Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/dtIy6DR01sDH7tDnWGxNL2jb1VE.roa
File:                     dtIy6DR01sDH7tDnWGxNL2jb1VE.roa (raw, json)
Hash identifier:          70oeJIiNrkiYS5dF3binSXZ3Ok0KENTG8QLqTIu5DJI=
Subject key identifier:   76:D2:32:E8:34:74:D6:C0:C7:EE:D0:E7:58:6C:4D:2F:68:DB:D5:51
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       01830AD482A61F543940B768786AD06C7F49
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/dtIy6DR01sDH7tDnWGxNL2jb1VE.roa
Signing time:             Sun 04 Sep 2022 23:27:22 +0000
ROA not before:           Sun 04 Sep 2022 23:27:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61423
IP address blocks:        185.202.132.0/24 maxlen: 24
                          2a0a:d6c0:9::/48 maxlen: 48
                          2a0a:d6c0:4::/48 maxlen: 48
                          2a0a:d6c0:efef::/48 maxlen: 48
                          2a0a:d6c0:efff::/48 maxlen: 48
                          2a0a:d6c0:8::/48 maxlen: 48
                          2a0a:d6c0:3::/48 maxlen: 48
                          2a0a:d6c0:eff3::/48 maxlen: 48
                          2a0a:d6c0:eff1::/48 maxlen: 48
                          2a0a:d6c0:11::/48 maxlen: 48
                          2a0a:d6c0:7::/48 maxlen: 48
                          2a0a:d6c0:eff2::/48 maxlen: 48
                          2a0a:d6c0:2::/48 maxlen: 48
                          2a0a:d6c0:5::/48 maxlen: 48
                          2a0a:d6c0::/48 maxlen: 48
                          2a0a:d6c0:eff0::/48 maxlen: 48
                          2a0a:d6c0:10::/48 maxlen: 48
                          2a0a:d6c0:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0a:d4:82:a6:1f:54:39:40:b7:68:78:6a:d0:6c:7f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Sep  4 23:27:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76d232e83474d6c0c7eed0e7586c4d2f68dbd551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:22:32:94:1f:3e:fa:76:4a:62:74:1c:b7:
                    c8:5a:ec:ef:32:15:e7:73:ac:a4:f2:41:d5:bf:bd:
                    68:01:54:f7:c8:36:5d:bf:bf:3d:28:35:50:0a:7d:
                    b4:16:4a:76:25:27:8e:aa:1a:d4:eb:a5:9b:72:3d:
                    b6:c4:e3:ad:69:ed:36:25:83:ad:7b:b0:e5:14:9b:
                    7b:09:32:67:45:16:f5:0f:fb:5b:ce:f4:e9:35:04:
                    bd:96:25:bf:42:6d:cd:92:05:b2:9e:94:b4:77:cb:
                    90:4b:29:0b:8d:a8:2d:70:8d:87:c6:d3:61:d0:de:
                    8c:74:6a:c8:91:a4:d9:9f:ee:0f:c6:10:15:28:1b:
                    d5:b0:70:e5:d0:82:23:6b:6a:79:7e:7e:89:bf:f9:
                    5c:ad:8c:8c:f4:c8:52:95:15:e9:6f:bb:4f:67:7e:
                    cf:a5:fa:13:a5:1e:49:ca:51:46:a1:a9:a3:26:cd:
                    a6:41:e1:4d:1f:3e:df:28:37:8f:fc:b5:01:9c:16:
                    b2:dd:aa:ae:03:be:8d:ee:c2:9a:e1:d8:47:d0:a7:
                    ad:3a:90:55:cc:26:99:36:6b:09:8c:db:35:ea:e4:
                    d9:0a:95:50:b6:f5:4c:c9:c5:9d:d7:b0:01:b5:82:
                    dc:51:e7:86:dc:88:75:dc:f1:d6:51:78:41:cd:d5:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:32:E8:34:74:D6:C0:C7:EE:D0:E7:58:6C:4D:2F:68:DB:D5:51
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/dtIy6DR01sDH7tDnWGxNL2jb1VE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.132.0/24
                IPv6:
                  2a0a:d6c0::/48
                  2a0a:d6c0:2::-2a0a:d6c0:9:ffff:ffff:ffff:ffff:ffff
                  2a0a:d6c0:10::/47
                  2a0a:d6c0:efef::-2a0a:d6c0:eff3:ffff:ffff:ffff:ffff:ffff
                  2a0a:d6c0:efff::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:ca:10:23:de:86:64:d2:94:7c:32:0f:52:dd:a2:3f:d3:
         0c:ed:58:3f:b4:e7:6b:bd:bd:83:16:81:9e:94:bb:ae:1a:8f:
         b2:93:77:22:c5:0c:69:e0:6f:3b:e9:74:a9:27:24:b4:0f:84:
         b0:cc:ba:bf:ae:64:d9:d1:bd:c2:0b:e3:21:2c:a7:ae:1d:d8:
         dd:7f:cb:21:17:8d:3a:39:c6:8d:dc:72:84:1b:e5:79:28:7f:
         3b:df:ab:15:7b:6b:c5:62:5f:ce:99:55:c8:89:5c:00:96:a8:
         56:2b:3a:cf:47:d8:19:89:d7:12:d9:9f:cf:d7:37:34:2d:39:
         46:b4:76:b9:63:92:2c:60:d2:ff:e2:11:1b:19:b4:b1:17:6f:
         6b:16:77:70:e5:b8:2b:a0:18:44:6c:a4:35:af:b3:e6:06:17:
         d7:41:fe:cb:af:5b:fb:5c:47:9e:02:02:ae:1f:83:86:55:b7:
         57:77:57:ef:a2:69:b8:69:c3:56:56:63:a4:a3:ab:29:ec:95:
         83:78:01:27:28:cc:4a:c6:a9:31:3d:fb:ac:e9:ea:c2:74:82:
         27:49:f5:49:18:25:07:d0:4a:86:a6:04:b1:69:dd:ac:24:34:
         bb:33:da:ad:24:4b:6f:2b:f0:60:7d:a0:b1:29:77:95:88:a8:
         6f:39:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----