
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       03B721A3
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/xgX0W1Ih1NP0Ran1-co3PCrq34Q.roa
Signing time:             Sat 01 Jan 2022 01:55:37 +0000
ROA not before:           Sat 01 Jan 2022 01:55:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62217
IP address blocks:        77.247.116.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62333347 (0x3b721a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Jan  1 01:55:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c605f45b5221d4d3f445a9f5f9ca373c2aeadf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:99:ba:99:0a:31:96:e5:2e:b5:43:7c:cc:
                    32:22:82:58:a7:d4:46:8a:6a:c6:7d:96:e4:4e:2f:
                    62:2d:66:66:7b:9b:2a:1e:9e:49:fb:d2:0f:71:93:
                    a1:c4:5b:78:ce:e7:ae:0a:19:ba:b5:a3:22:e3:e1:
                    c2:5c:c5:b1:93:36:9a:96:cd:73:a2:46:ee:67:bc:
                    30:d4:3d:63:d1:7d:eb:cd:b1:e5:86:9e:ff:d5:bf:
                    08:dd:53:dc:67:00:a4:0b:d7:f0:30:25:65:23:dd:
                    1c:07:56:2e:5f:e7:f5:45:37:b7:33:f3:9e:15:17:
                    40:6c:e3:be:09:a6:15:2b:31:bf:38:3a:8c:4f:c4:
                    60:e6:47:46:06:4b:b6:58:eb:9d:0c:9d:c7:99:59:
                    e5:a5:fd:50:27:53:3f:e8:b7:f9:08:ba:93:34:aa:
                    9c:d1:a4:e9:33:2d:29:80:c9:27:83:69:1d:98:54:
                    13:f3:eb:ff:df:c2:4f:10:1c:05:fe:f7:49:51:aa:
                    43:5d:c2:7d:b6:c9:54:83:7e:a6:e1:20:9e:1c:41:
                    6e:e9:a6:ef:cb:35:08:62:a0:54:d2:d2:ac:74:24:
                    1d:21:7e:b8:5e:40:71:a4:be:5e:3e:d6:de:af:b1:
                    a0:4e:da:8c:3e:58:ea:07:92:f5:d3:33:27:f4:f6:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:05:F4:5B:52:21:D4:D3:F4:45:A9:F5:F9:CA:37:3C:2A:EA:DF:84
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/xgX0W1Ih1NP0Ran1-co3PCrq34Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:39:5e:37:7a:99:63:2c:7b:f7:9b:4b:c7:57:d1:17:b3:
         92:2f:2b:dc:e2:28:84:df:19:c9:fc:4f:cd:c1:ab:45:a6:ff:
         9b:91:cb:48:51:bd:e6:be:2b:47:11:09:b2:f5:67:ab:51:95:
         b3:2c:b5:6d:56:c1:fc:cd:0c:41:3a:47:7f:b7:cb:6f:bc:68:
         c8:8b:5a:bc:31:97:f0:33:e6:cf:6f:47:7b:46:6b:07:01:c3:
         98:3c:6a:83:83:c2:6c:49:94:00:98:22:bc:ff:6e:ed:69:29:
         4e:05:3b:60:da:d1:f2:a4:48:e1:49:e1:d8:7a:f4:4c:65:c7:
         58:c4:99:92:a1:a1:63:fb:db:5a:11:5b:fb:3f:f0:47:28:06:
         ae:b8:de:48:ea:82:6d:ae:b5:22:0d:50:b3:5d:83:a5:8a:bc:
         bf:08:59:73:61:f0:33:57:90:59:66:51:97:33:8a:ac:56:41:
         1a:d3:44:da:6f:1d:b6:b5:6b:31:2c:d9:05:a9:b6:5c:60:c3:
         fe:cc:5f:e4:cd:fc:6d:81:42:ad:44:f6:ff:41:8c:51:03:9c:
         0c:2b:f6:8a:c8:fe:eb:87:92:6b:0c:67:71:c2:04:aa:53:6c:
         76:b9:08:6a:59:e5:a2:00:04:f6:a7:30:8c:8b:1e:a2:3d:2f:
         18:1f:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----