Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/gl6p_zr8JcRpki8LUBM-7RQi8dU.roa
File:                     gl6p_zr8JcRpki8LUBM-7RQi8dU.roa (raw, json)
Hash identifier:          J9gb/GmkP26sr8EnsGBM2dTyONC0xG7sY2AejFqJoxQ=
Subject key identifier:   82:5E:A9:FF:3A:FC:25:C4:69:92:2F:0B:50:13:3E:ED:14:22:F1:D5
Certificate issuer:       /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial:       0D720670
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/gl6p_zr8JcRpki8LUBM-7RQi8dU.roa
Signing time:             Sat 01 Jan 2022 14:00:50 +0000
ROA not before:           Sat 01 Jan 2022 14:00:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205202
IP address blocks:        185.225.97.0/24 maxlen: 24
                          185.225.98.0/24 maxlen: 24
                          185.225.99.0/24 maxlen: 24
                          2a0d:ac00:2::/48 maxlen: 48
                          2a0d:ac00:1002::/48 maxlen: 48
                          2a0d:ac00::/48 maxlen: 48
                          2a0d:ac00:1000::/48 maxlen: 48
                          2a0d:ac00:6::/48 maxlen: 48
                          2a0d:ac00:1006::/48 maxlen: 48
                          2a0d:ac00:dc01::/48 maxlen: 48
                          2a0d:ac00:1007::/48 maxlen: 48
                          2a0d:ac00:7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225576560 (0xd720670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
        Validity
            Not Before: Jan  1 14:00:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=825ea9ff3afc25c469922f0b50133eed1422f1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:e8:36:ac:9d:85:ce:43:30:cb:b9:8c:32:
                    61:9f:a3:eb:37:01:be:30:16:63:77:83:75:49:af:
                    2d:36:e5:69:13:5a:49:61:69:c2:c7:2d:74:47:9b:
                    bb:6d:81:64:cc:06:72:22:a8:53:b7:62:c7:e2:9f:
                    50:0f:f9:48:76:02:d7:30:e5:88:a5:4b:65:ca:d2:
                    0c:a8:07:07:b4:a5:ca:59:a0:99:c1:2d:65:6e:c1:
                    1c:aa:84:a6:0e:65:04:31:98:04:4a:23:a9:b3:84:
                    93:ed:6e:9e:ef:b0:cc:ec:29:24:fb:18:f7:12:b2:
                    02:6e:9d:44:e3:d9:6b:10:e5:38:80:22:43:54:a8:
                    c4:4b:6b:e6:54:f9:fd:a0:21:c1:97:e2:53:91:51:
                    0e:68:58:70:20:d6:3d:19:6a:95:cb:94:b8:15:4a:
                    da:a3:c0:6a:7f:21:a1:bf:ad:22:ad:ca:cf:a3:51:
                    55:8d:68:ab:6c:b9:d5:ca:a4:66:1f:59:04:3d:b5:
                    c7:90:1d:fc:6f:0a:27:13:13:ab:a1:5d:ae:85:4a:
                    b4:9a:bb:71:47:14:0c:01:7e:bc:a7:88:0c:35:71:
                    ba:a6:4b:b1:60:d3:21:ad:1a:d9:6d:1c:cd:a9:5c:
                    56:df:5b:c1:4a:59:aa:d5:31:6e:35:c1:60:41:cd:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5E:A9:FF:3A:FC:25:C4:69:92:2F:0B:50:13:3E:ED:14:22:F1:D5
            X509v3 Authority Key Identifier:
                keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/gl6p_zr8JcRpki8LUBM-7RQi8dU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.97.0-185.225.99.255
                IPv6:
                  2a0d:ac00::/48
                  2a0d:ac00:2::/48
                  2a0d:ac00:6::/47
                  2a0d:ac00:1000::/48
                  2a0d:ac00:1002::/48
                  2a0d:ac00:1006::/47
                  2a0d:ac00:dc01::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:0e:43:39:75:99:41:71:4a:a3:53:91:53:7b:42:aa:00:
         81:d8:9e:df:b0:1f:6b:4a:f4:03:0b:eb:11:04:ce:18:35:23:
         c8:1d:1e:9c:55:be:e1:69:88:d4:8c:72:18:f0:5d:45:5f:1e:
         5e:a0:53:d2:48:1e:77:d7:ce:2d:07:65:00:51:01:3e:a8:cf:
         dc:3a:f7:e0:58:e0:b8:d8:03:6c:6e:d1:e3:ac:e4:b1:6c:66:
         3f:fb:d8:20:73:0d:cf:bd:e7:72:7d:db:1b:ad:71:20:5a:c4:
         c7:ec:ad:23:6a:33:e1:4c:28:ec:4c:46:92:36:a9:14:8e:6d:
         83:67:fd:b7:87:2e:c8:17:d9:84:22:9f:fd:10:3d:39:8c:74:
         21:f9:16:62:60:cc:d6:5e:d0:f8:e1:da:88:47:ed:83:c0:d5:
         5a:69:e1:cb:f4:35:cb:6a:52:23:be:98:05:4d:5e:c5:e4:e1:
         1f:6a:c8:09:50:1f:9d:da:3b:1d:45:b7:bc:28:d8:ab:af:4e:
         7f:70:46:4f:ae:c5:90:86:45:a2:b0:42:05:9e:b6:6c:68:1b:
         97:b5:9b:54:7b:af:dc:81:d1:cb:c2:e0:c8:b0:ed:65:bf:22:
         ab:b7:3b:a4:34:d8:1a:9a:a2:12:69:33:9a:45:49:ed:23:f7:
         f7:bb:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----