Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/pmZb2QO8gWx_TulSn5cfaPLSv34.roa
File:                     pmZb2QO8gWx_TulSn5cfaPLSv34.roa (raw, json)
Hash identifier:          bCgL81sbBhduGTBx5zWY1NqFMeZ0MX41XMsoiyXxYVs=
Subject key identifier:   A6:66:5B:D9:03:BC:81:6C:7F:4E:E9:52:9F:97:1F:68:F2:D2:BF:7E
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       098F1AF8
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/pmZb2QO8gWx_TulSn5cfaPLSv34.roa
Signing time:             Sat 01 Jan 2022 05:01:05 +0000
ROA not before:           Sat 01 Jan 2022 05:01:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208722
IP address blocks:        5.45.192.0/18 maxlen: 24
                          178.154.128.0/19 maxlen: 24
                          84.252.160.0/19 maxlen: 24
                          37.9.64.0/18 maxlen: 24
                          141.8.128.0/18 maxlen: 24
                          93.158.128.0/18 maxlen: 24
                          37.140.128.0/18 maxlen: 24
                          95.108.128.0/17 maxlen: 24
                          185.32.187.0/24 maxlen: 24
                          87.250.224.0/19 maxlen: 24
                          77.88.0.0/18 maxlen: 24
                          213.180.192.0/19 maxlen: 24
                          178.154.160.0/19 maxlen: 24
                          5.255.192.0/18 maxlen: 24
                          2a02:6b8::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160373496 (0x98f1af8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Jan  1 05:01:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6665bd903bc816c7f4ee9529f971f68f2d2bf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:08:c6:38:74:2a:8f:57:9b:5f:67:5e:e4:
                    17:66:f1:08:1c:f5:53:fc:40:85:b1:38:5a:61:b0:
                    bf:54:e8:ea:d2:fb:9b:33:b6:33:7b:3c:35:55:69:
                    62:2e:89:8b:5b:4e:a5:1d:72:57:04:55:19:c6:34:
                    57:27:00:34:16:dd:6a:63:e1:45:b7:83:7e:65:a5:
                    3e:e7:c5:03:2b:85:8a:de:fe:b5:88:21:f6:92:f6:
                    48:46:25:73:94:ef:8c:11:b1:d0:a8:f2:9f:6a:ca:
                    93:25:4b:9c:ee:3b:62:f3:95:33:a6:54:8e:19:44:
                    b3:ff:09:d2:d1:58:9b:13:95:fb:f1:49:82:4f:c9:
                    82:54:02:b9:20:51:62:3a:2b:f4:42:93:a4:1b:bb:
                    82:f5:b3:0c:e6:a8:5c:c0:5f:78:0b:4b:ea:bb:60:
                    f0:73:63:cd:15:29:83:55:c0:6c:07:5e:1b:df:0a:
                    32:f6:a7:45:85:91:47:31:24:7c:17:7f:f0:e6:ea:
                    c9:18:0d:63:4d:81:f6:bf:a4:ef:20:7f:6d:21:dd:
                    e1:40:74:2b:92:77:c4:b2:06:b6:0d:09:c3:34:77:
                    fd:55:3c:10:e8:0d:99:1d:85:c5:62:7c:a4:80:cf:
                    a4:45:9d:7e:0c:78:e1:9e:e8:db:1b:39:fc:5a:4e:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:66:5B:D9:03:BC:81:6C:7F:4E:E9:52:9F:97:1F:68:F2:D2:BF:7E
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/pmZb2QO8gWx_TulSn5cfaPLSv34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.192.0/18
                  5.255.192.0/18
                  37.9.64.0/18
                  37.140.128.0/18
                  77.88.0.0/18
                  84.252.160.0/19
                  87.250.224.0/19
                  93.158.128.0/18
                  95.108.128.0/17
                  141.8.128.0/18
                  178.154.128.0/18
                  185.32.187.0/24
                  213.180.192.0/19
                IPv6:
                  2a02:6b8::/29

    Signature Algorithm: sha256WithRSAEncryption
         bd:c1:31:45:a6:cd:5e:f7:66:09:2a:1e:a4:48:13:ec:b6:9e:
         e1:b9:b5:48:7a:d3:50:1a:c6:a3:29:e6:ba:b8:c4:cb:19:0b:
         70:68:57:8d:5b:55:98:f6:75:2b:cc:c8:a1:da:5f:e7:2f:e1:
         db:b9:f0:93:71:9f:39:e4:2a:84:46:75:92:c0:53:24:6f:8f:
         7e:b5:04:e8:01:0d:83:5e:eb:0e:29:da:23:fe:bb:b8:7c:70:
         93:da:8c:e9:72:6c:24:d6:8c:8e:84:48:19:96:4a:3c:83:92:
         53:b4:c9:a2:48:a5:8e:b4:7e:b3:99:07:79:90:dd:34:7d:0b:
         23:66:63:d6:1d:03:c8:7d:08:59:12:6a:3a:d0:8b:72:a0:18:
         0b:56:b6:b8:c3:a6:81:cc:22:56:3f:79:0c:38:c2:45:f6:a6:
         4e:6d:5f:ca:1a:6a:0d:6f:d6:9e:49:9f:0c:59:a4:a9:a6:ee:
         73:cd:fe:e0:36:f3:0d:20:af:e8:d6:90:d1:23:3c:53:ac:d7:
         bd:d9:c2:55:23:cc:1a:46:fa:59:8a:e8:04:74:65:44:e4:cc:
         b7:65:e5:d8:73:72:08:58:6f:c2:42:b4:4a:a5:38:63:bb:61:
         c2:f3:2c:bd:06:72:22:4a:57:ca:14:d4:f4:9b:e2:b1:e4:58:
         48:8f:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----