Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/V4q1CYlaQ1dWpmjlJRtCL9zrz84.roa
File:                     V4q1CYlaQ1dWpmjlJRtCL9zrz84.roa (raw, json)
Hash identifier:          hQ4Aiay1a/u1fGuqu9g4d3i8ZnCvAaIacDMHWZZ64X4=
Subject key identifier:   57:8A:B5:09:89:5A:43:57:56:A6:68:E5:25:1B:42:2F:DC:EB:CF:CE
Certificate issuer:       /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial:       42A9
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/V4q1CYlaQ1dWpmjlJRtCL9zrz84.roa
Signing time:             Mon 27 Jun 2022 12:52:33 +0000
ROA not before:           Mon 27 Jun 2022 12:52:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47586
IP address blocks:        146.19.211.0/24 maxlen: 24
                          2a00:b160::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17065 (0x42a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
        Validity
            Not Before: Jun 27 12:52:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=578ab509895a435756a668e5251b422fdcebcfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:37:d0:a6:98:fe:ab:da:33:05:b3:38:ed:
                    da:80:0b:16:e2:5c:e8:41:e1:fa:04:cf:c3:98:ac:
                    ec:27:45:87:6d:aa:05:28:2d:d5:32:fb:b5:e0:11:
                    ff:5e:f0:bb:d0:eb:93:fa:22:6a:eb:ad:28:ad:39:
                    46:b7:f6:e0:18:85:76:cf:ec:9b:89:a3:0e:76:9f:
                    de:58:4a:0d:ba:f9:13:9c:21:43:9a:0f:71:4a:86:
                    75:67:49:d0:00:b5:bf:6d:de:47:6b:95:0d:08:f9:
                    e6:5e:a5:52:c1:7b:41:ba:87:1b:e8:c6:83:77:bd:
                    f4:cb:e7:59:d0:80:77:ab:e4:d7:33:f5:ad:96:22:
                    8f:9a:2c:a3:1a:5c:5e:ad:8e:66:18:59:ca:da:eb:
                    2d:13:3e:01:ad:7d:96:ab:27:84:83:30:b2:3f:5f:
                    7c:a1:1f:83:c1:28:17:c3:4b:11:19:28:ee:8f:9e:
                    fa:c3:b9:c2:98:f2:94:c0:88:fc:e1:88:78:34:d5:
                    eb:41:62:fd:03:3e:77:d6:79:74:e4:e4:0c:5a:82:
                    cc:f9:55:7e:a4:b1:9b:aa:21:3c:e2:74:b3:a1:13:
                    31:be:05:1f:12:2e:ce:c9:c5:04:da:ec:28:18:80:
                    47:b8:15:f4:e2:01:a2:85:af:57:73:c7:ed:0f:0d:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8A:B5:09:89:5A:43:57:56:A6:68:E5:25:1B:42:2F:DC:EB:CF:CE
            X509v3 Authority Key Identifier:
                keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/V4q1CYlaQ1dWpmjlJRtCL9zrz84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.211.0/24
                IPv6:
                  2a00:b160::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:7e:45:f8:9d:90:4f:fa:5f:48:85:e4:f3:1e:c4:bc:41:
         d3:e0:87:28:20:bc:c5:1c:a9:27:b0:96:09:a2:9a:b7:de:a7:
         fa:b5:f2:ed:6f:16:99:7a:12:71:dc:6e:df:29:12:6c:26:33:
         9e:b1:fd:a3:13:be:51:29:a5:a3:18:b7:ba:b1:07:62:7d:21:
         e0:ac:c0:e7:61:18:84:72:3a:b8:21:56:70:15:f0:95:f9:24:
         03:40:85:29:98:c0:c0:59:69:e8:5a:ae:25:c2:f0:28:66:13:
         97:aa:0c:d9:6b:73:c3:b2:59:75:ff:da:9a:5a:3e:e7:ef:df:
         b1:7a:fd:6a:3f:ba:24:19:c3:10:d7:aa:70:89:37:6d:37:74:
         b3:ec:e5:60:ef:18:0f:a7:6a:d3:1f:e7:a1:ed:ce:6d:a6:c7:
         c9:6b:20:d8:95:a6:c3:3b:30:89:5a:71:2e:f4:06:2e:be:ab:
         17:b0:fd:c6:bc:36:e2:4b:58:e3:52:ac:0e:78:2b:ad:0b:b7:
         01:ba:d1:dd:25:92:0d:8c:7f:d7:cb:3a:3f:ff:86:f8:1b:72:
         82:06:ef:bf:03:36:a0:9f:b0:ee:b0:f0:5d:c0:ba:c5:c2:a1:
         65:c7:77:8c:63:04:36:00:39:fd:5b:55:0c:f5:1f:94:a0:fe:
         47:be:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----