Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/1-f4M87863iwNUD_LP8fXeqyFRv0.roa
File:                     1-f4M87863iwNUD_LP8fXeqyFRv0.roa (raw, json)
Hash identifier:          4R2aEBwbaVep8wpoWznBDakx+mGBk62mc2c987tffL0=
Subject key identifier:   F9:FE:0C:F3:BF:3A:DE:2C:0D:50:3F:CB:3F:C7:D7:7A:AC:85:46:FD
Certificate issuer:       /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial:       08BE3830
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/1-f4M87863iwNUD_LP8fXeqyFRv0.roa
Signing time:             Sat 01 Jan 2022 08:59:47 +0000
ROA not before:           Sat 01 Jan 2022 08:59:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204099
IP address blocks:        185.222.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146683952 (0x8be3830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
        Validity
            Not Before: Jan  1 08:59:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9fe0cf3bf3ade2c0d503fcb3fc7d77aac8546fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:4a:23:7c:e5:b8:62:72:93:b3:93:61:87:
                    cf:da:68:6f:e1:e4:d7:54:d9:5a:e8:c6:1f:ef:0f:
                    02:0a:9f:16:cf:e6:33:af:d8:b6:88:ae:bb:05:c1:
                    1e:9c:6c:89:35:c0:68:37:d6:c6:a3:a0:d3:b1:42:
                    42:7c:fc:60:fa:59:51:40:b2:65:ae:c3:e3:11:57:
                    da:d6:0e:58:e3:3e:ee:d9:07:f7:08:05:30:3c:1a:
                    65:b9:15:71:e4:4e:ed:e7:cc:95:df:fe:0e:21:4f:
                    d5:eb:e5:66:44:81:c7:e3:1a:bf:6a:35:ec:cb:8c:
                    2a:3b:07:80:3c:86:0a:37:ee:91:57:af:3c:ef:d2:
                    32:c7:65:42:38:df:93:3d:49:0f:f8:df:79:71:05:
                    0c:8b:bd:79:29:f0:08:1e:8d:a9:a0:1d:2a:60:78:
                    ff:9d:77:8c:83:1f:2b:e9:14:3d:87:e6:aa:c1:a9:
                    82:14:41:8e:0d:74:29:db:ad:eb:52:56:a3:94:ea:
                    fb:20:4b:a1:c5:c8:de:22:d6:1b:43:ee:c4:80:da:
                    64:1a:14:cb:73:43:a1:3b:87:7c:0a:ea:50:8f:1a:
                    46:5a:92:bf:29:36:a4:2a:9c:e6:91:00:02:02:62:
                    8b:27:21:db:a2:4c:d5:70:46:dd:c0:f5:fa:0b:2a:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FE:0C:F3:BF:3A:DE:2C:0D:50:3F:CB:3F:C7:D7:7A:AC:85:46:FD
            X509v3 Authority Key Identifier:
                keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/1-f4M87863iwNUD_LP8fXeqyFRv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:af:be:82:0c:34:48:3f:b6:1c:10:52:72:16:03:1e:8a:0c:
         b3:df:ef:ac:e9:74:d0:cb:fc:11:ca:12:8b:a6:1a:a4:e1:18:
         7d:70:a3:e2:ee:2b:23:e6:28:73:d3:90:50:58:47:ac:27:59:
         88:e0:e5:96:31:79:6d:08:f6:f1:3a:35:39:ab:20:65:20:d3:
         3a:e6:13:00:80:a6:b6:5a:e1:d8:57:4f:d0:73:e0:c9:ae:cd:
         0e:61:b9:f3:1e:12:cb:ca:6c:ab:b3:76:eb:d3:81:d6:54:d0:
         f3:83:84:a9:38:4c:37:20:5b:56:94:e9:dd:6a:c8:24:76:fa:
         ce:6c:da:53:7a:46:f6:7f:4b:15:2f:2b:6a:04:c8:13:bd:89:
         a3:0c:83:e8:40:7b:46:22:ed:0d:e5:ba:01:9f:e6:26:ec:68:
         61:c8:73:1f:42:a4:ec:ae:38:8a:7f:18:00:c2:9c:5a:02:1a:
         9f:ed:8f:61:00:6a:1c:cd:36:1c:4a:f7:12:87:fe:40:d2:fe:
         bc:b8:fa:52:6e:9d:62:c6:27:4a:a2:92:89:49:12:99:ec:18:
         ae:63:8e:72:5d:1d:15:f4:85:dd:c6:12:1e:b7:23:2d:f1:61:
         0d:3a:d3:7d:a0:7a:04:29:d6:61:4d:8a:ab:27:17:e8:63:36:
         ef:37:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----