Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/fqzG8r4lhzXAZty526-HIucFRds.roa
File:                     fqzG8r4lhzXAZty526-HIucFRds.roa (raw, json)
Hash identifier:          iHnhZpm1nd5DZsFT7c+crWUrsdy6bOFErejuY02z5lI=
Subject key identifier:   7E:AC:C6:F2:BE:25:87:35:C0:66:DC:B9:DB:AF:87:22:E7:05:45:DB
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       018462F12ABAC64EF9D1A8ABE6C58A25B3A7
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/fqzG8r4lhzXAZty526-HIucFRds.roa
Signing time:             Thu 10 Nov 2022 19:08:03 +0000
ROA not before:           Thu 10 Nov 2022 19:08:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398343
IP address blocks:        185.110.62.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:62:f1:2a:ba:c6:4e:f9:d1:a8:ab:e6:c5:8a:25:b3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Nov 10 19:08:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7eacc6f2be258735c066dcb9dbaf8722e70545db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:82:d9:a8:09:fc:a9:5d:f0:f5:bd:85:db:
                    c1:41:7f:75:49:eb:e6:83:a5:f0:e9:06:db:8f:de:
                    3c:a2:ee:8e:09:5b:3c:f5:e7:6e:fb:b8:b9:e0:bb:
                    9c:80:92:1d:a3:6f:67:db:21:93:21:b4:48:81:74:
                    bd:80:c6:1d:49:13:ec:62:b3:77:36:ef:3b:f7:65:
                    a8:d7:cc:a7:81:ce:18:4f:0f:62:07:86:72:3e:3f:
                    84:a7:f3:42:46:e5:48:55:fc:85:f6:dc:df:86:58:
                    52:4a:23:be:02:40:e6:f5:4c:ee:e4:f5:e1:2b:05:
                    20:41:fb:35:ce:2a:83:0a:22:d2:30:44:1b:3b:b5:
                    1b:28:97:e1:7c:4f:9e:d5:4e:d9:26:db:75:e6:0d:
                    f3:ca:c1:cf:4a:bb:dc:88:fd:f3:a0:07:da:ad:b6:
                    9c:54:bc:28:f7:03:97:98:ab:5d:9f:87:4a:91:ec:
                    b6:3e:61:4a:31:06:ee:a6:30:f5:d4:d5:de:7c:51:
                    ef:d0:ef:b9:23:72:42:cb:b7:b4:49:88:fb:da:81:
                    28:8d:36:63:a6:e3:04:77:90:6d:0e:d7:8d:f7:96:
                    8a:92:d6:49:b9:fd:8f:80:0d:b3:12:eb:6a:1e:24:
                    0a:cf:b7:32:db:45:39:f3:50:9e:35:60:a1:8d:5e:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:C6:F2:BE:25:87:35:C0:66:DC:B9:DB:AF:87:22:E7:05:45:DB
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/fqzG8r4lhzXAZty526-HIucFRds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:29:f0:1e:a4:5f:f1:25:96:ff:70:b3:34:86:10:b7:93:f8:
         99:e5:65:f8:d2:41:aa:47:34:ee:bb:97:dd:33:db:0f:a7:28:
         a4:f0:31:ca:e6:d9:92:94:24:07:4c:20:b0:ff:51:08:aa:af:
         a2:df:e7:74:bd:6f:fc:a0:3d:5c:f4:d9:4b:4a:fb:b5:ca:07:
         7b:b6:44:28:3a:ee:27:68:55:af:c2:a2:96:69:c4:0a:1a:0d:
         84:0d:4b:fd:ad:79:f4:2d:35:54:dc:3b:0a:fa:4b:07:58:0e:
         b0:f5:40:e1:ef:7c:1b:10:e8:2d:c2:85:34:9a:8a:6f:ce:7c:
         65:3f:c9:7d:ac:bf:f2:da:1a:f2:e7:3b:62:e0:9f:8e:15:e7:
         d6:1d:df:b1:f0:7c:22:22:9f:50:a9:74:df:6d:34:d3:f6:9e:
         a5:49:51:56:c6:c8:ee:38:d1:d8:a7:30:22:e2:64:4a:a6:c6:
         08:b9:e6:c6:1c:76:26:01:c6:88:c1:29:a1:6a:f8:b7:04:29:
         78:13:69:f9:1a:cc:c6:f4:fb:c9:47:84:1e:ce:12:6b:bd:7e:
         a8:81:32:b3:d1:1d:bf:08:84:4a:6c:8a:d7:e0:ae:82:f8:13:
         0f:d5:f1:e6:55:4d:02:35:e6:d0:6e:b3:6f:dd:02:47:de:c1:
         35:9a:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----